Cache Attacks Courses and Certifications

IEEE

NetCAT - Practical Cache Attacks from the Network

Reverse engineering DDIO to demonstrate NetCAT, a network-based cache attack enabling remote keystroke timing attacks and covert channels, highlighting security risks in modern Intel processors.

• YouTube
• 17 minutes
• On-Demand
• Free Video

IEEE

The 9 Lives of Bleichenbacher's CAT - New Cache Attacks on TLS Implementations

Explores novel cache-based attacks on TLS implementations, demonstrating vulnerabilities in popular systems and introducing a parallelization technique for padding oracle attacks against RSA.

• YouTube
• 17 minutes
• On-Demand
• Free Video

TheIACR

The 9 Lives of Bleichenbacher's CAT - New Cache Attacks on TLS Implementations

Explore new cache attacks on TLS implementations, focusing on Bleichenbacher's CAT and its evolution in modern cryptography.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

USENIX Enigma Conference

LLC Cache Attacks: Applicability and Countermeasures

Exploring Last Level Cache attacks, their applicability across various scenarios, and potential countermeasures to enhance system security and protect user privacy.

• YouTube
• 20 minutes
• On-Demand
• Free Video

USENIX

Malicious Management Unit - Why Stopping Cache Attacks in Software is Harder Than You Think

Explores indirect cache attacks bypassing software-based defenses by exploiting MMU operations, challenging existing security measures and revealing vulnerabilities in cache isolation techniques.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

TheIACR

Pseudorandom Black Swans: Cache Attacks on CTR_DRBG

Explore vulnerabilities in CTR_DRBG cryptographic algorithm, focusing on cache attacks and key rotation flaws. Learn about potential risks in TLS handshakes and SGX execution.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Cache Side-Channel Attacks and Mitigations

Explore cache side-channel attacks and mitigations, delving into virtual memory, caches, and microarchitecture. Gain hands-on experience discovering and exploiting vulnerabilities through practical exercises and real-world scenarios.

• edX
• 10 weeks, 3-4 hours a week
• On-Demand
• Free Online Course (Audit)

Black Hat

I Know Where You've Been - Geo-Inference Attacks Via The Browser Cache

Explore geo-inference attacks via browser cache, revealing how websites can sniff users' locations. Learn about vulnerabilities in popular sites, impact on various browsers, and potential defenses against these privacy threats.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

IEEE

Last-Level Cache Side-Channel Attacks Are Practical

Explore practical last-level cache side-channel attacks, their implementation, and impact on security across cores and VMs, with a focus on GnuPG vulnerabilities.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Cache Side Channel Attacks - CPU Design As A Security Problem

Explore CPU cache vulnerabilities and side-channel attacks, their impact on security, and potential mitigations in modern computing environments like cloud and multi-user systems.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

IEEE

Scatter and Split Securely - Defeating Cache Contention and Occupancy Attacks

Learn techniques to protect against cache contention and occupancy attacks, enhancing system security through innovative data scattering and splitting methods.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

IEEE

Adversarial Prefetch - New Cross-Core Cache Side Channel Attacks

Explore new cross-core cache side channel attacks using adversarial prefetch techniques, uncovering potential security vulnerabilities in modern computer systems.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

IEEE

Randomized Last-Level Caches Are Still Vulnerable to Cache Side-Channel Attacks! But We Can Fix It

Explore vulnerabilities in randomized last-level caches and discover effective solutions to mitigate cache side-channel attacks in computer systems.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

Black Hat

Page Cache Attacks - Microarchitectural Attacks on Flawless Hardware

Explore microarchitectural attacks on flawless hardware, focusing on page cache vulnerabilities. Learn about state-of-the-art techniques, countermeasures, and implications for system security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Bugcrowd

Three Ways to Escalate XSS Bug Severity - Web Cache Attacks

Master three powerful techniques to escalate XSS vulnerabilities, including reflected XSS and self XSS, with practical demonstrations of web cache deception and poisoning methods.

• YouTube
• 16 minutes
• On-Demand
• Free Video