Homeland Security Courses

IEEE

Security Update Labels - Establishing Economic Incentives for Security Patching of IoT Consumer Products

Explore how mandatory security update labels for IoT devices can incentivize manufacturers to improve product security and influence consumer choices in the expanding IoT market.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

IEEE

SoK - Sanitizing for Security

Overview of dynamic bug-finding tools (sanitizers) for C/C++, their security vulnerability coverage, performance, and trade-offs.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

IEEE

On the Security of Two-Round Multi-Signatures

Analyzes security flaws in two-round multi-signature schemes, presents attacks, and proposes mBCJ as a secure alternative for large-scale collaborative signing applications.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

IEEE

Dangerous Skills - Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems

Explore security vulnerabilities in virtual personal assistants, focusing on voice squatting and masquerading attacks. Learn about risks and mitigation strategies for third-party functions on smart speakers.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

IEEE

Understanding the Security of ARM Debugging Features

Comprehensive analysis of ARM debugging features' security implications across various platforms, exposing vulnerabilities and demonstrating the Nailgun attack to highlight potential risks.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

IEEE

Lay Down the Common Metrics - Evaluating Proof of Work Consensus Protocols' Security

Quantitative analysis framework for evaluating security of Proof of Work consensus protocols, revealing vulnerabilities and proposing improvements for blockchain systems.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

IEEE

Deciding Equivalence Properties in Security Protocols - Theory and Practice

Automated verification of cryptographic protocols: new complexity results and decision procedures for static equivalence, trace equivalence, and labelled bisimilarity, with implementation in the DEEPSEC tool.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

IEEE

Security Analysis of Emerging Smart Home Applications

Empirical security analysis of SmartThings smart home platform reveals design flaws leading to overprivilege and vulnerabilities in event subsystem, demonstrating potential risks in emerging IoT frameworks.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

IEEE

Security of the J-PAKE Password-Authenticated Key Exchange Protocol

Comprehensive security analysis of J-PAKE protocol, proving its robustness against various attacks and demonstrating its suitability for practical use in password-authenticated key exchange.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

IEEE

Connection-Oriented DNS to Improve Privacy and Security

Enhancing DNS privacy and security through TCP and TLS, addressing eavesdropping, spoofing, and DoS attacks while maintaining performance with careful implementation choices.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

AGU

Geoscience Research - American Security

Explore how geoscience research enhances national security through advanced technologies, water resource management, and cutting-edge research at federal laboratories.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Red Hat

Middleware Security - Authentication, Authorization, and Auditing Services

Explore middleware security essentials: authentication, authorization, auditing. Learn about Red Hat's solutions, including single sign-on service, and real-world implementations for secure enterprise IT control.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Red Hat

Security and Compliance - From Existing Infrastructure to Cloud

Explore best practices for maintaining security and compliance across IT ecosystems, from existing infrastructure to cloud environments, using Red Hat solutions and industry standards.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Red Hat

Container Security Reality Check - The Container Is Only the Beginning

Explore container security, debunk myths, and learn best practices for enterprise IT. Discover how to manage container lifecycles, choose secure images, and implement effective operational processes.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Red Hat

Red Hat Security in a Post-Shellshock World

Explore Red Hat's evolving security response strategies, focusing on lessons from Shellshock and Heartbleed. Learn how to prepare for future incidents and provide feedback on improving security readiness.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk