Security Courses

IEEE

A Minimalist Approach to Formalizing Analog Sensor Security

Explores a minimalist approach to formalizing analog sensor security, systematizing knowledge of attacks and defenses, and introducing a simple model for expressing security properties in sensor circuitry.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

IEEE

SoK- Security Evaluation of Home Based IoT Deployment

Comprehensive security evaluation methodology for home IoT devices, analyzing attack techniques, mitigations, and stakeholders. Includes assessment of 45 devices to identify research gaps.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

IEEE

Short Text, Large Effect - Measuring the Impact of User Reviews on Android App Security & Privacy

Exploring the impact of user reviews on Android app security and privacy, analyzing 4.5M reviews to identify concerns and measure developers' responses through code changes.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

IEEE

An Extensive Formal Security Analysis of the OpenID Financial Grade API

Comprehensive formal security analysis of OpenID Financial-grade API, uncovering vulnerabilities and proposing mitigations for this high-stakes OAuth 2.0 profile designed for Open Banking scenarios.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

IEEE

SoK: The Challenges, Pitfalls, and Perils of Using Hardware Performance Counters for Security

Explores challenges and pitfalls of using Hardware Performance Counters for security applications, highlighting measurement imprecisions and incorrect assumptions that can undermine protection efforts.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

IEEE

Impossibility of Precise and Sound Termination-Sensitive Security Enforcements

Explores impossibility of precise, sound enforcement of termination-sensitive security policies. Analyzes static and dynamic mechanisms, proving limitations and proposing alternatives for indirect termination-sensitive noninterference.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

IEEE

Building Hardened Internet-of-Things Clients with Language-Theoretic Security

Explore building secure IoT clients using Language-theoretic Security. Learn to implement robust input handling for XMPP and MQTT protocols, enhancing security and performance in IoT applications.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

IEEE

An Experimental Security Analysis of an Industrial Robot Controller

Experimental security analysis of industrial robot controllers, revealing vulnerabilities and potential attacks that can compromise precision, control logic, and safety in automated manufacturing environments.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

IEEE

Sending Out an SMS - Characterizing the Security of the SMS Ecosystem with Public Gateways

Explore SMS ecosystem security, analyzing public gateways' vulnerabilities, sensitive data transmission, and misuse for account fraud evasion. Gain insights on improving SMS-based authentication and combating abuse.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

IEEE

I Think They're Trying to Tell Me Something - Advice Sources and Selection for Digital Security

Explores how users select digital security advice, revealing the impact of source trustworthiness, relatable narratives, and reasons for rejecting advice. Offers insights for developing more effective security interventions.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

IEEE

How Secure and Quick is QUIC? Provable Security and Performance Analyses

Analyzes QUIC protocol's security and performance, revealing strengths and vulnerabilities. Explores trade-offs between latency reduction and robust security in this innovative transport protocol.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

USENIX

The Remote Working Security Conundrum - What Is Reasonably Secure Anyway?

Explore challenges and solutions for securing remote work environments, from physical security to application layer, with focus on novel technologies and practical approaches.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

USENIX

BASTION - A Security Enforcement Network Stack for Container Networks

Innovative security enforcement network stack for containers, enhancing visibility and isolation while improving performance. Mitigates attacks and optimizes inter-container communication.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

USENIX

Lock It and Still Lose It - On the -In-Security of Automotive Remote Keyless Entry Systems

Unveils vulnerabilities in automotive remote keyless entry systems, demonstrating how attackers can exploit flaws to gain unauthorized access to vehicles from major manufacturers.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

USENIX

Key Per IO Security Subsystem Class for NVM Express Storage Devices

Explore KPIO, a new security standard for NVMe storage devices offering granular encryption, enhanced data protection, and improved compliance with data privacy regulations.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk