Security Courses

IEEE

On the Security of Two-Round Multi-Signatures

Analyzes security flaws in two-round multi-signature schemes, presents attacks, and proposes mBCJ as a secure alternative for large-scale collaborative signing applications.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

IEEE

Dangerous Skills - Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems

Explore security vulnerabilities in virtual personal assistants, focusing on voice squatting and masquerading attacks. Learn about risks and mitigation strategies for third-party functions on smart speakers.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

IEEE

Understanding the Security of ARM Debugging Features

Comprehensive analysis of ARM debugging features' security implications across various platforms, exposing vulnerabilities and demonstrating the Nailgun attack to highlight potential risks.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

IEEE

Lay Down the Common Metrics - Evaluating Proof of Work Consensus Protocols' Security

Quantitative analysis framework for evaluating security of Proof of Work consensus protocols, revealing vulnerabilities and proposing improvements for blockchain systems.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

IEEE

Deciding Equivalence Properties in Security Protocols - Theory and Practice

Automated verification of cryptographic protocols: new complexity results and decision procedures for static equivalence, trace equivalence, and labelled bisimilarity, with implementation in the DEEPSEC tool.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

IEEE

Security Analysis of Emerging Smart Home Applications

Empirical security analysis of SmartThings smart home platform reveals design flaws leading to overprivilege and vulnerabilities in event subsystem, demonstrating potential risks in emerging IoT frameworks.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

IEEE

Security of the J-PAKE Password-Authenticated Key Exchange Protocol

Comprehensive security analysis of J-PAKE protocol, proving its robustness against various attacks and demonstrating its suitability for practical use in password-authenticated key exchange.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

IEEE

Connection-Oriented DNS to Improve Privacy and Security

Enhancing DNS privacy and security through TCP and TLS, addressing eavesdropping, spoofing, and DoS attacks while maintaining performance with careful implementation choices.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Black Hat

Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet

Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Black Hat

Shield with Hole - New Security Mitigation Helps Us Escape Chrome Sandbox to Exfiltrate User Privacy

Explore how new security measures in Chrome can be exploited to bypass the sandbox and compromise user privacy, revealing potential vulnerabilities in browser protection mechanisms.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Quantum Security and Cryptography - You Are - Probably - Doing it Wrong

Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Stopping Snake Oil with Smaller Healthcare Providers - Addressing Security with Actionable Plans

Practical strategies for small healthcare providers to protect against cyber threats, focusing on actionable plans and cost-effective solutions to safeguard patient data and prevent ransomware attacks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Black Hat

The Dark Side of the Cloud - How a Lack of EMR Security Controls Helped Amplify the Opioid Crisis

Explores how manipulation of an Electronic Health Records system contributed to the opioid crisis, highlighting the role of inadequate security controls in amplifying prescription drug abuse.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

When Lightning Strikes Thrice - Breaking Thunderbolt 3 Security

Explore Thunderspy attacks that compromise Thunderbolt security, revealing vulnerabilities in device authentication and DMA protection across Thunderbolt 1, 2, and 3 interfaces.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk