Upload File

a story of two security tales - usenix · certificate java ssi- resolving...

  • Home
  • Documents
  • A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
28
A Story of Two Security Tales

Upload: others

Post on 28-Jun-2020

6 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

A Story of Two Security Tales

Page 2: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 3: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 4: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 5: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 6: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

~10k ~1.3mio

Page 7: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

30% 15%

Page 8: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 9: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

70% 6%

Page 10: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 11: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 12: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 13: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 14: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 15: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 16: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 17: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 18: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

“First, never underestimate the power of inertia. Second, that power can be harnessed.”

Richard Thaler

Page 19: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 20: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 21: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 22: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 23: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 24: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security

Page 25: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security

ControlNudged

Page 26: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security Nudged

ControlNudged

Page 27: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 28: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

USENIX Security '14 Full Proceedings (PDF)

Measuring the Longitudinal Evolution of the Online ... · 34 24th USENIX Security Symposium USENIX Association of Silk Road, dubbed “Silk Road 2.0” was online—set up by former

Take This Personally: Pollution Attacks on Personalized ...wenke.gtisc.gatech.edu/papers/sec13-paper_xing.pdf · USENIX Association 22nd USENIX Security Symposium 671 Take This Personally:

Thoth: Comprehensive Policy Compliance in Data Retrieval ... · USENIX Association 25th USENIX Security Symposium 637 Thoth: ComprehensivePolicy Compliance in Data Retrieval Systems

Trustworthy Whole-System Provenance for the Linux Kernel · 2020. 1. 25. · USENIX Association 24th USENIX Security Symposium 319 Trustworthy Whole-System Provenance for the Linux

Rocking Drones with Intentional Sound Noise on Gyroscopic … · 2016-02-22 · USENIX Association 24th USENIX Security Symposium 881 Rocking Drones with Intentional Sound Noise on

Supplement to the Proceedings of the 22nd USENIX Security Symposiumrverdult/Dismantling_Megamos_Crypto... · 2015-08-13 · In this supplement to the Proceedings of the 22nd USENIX

Revolver: An Automated Approach to the Detection of ... · USENIX Association 22nd USENIX Security Symposium 637 Revolver: AnAutomatedApproachtothe DetectionofEvasiveWeb-basedMalware

Supply chain security - USENIX

Take This Personally: Pollution Attacks on Personalized ...€¦ · USENIX Association 22nd USENIX Security Symposium 671 Take This Personally: Pollution Attacks on Personalized Services

Social Networking with Frientegrity - USENIX · Online social networks are centralized" Social Networking with Frientegrity — Ariel J. Feldman — Usenix Security 8/10/12" 2" Pro:

Secure Outsourced Garbled Circuit Evaluation for …...USENIX Association 22nd USENIX Security Symposium 289 Secure Outsourced Garbled Circuit Evaluation for Mobile Devices Henry Carter

23rd USENIX Security Symposium

RFID: Security and Privacy for Five-Cent Computers Ari Juels Principal Research Scientist RSA Laboratories USENIX Security 2004 5¢5¢

Cookies Lack Integrity: Real-World Implications · USENIX Association 24th USENIX Security Symposium 707 Cookies Lack Integrity: Real-World Implications Xiaofeng Zheng1,2,3, Jian

Lest We Remember: Cold Boot Attacks on Encryption Keys · USENIX Association 17th USENIX Security Symposium 45 Lest We Remember: Cold Boot Attacks on Encryption Keys J.Alex Halderman∗,

CIS 6930/4930 Computer and Network Securityyliu21/Network Security/lecture3.pdf · –ACM Conference on Computer and communications security (CCS) –USENIX Security symposium –Network

Vulnerability Disclosure in the Age of Social Media ... · USENIX Association 24th USENIX Security Symposium 1041 Vulnerability Disclosure in the Age of Social Media: Exploiting Twitter

Building Security In Maturity Model - USENIX · Building Security In Maturity Model ... goldman sachs ... bsimm usenix 8.12.09.ppt Author: Brian Chess

CloudAV: N-Version Antivirus in the Network Cloudxqin/courses/comp7370/CloudAV-sec08.pdf · USENIX Association 17th USENIX Security Symposium 91 CloudAV: N-Version Antivirus in the

GSMem: Data Exfiltration from Air-Gapped Computers over GSM … · 2020-01-25 · USENIX Association 24th USENIX Security Symposium 849 GSMem: Data Exfiltration from Air-Gapped Computers

Usenix Security 2010 Protocol Bugs

This paper is included in the Proceedings of the 29th ...29th USENIX Security Symposium is sponsored by USENIX. Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud

New How the ELF Ruined Christmas - UCSBchris/research/doc/usenix15... · 2020. 6. 6. · USENIX Association 24th USENIX Security Symposium 643 How the ELF Ruined Christmas Alessandro

How To Obtain and Assert Composable Security - USENIX · How To Obtain and Assert Composable Security Ran Canetti IBM Research

Supplement to the Proceedings of the 22nd USENIX Security Symposium · In this supplement to the Proceedings of the 22nd USENIX Security Symposium, we are pleased to announce the

Harvesting Inconsistent Security Configurations in … · USENIX Association 25th USENIX Security Symposium 1153 Harvesting Inconsistent Security Configurations in Custom Android

CryingWolf:AnEmpiricalStudyofSSLWarningEffectiveness ......406 18th USENIX Security Symposium USENIX Association Techscore Expired UnknownCA DomainMismatch FF2 µ=0.61 Experts 69%

Cloudy with a Chance of Breach: Forecasting Cyber Security ...0b4af6cdc2f0c5998459-c0245c5c937c5dedcca3f1764ecc9b2f.r43.cf… · USENIX Association 24th USENIX Security Symposium

Opening Remarks and Awards - USENIX · The 2016 USENIX Security Test of Time Award PRESENTED TO Niels Provos, Markus Friedl, and Peter Honeyman for Preventing Privilege Escalation

Steal This Movie: Automatically Bypassing DRM Protection in ... - USENIX Security...USENIX Association 22nd USENIX Security Symposium 687 Steal This Movie - Automatically Bypassing

VoteBox: a tamper-evident, verifiable electronic voting system · USENIX Association 17th USENIX Security Symposium 349 VoteBox: a tamper-evident, verifiable electronic voting system

Dynamic Hooks: Hiding Control Flow Changes within Non ... · USENIX Association 23rd USENIX Security Symposium 813 Dynamic Hooks: Hiding Control Flow Changes within Non-Control Data

ATtention Spanned: Comprehensive Vulnerability … · Open access to the Proceedings of the 27th USENIX Security Symposium is sponsored y USENIX. This paper is included in the Proceedings

The Pythia PRF Service - USENIX · USENIX Association 24th USENIX Security Symposium 547 The Pythia PRF Service Adam Everspaugh ˜, Rahul Chatterjee , Samuel Scott˜˜, Ari Juels†,