Despite the broad diversity of attacks and the many different ways an adversary can exploit a
system, each attack can be divided into different phases. These phases include the …

The codebases of many popular cryptographic libraries are the result of decades of
development and incremental changes. OpenSSL for example, arguably the most important …

Emergent software ecosystems, boomed by the advent of smartphones and the Internet of
Things (IoT) platforms, are perpetually sophisticated, deployed into highly dynamic …

System bugs such as faults/errors and security vulnerabilities are significant concerns for
software applications. Any coding operation that causes the system to behave unusually is …

Network traffic inspection, including TLS traffic, in enterprise environments is widely
practiced. Reasons are primarily related to improving enterprise security (eg, phishing and …

Transport Layer Security is the protocol most-responsible for encryption on the Internet
today. Unfortunately, popular TLS security libraries, such as OpenSSL and GnuTLS, while …

As vulnerabilities become more common the security of applications are coming under
increased scrutiny. In regards to Internet security, recent work discovers that many …

Abstract Single Sign-On (SSO) protocols like OAuth2. 0 and OpenID Connect (OIDC) have
been widely adopted by mainstream identity providers (eg, Facebook and Google, etc.), to …

API misuse is a well-known source of bugs. Some of them (eg, incorrect use of SSL API, and
integer overflow of memory allocation size) can cause serious security vulnerabilities (eg …

Although current augmented, virtual, and mixed reality (AR/VR/MR) systems are facing
advanced and immersive experience in the entertainment industry with countless media …