+ All Categories

Home > Documents > A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving...

A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving...

Date post:	28-Jun-2020
Category:	Documents
Upload:	others
View:	2 times
Download:	0 times

Download Report this document

Share this document with a friend

Embed Size (px):

28

A Story of Two Security Tales

Transcript

Page 1: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

A Story of Two Security Tales

Page 2: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 3: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 4: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 5: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 6: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

~10k ~1.3mio

Page 7: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

30% 15%

Page 8: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 9: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

70% 6%

Page 10: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 11: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 12: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 13: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 14: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 15: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 16: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 17: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 18: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

“First, never underestimate the power of inertia. Second, that power can be harnessed.”

Richard Thaler

Page 19: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 20: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 21: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 22: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 23: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 24: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security

Page 25: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security

ControlNudged

Page 26: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security Nudged

ControlNudged

Page 27: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Page 28: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Recommended

New How the ELF Ruined Christmas - UCSBchris/research/doc/usenix15... · 2020. 6. 6. · USENIX Association 24th USENIX Security Symposium 643 How the ELF Ruined Christmas Alessandro

RPKI · 2018. 6. 22. · RPKI Profile Certificates are X.509 certificates that conform to the PKIX profile [PKIX]. They also contain an extension field that lists a collection of

CryingWolf:AnEmpiricalStudyofSSLWarningEﬀectiveness ......406 18th USENIX Security Symposium USENIX Association Techscore Expired UnknownCA DomainMismatch FF2 µ=0.61 Experts 69%

Proceedings of the FREENIX Track: 2003 USENIX Annual ... · USENIX Association FREENIX Track: 2003 USENIX Annual Technical ... 2003 USENIX Annual Technical Conference USENIX ... StarFish

Opening Remarks and Awards - USENIX · The 2016 USENIX Security Test of Time Award PRESENTED TO Niels Provos, Markus Friedl, and Peter Honeyman for Preventing Privilege Escalation

Lest We Remember: Cold Boot Attacks on Encryption Keys · USENIX Association 17th USENIX Security Symposium 45 Lest We Remember: Cold Boot Attacks on Encryption Keys J.Alex Halderman∗,

14th USENIX Security Symposium, August 2005trj1/cse598-f11/slides/MulVAL.pdf14th USENIX Security Symposium, August 2005 Outline 2 MulVAL: A logic-based network security analyzer ...

Security ’15 Prospectus Hyatt Regency Capitol Hill ... · Security ’15 Prospectus Hyatt Regency Capitol Hill, Washington, D.C. The USENIX Security Symposium brings together advanced

Supplement to the Proceedings of the 22nd USENIX Security Symposium · In this supplement to the Proceedings of the 22nd USENIX Security Symposium, we are pleased to announce the

VoteBox: a tamper-evident, veriﬁable electronic voting system · USENIX Association 17th USENIX Security Symposium 349 VoteBox: a tamper-evident, veriﬁable electronic voting system

Talk at USENIX Enigma - February 1, 2017 @NicolasPapernot ... · Google PhD Fellow in Security, Pennsylvania State University Talk at USENIX Enigma - February 1, 2017 Advised by Patrick

WHYPER: Towards Automating Risk Assessment of Mobile ... · USENIX Association 22nd USENIX Security Symposium 527 WHYPER: Towards Automating Risk Assessment of Mobile Applications

CIS 6930/4930 Computer and Network Securityyliu21/Network Security/lecture3.pdf · –ACM Conference on Computer and communications security (CCS) –USENIX Security symposium –Network

How To Obtain and Assert Composable Security - USENIX · How To Obtain and Assert Composable Security Ran Canetti IBM Research

Cloudy with a Chance of Breach: Forecasting Cyber Security ...0b4af6cdc2f0c5998459-c0245c5c937c5dedcca3f1764ecc9b2f.r43.cf… · USENIX Association 24th USENIX Security Symposium

Secure Outsourced Garbled Circuit Evaluation for …...USENIX Association 22nd USENIX Security Symposium 289 Secure Outsourced Garbled Circuit Evaluation for Mobile Devices Henry Carter

This paper is included in the Proceedings of the 29th ...29th USENIX Security Symposium is sponsored by USENIX. Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud

Rocking Drones with Intentional Sound Noise on Gyroscopic … · 2016-02-22 · USENIX Association 24th USENIX Security Symposium 881 Rocking Drones with Intentional Sound Noise on