• Home

  • Documents

  • A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving...
28
A Story of Two Security Tales

A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

  • Upload
    others

  • View
    6

  • Download
    0

Embed Size (px)

Citation preview

Page 1: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

A Story of Two Security Tales

Page 2: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 3: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 4: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 5: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 6: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

~10k ~1.3mio

Page 7: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

30% 15%

Page 8: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 9: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

70% 6%

Page 10: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 11: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 12: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 13: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 14: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 15: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 16: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

John Doe

Page 17: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 18: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

“First, never underestimate the power of inertia. Second, that power can be harnessed.”

Richard Thaler

Page 19: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 20: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 21: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 22: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 23: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 24: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security

Page 25: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security

ControlNudged

Page 26: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Productivity

Security Nudged

ControlNudged

Page 27: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed
Page 28: A Story of Two Security Tales - USENIX · certificate Java SSI- Resolving javax.net.ssl.SSLHandshakeException: sun security. validator.ValidatorException: PKIX path building failed

Supplement to the Proceedings of the 22nd USENIX Security Symposium · In this supplement to the Proceedings of the 22nd USENIX Security Symposium, we are pleased to announce the

Supplement to the Proceedings of the 22nd USENIX Security Symposium · In this supplement to the Proceedings of the 22nd USENIX Security Symposium, we are pleased to announce the

Documents
ATtention Spanned: Comprehensive Vulnerability … · Open access to the Proceedings of the 27th USENIX Security Symposium is sponsored y USENIX. This paper is included in the Proceedings

ATtention Spanned: Comprehensive Vulnerability … · Open access to the Proceedings of the 27th USENIX Security Symposium is sponsored y USENIX. This paper is included in the Proceedings

Documents
Actividad_ 5 - Infraestructura PKIx (svilatuña)

Actividad_ 5 - Infraestructura PKIx (svilatuña)

Education
Talk at USENIX Enigma - February 1, 2017 @NicolasPapernot ... · Google PhD Fellow in Security, Pennsylvania State University Talk at USENIX Enigma - February 1, 2017 Advised by Patrick

Talk at USENIX Enigma - February 1, 2017 @NicolasPapernot ... · Google PhD Fellow in Security, Pennsylvania State University Talk at USENIX Enigma - February 1, 2017 Advised by Patrick

Documents
Inference of User Demographics and Habits from Seemingly … · Location tracking using mobile device power analysis. In 24th USENIX Security Symposium (USENIX Security 15), ... Questions

Inference of User Demographics and Habits from Seemingly … · Location tracking using mobile device power analysis. In 24th USENIX Security Symposium (USENIX Security 15), ... Questions

Documents
Usenix Security 2010 Protocol Bugs

Usenix Security 2010 Protocol Bugs

Documents
How To Obtain and Assert Composable Security - USENIX · How To Obtain and Assert Composable Security Ran Canetti IBM Research

How To Obtain and Assert Composable Security - USENIX · How To Obtain and Assert Composable Security Ran Canetti IBM Research

Documents
Rocking Drones with Intentional Sound Noise on Gyroscopic … · 2016-02-22 · USENIX Association 24th USENIX Security Symposium 881 Rocking Drones with Intentional Sound Noise on

Rocking Drones with Intentional Sound Noise on Gyroscopic … · 2016-02-22 · USENIX Association 24th USENIX Security Symposium 881 Rocking Drones with Intentional Sound Noise on

Documents
Building Security In Maturity Model - USENIX · Building Security In Maturity Model ... goldman sachs ... bsimm usenix 8.12.09.ppt Author: Brian Chess

Building Security In Maturity Model - USENIX · Building Security In Maturity Model ... goldman sachs ... bsimm usenix 8.12.09.ppt Author: Brian Chess

Documents
Security ’15 Prospectus Hyatt Regency Capitol Hill ... · Security ’15 Prospectus Hyatt Regency Capitol Hill, Washington, D.C. The USENIX Security Symposium brings together advanced

Security ’15 Prospectus Hyatt Regency Capitol Hill ... · Security ’15 Prospectus Hyatt Regency Capitol Hill, Washington, D.C. The USENIX Security Symposium brings together advanced

Documents
Take This Personally: Pollution Attacks on Personalized ...wenke.gtisc.gatech.edu/papers/sec13-paper_xing.pdf · USENIX Association 22nd USENIX Security Symposium 671 Take This Personally:

Take This Personally: Pollution Attacks on Personalized ...wenke.gtisc.gatech.edu/papers/sec13-paper_xing.pdf · USENIX Association 22nd USENIX Security Symposium 671 Take This Personally:

Documents
Cloudy with a Chance of Breach: Forecasting Cyber Security ...0b4af6cdc2f0c5998459-c0245c5c937c5dedcca3f1764ecc9b2f.r43.cf… · USENIX Association 24th USENIX Security Symposium

Cloudy with a Chance of Breach: Forecasting Cyber Security ...0b4af6cdc2f0c5998459-c0245c5c937c5dedcca3f1764ecc9b2f.r43.cf… · USENIX Association 24th USENIX Security Symposium

Documents
Measuring the Longitudinal Evolution of the Online ... · 34 24th USENIX Security Symposium USENIX Association of Silk Road, dubbed “Silk Road 2.0” was online—set up by former

Measuring the Longitudinal Evolution of the Online ... · 34 24th USENIX Security Symposium USENIX Association of Silk Road, dubbed “Silk Road 2.0” was online—set up by former

Documents
14th USENIX Security Symposium, August 2005trj1/cse598-f11/slides/MulVAL.pdf14th USENIX Security Symposium, August 2005 Outline 2 MulVAL: A logic-based network security analyzer

14th USENIX Security Symposium, August 2005trj1/cse598-f11/slides/MulVAL.pdf14th USENIX Security Symposium, August 2005 Outline 2 MulVAL: A logic-based network security analyzer

Documents
Supply chain security - USENIX

Supply chain security - USENIX

Documents
Secure Outsourced Garbled Circuit Evaluation for …...USENIX Association 22nd USENIX Security Symposium 289 Secure Outsourced Garbled Circuit Evaluation for Mobile Devices Henry Carter

Secure Outsourced Garbled Circuit Evaluation for …...USENIX Association 22nd USENIX Security Symposium 289 Secure Outsourced Garbled Circuit Evaluation for Mobile Devices Henry Carter

Documents
7th USENIX Workshop on Offensive Technologies … Bailey, University of ... Dino Dai Zovi, Trail of Bits Mark Dowd, Azimuth Security ... The USENIX Workshop on Offensive Technologies

7th USENIX Workshop on Offensive Technologies … Bailey, University of ... Dino Dai Zovi, Trail of Bits Mark Dowd, Azimuth Security ... The USENIX Workshop on Offensive Technologies

Documents
CloudAV: N-Version Antivirus in the Network Cloudxqin/courses/comp7370/CloudAV-sec08.pdf · USENIX Association 17th USENIX Security Symposium 91 CloudAV: N-Version Antivirus in the

CloudAV: N-Version Antivirus in the Network Cloudxqin/courses/comp7370/CloudAV-sec08.pdf · USENIX Association 17th USENIX Security Symposium 91 CloudAV: N-Version Antivirus in the

Documents
Proceedings of the 12th USENIX Security … Association 12th USENIX Security Symposium 1 Remote Timing Attacks are Practical David Brumley Dan Boneh Stanford University Stanford University

Proceedings of the 12th USENIX Security … Association 12th USENIX Security Symposium 1 Remote Timing Attacks are Practical David Brumley Dan Boneh Stanford University Stanford University

Documents
Revolver: An Automated Approach to the Detection of ... · USENIX Association 22nd USENIX Security Symposium 637 Revolver: AnAutomatedApproachtothe DetectionofEvasiveWeb-basedMalware

Revolver: An Automated Approach to the Detection of ... · USENIX Association 22nd USENIX Security Symposium 637 Revolver: AnAutomatedApproachtothe DetectionofEvasiveWeb-basedMalware

Documents
CIS 6930/4930 Computer and Network Securityyliu21/Network Security/lecture3.pdf · –ACM Conference on Computer and communications security (CCS) –USENIX Security symposium –Network

CIS 6930/4930 Computer and Network Securityyliu21/Network Security/lecture3.pdf · –ACM Conference on Computer and communications security (CCS) –USENIX Security symposium –Network

Documents
New How the ELF Ruined Christmas - UCSBchris/research/doc/usenix15... · 2020. 6. 6. · USENIX Association 24th USENIX Security Symposium 643 How the ELF Ruined Christmas Alessandro

New How the ELF Ruined Christmas - UCSBchris/research/doc/usenix15... · 2020. 6. 6. · USENIX Association 24th USENIX Security Symposium 643 How the ELF Ruined Christmas Alessandro

Documents
Opening Remarks and Awards - USENIX · The 2016 USENIX Security Test of Time Award PRESENTED TO Niels Provos, Markus Friedl, and Peter Honeyman for Preventing Privilege Escalation

Opening Remarks and Awards - USENIX · The 2016 USENIX Security Test of Time Award PRESENTED TO Niels Provos, Markus Friedl, and Peter Honeyman for Preventing Privilege Escalation

Documents
This paper is included in the Proceedings of the 29th ...29th USENIX Security Symposium is sponsored by USENIX. Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud

This paper is included in the Proceedings of the 29th ...29th USENIX Security Symposium is sponsored by USENIX. Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud

Documents
RFID: Security and Privacy for Five-Cent Computers Ari Juels Principal Research Scientist RSA Laboratories USENIX Security 2004 5¢5¢

RFID: Security and Privacy for Five-Cent Computers Ari Juels Principal Research Scientist RSA Laboratories USENIX Security 2004 5¢5¢

Documents
23rd USENIX Security Symposium

23rd USENIX Security Symposium

Documents
Proceedings of the 10th USENIX Security Symposium

Proceedings of the 10th USENIX Security Symposium

Documents
Aurasium: Practical Policy Enforcement for Android Applications By Yaoqi USENIX Security Symposium 2012

Aurasium: Practical Policy Enforcement for Android Applications By Yaoqi USENIX Security Symposium 2012

Documents
Trustworthy Whole-System Provenance for the Linux Kernel · 2020. 1. 25. · USENIX Association 24th USENIX Security Symposium 319 Trustworthy Whole-System Provenance for the Linux

Trustworthy Whole-System Provenance for the Linux Kernel · 2020. 1. 25. · USENIX Association 24th USENIX Security Symposium 319 Trustworthy Whole-System Provenance for the Linux

Documents
On the Feasibility of Large-Scale Infections of iOS … · USENIX Association 23rd USENIX Security Symposium 79 On the Feasibility of Large-Scale Infections of iOS Devices Tielei

On the Feasibility of Large-Scale Infections of iOS … · USENIX Association 23rd USENIX Security Symposium 79 On the Feasibility of Large-Scale Infections of iOS Devices Tielei

Documents