Side Channel Attacks Courses and Certifications

IEEE

Verifying and Synthesizing Constant-Resource Implementations with Types

Explores a type system for verifying constant-resource implementations, enhancing security against side-channel attacks while allowing natural programming models. Introduces resource-aware noninterference and automated repair techniques.

• YouTube
• 19 minutes
• On-Demand
• Free Video

IEEE

Private Resource Allocators and Their Applications

Introduces private resource allocators to prevent allocation-based side-channel attacks in systems like anonymous messaging, with various constructions offering different privacy guarantees and trade-offs in efficiency.

• YouTube
• 17 minutes
• On-Demand
• Free Video

IEEE

Leave Me Alone - App-Level Protection against Runtime Information Gathering on Android

Explores app-level protection against runtime information gathering on Android, proposing App Guardian to pause suspicious background processes and thwart malicious monitoring attempts without system modifications.

• YouTube
• 18 minutes
• On-Demand
• Free Video

USENIX Enigma Conference

A Sound Mind in a Vulnerable Body - Practical Hardware Attacks on Deep Learning

Explores hardware vulnerabilities in deep learning systems, demonstrating how fault injection and side-channel attacks can compromise model accuracy and steal proprietary information, highlighting the need for robust ML-level defenses.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

TheIACR

TPM-FAIL - TPM Meetings Timing and Lattice Attacks

Explore TPM vulnerabilities, timing attacks, and lattice-based cryptanalysis. Learn about ECDSA nonce issues and their impact on digital signatures in trusted computing.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Black Hat

Meltdown - Basics, Details, Consequences

Explore Meltdown, a critical security vulnerability that breaks fundamental isolation between user applications and operating systems, allowing unauthorized access to system memory and sensitive data.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

Screaming Channels - When Electromagnetic Side Channels Meet Radio Transceivers

Novel side-channel attacks on mixed-design chips exploiting electromagnetic leaks in radio signals, potentially breaking cryptography over large distances. Explores discovery, impact, and countermeasures.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Black Hat

Bypassing KPTI Using the Speculative Behavior of the SWAPGS Instruction

Unveiling a new speculative execution attack exploiting SWAPGS instruction, bypassing existing CPU and kernel protections. Explores side-channel vulnerabilities and their implications for system security.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

Practical Side-Channel Attacks Against WPA-TKIP

Explore practical side-channel attacks against WPA-TKIP in Wi-Fi networks, analyzing vulnerabilities and countermeasures in this widely-used legacy protocol.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Black Hat

A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning

Explore deep-learning techniques to identify and reduce side-channel attack vulnerabilities, leveraging AI explainability for efficient implementation assessment and improved security.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

OWASP Foundation

FIESTA - An HTTPS Side-Channel Party

Explore HTTPS side-channel vulnerabilities and a new tool, FIESTA, for testing and exploiting these issues. Learn about a novel side-channel affecting major tech companies and its implications for online security.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Bypassing Hardware-Based Trusted Boot Through x86 Downgrade

Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

IEEE

Spectre Attacks Exploiting Speculative Execution

Explore speculative execution vulnerabilities in modern processors, their impact on system security, and potential countermeasures to protect against Spectre attacks.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Association for Computing Machinery (ACM)

A Software Approach to Defeating Side Channels in Last-Level Caches

Explore techniques to mitigate side-channel attacks in last-level caches, focusing on Copy-On-Access and Cacheability Management methods for enhanced cloud security.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

On Code Execution Tracking via Power Side-Channel

Explore power side-channel analysis for code execution tracking in embedded systems, covering key extraction attacks, control flow integrity, and Hidden Markov Models for security applications.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk