Category Archives: ZISC Seminars

REACT: Rewards and Enforceability for Augmented Certificate Transparency

Abstract Man-in-the-middle attacks in TLS due to compromised CAs have been mitigated by log-based PKI enhancements such as Certificate Transparency. However, these log-based schemes do not offer sufficient incentives to logs and monitors, and do not offer any automatic actions that domains can take in response to CA misbehavior. We propose REACT, an Ethereum-based PKI

Read More

More than the Sum of its Parts

Abstract Open Systems is an independent Swiss IT security provider based in Zurich, which has recently become a proud member organisation of ZISC. With its operation centres in Zurich and Sydney, Open Systems monitors and secures network infrastructure and business-critical applications for over 100 enterprises and NGOs in 180 countries. On roughly 4’000 devices, we

Read More

Hacking in the Blind: (Almost) Invisible Runtime UI Attacks on Safety-Critical Terminals

Access Control Synthesis for Physical Spaces

Computational Intelligence and Machine Learning in Cryptology

Breaking Code-Reuse Payloads with Runtime Code Elimination

Quantifying the Degree of Anonymity Offered by Tor

PKI Safety Net (PKISN): Addressing the Too-Big-to-Be-Revoked Problem of the TLS Ecosystem

A Comprehensive Formal Security Analysis of OAuth 2.0

Uncovering real world smartphone (un)locking behavior and threats