Welcome to my site. I use this site as a repository to dump knowledge I come across, generally in the areas of software engineering and information technologies, but may include other miscellaneous tidbits. Most of the posts are written as notes for my personal reference.
if i.hear then
i.forget
if i.see then
i.remember
if i.do then
i.understand
A detailed, example-driven guide to discretionary access control (DAC), the Morris Worm, capabilities, confinement, Bell–LaPadula, label lattices, assurance, all five Biba policies, Clark–Wilson, and the Chinese Wall policy. Begin with the Morris WormExplore formal security modelsCompare security modelsBrowse detailed source notes Contents Access control, confidentiality, and integrity Acronym and notation glossary The Morris Worm and […]
A practical guide to access matrices, Unix filesystem objects and permissions, process identity, setuid behavior, and the design of complete access-control systems. Access control Unix security Interactive explanations Contents The core access-control model Access matrix Users, principals, and subjects Objects in Unix Unix permission semantics Special permission bits Process identity and setuid Access-control design checklist […]
An interactive guide to security reasoning, operating-system enforcement, Unix permissions, process identity, and the Saltzer-Schroeder protection principles. Security objectives · Access control · Unix protection · Design principles Contents Security reasoning Access-control model Operating-system enforcement Unix permissions Process identity and setuid Saltzer–Schroeder design principles Related protection concepts Common misconceptions Applied questions and scenarios Security reasoning […]
Enterprise AI is not one system. It is a fleet of chatbots, model APIs, coding assistants, and agents spread across vendors, platforms, identities, and traffic paths. The practical security question is therefore not simply which controls an organization needs, but where those controls can actually be enforced. Enterprises increasingly operate a heterogeneous mix of large […]
This capstone post analyzes an end-to-end privacy attack pipeline: passive TLS metadata collection, behavioral modeling, live prediction, and mitigation impact using ECH. . Threat Model and Objective The attacker is passive on the victim network path and cannot decrypt TLS payloads. Objective: infer user intent and likely next destinations from observable handshake metadata. . […]
TLS and VPNs are foundational, but confidentiality of payloads does not eliminate all signal leakage. This post links handshake security, tunnel construction, and operational metadata exposure. TLS Security Objective TLS provides confidentiality, integrity, and endpoint authentication for data in transit. Modern deployments rely on authenticated key exchange, certificate validation, and AEAD ciphers. Handshake […]
DNS is a trust amplifier: one successful forged answer can redirect large volumes of traffic. This post connects DNS protocol behavior, cache poisoning mechanics, and practical defense controls. Why DNS Is a High-Value Target Applications usually trust DNS results implicitly. If an attacker can poison recursive cache state, downstream clients inherit malicious answers without […]
This post connects cryptographic primitives to system-level trust. The core idea is simple: secure primitives are necessary but not sufficient; operational details determine whether those primitives actually deliver confidentiality, integrity, authentication, and non-repudiation. Why This Layer Matters Packet-level attacks show that identity can be forged at lower layers. Cryptography is the mechanism that upgrades […]
A technical deep dive into packet sniffing and spoofing from CS528, including ICMP attack mechanics, lab implementation details, and layered defenses.
Table of Contents 1. Introduction & Motivation 2. Why We Need PKC 3. Public Key Encryption 4. RSA Cryptosystem 5. RSA Security Analysis 6. CPA/CCA Security 7. Digital Signatures 8. Complete Comparison 1. Introduction: The Security Landscape 🎯 Course Context This lecture focuses on securing communication at different layers of the IP/TCP stack. We can […]