Welcome to my site. I use this site as a repository to dump knowledge I come across, generally in the areas of software engineering and information technologies, but may include other miscellaneous tidbits. Most of the posts are written as notes for my personal reference.
if i.hear then
i.forget
if i.see then
i.remember
if i.do then
i.understand
An interactive guide to security reasoning, operating-system enforcement, Unix permissions, process identity, and the Saltzer-Schroeder protection principles. Sources: “Security Basics” presentation and the Saltzer-Schroeder paper. What you’ll learn Define a security objective and adversary model. Explain confidentiality, integrity, and availability. Explain processor modes and guarded system calls. Distinguish humans, principals, subjects, objects, and rights. Evaluate […]
Enterprise AI is not one system. It is a fleet of chatbots, model APIs, coding assistants, and agents spread across vendors, platforms, identities, and traffic paths. The practical security question is therefore not simply which controls an organization needs, but where those controls can actually be enforced. Enterprises increasingly operate a heterogeneous mix of large […]
This capstone post analyzes an end-to-end privacy attack pipeline: passive TLS metadata collection, behavioral modeling, live prediction, and mitigation impact using ECH. . Threat Model and Objective The attacker is passive on the victim network path and cannot decrypt TLS payloads. Objective: infer user intent and likely next destinations from observable handshake metadata. . […]
TLS and VPNs are foundational, but confidentiality of payloads does not eliminate all signal leakage. This post links handshake security, tunnel construction, and operational metadata exposure. TLS Security Objective TLS provides confidentiality, integrity, and endpoint authentication for data in transit. Modern deployments rely on authenticated key exchange, certificate validation, and AEAD ciphers. Handshake […]
DNS is a trust amplifier: one successful forged answer can redirect large volumes of traffic. This post connects DNS protocol behavior, cache poisoning mechanics, and practical defense controls. Why DNS Is a High-Value Target Applications usually trust DNS results implicitly. If an attacker can poison recursive cache state, downstream clients inherit malicious answers without […]
This post connects cryptographic primitives to system-level trust. The core idea is simple: secure primitives are necessary but not sufficient; operational details determine whether those primitives actually deliver confidentiality, integrity, authentication, and non-repudiation. Why This Layer Matters Packet-level attacks show that identity can be forged at lower layers. Cryptography is the mechanism that upgrades […]
A technical deep dive into packet sniffing and spoofing from CS528, including ICMP attack mechanics, lab implementation details, and layered defenses.
Table of Contents 1. Introduction & Motivation 2. Why We Need PKC 3. Public Key Encryption 4. RSA Cryptosystem 5. RSA Security Analysis 6. CPA/CCA Security 7. Digital Signatures 8. Complete Comparison 1. Introduction: The Security Landscape 🎯 Course Context This lecture focuses on securing communication at different layers of the IP/TCP stack. We can […]
🔒 TCP/IP Attacks & Security 📑 Table of Contents Overview TCP/IP Protocols IP Security ICMP Attacks TCP Scanning & Spoofing DoS Attacks Countermeasures 📖 1. Overview and Context Learning Objectives Understand the fundamental architecture and vulnerabilities of the TCP/IP protocol stack Identify and analyze common network-layer attacks including spoofing, sniffing, and scanning Comprehend DoS […]
Network Security: Link Layer Security 3.1 ARP Cache Poisoning Link Layer Addressing Fundamentals Two Types of Addresses: IP Address (32-bit): Network-layer address used for routing packets to destination networks across the internet MAC Address (48-bit): Link-layer (physical/Ethernet) address used to identify source and destination on the same local network Most LANs use globally unique 48-bit […]