This capstone post analyzes an end-to-end privacy attack pipeline: passive TLS metadata collection, behavioral modeling, live prediction, and mitigation impact using ECH. . Threat Model and Objective The attacker is passive on the victim network path and cannot decrypt TLS payloads. Objective: infer user intent and likely next destinations from observable handshake metadata. . […]
TLS and VPN Tunneling: Strong Encryption, Real-World Gaps, and Metadata Exposure
TLS and VPNs are foundational, but confidentiality of payloads does not eliminate all signal leakage. This post links handshake security, tunnel construction, and operational metadata exposure. TLS Security Objective TLS provides confidentiality, integrity, and endpoint authentication for data in transit. Modern deployments rely on authenticated key exchange, certificate validation, and AEAD ciphers. Handshake […]
DNS Security – Cache Poisoning, Resolver Weaknesses, and Hardening
DNS is a trust amplifier: one successful forged answer can redirect large volumes of traffic. This post connects DNS protocol behavior, cache poisoning mechanics, and practical defense controls. Why DNS Is a High-Value Target Applications usually trust DNS results implicitly. If an attacker can poison recursive cache state, downstream clients inherit malicious answers without […]
Cryptography, Symmetric Ciphers and PKI
This post connects cryptographic primitives to system-level trust. The core idea is simple: secure primitives are necessary but not sufficient; operational details determine whether those primitives actually deliver confidentiality, integrity, authentication, and non-repudiation. Why This Layer Matters Packet-level attacks show that identity can be forged at lower layers. Cryptography is the mechanism that upgrades […]
Packet-Level Foundations and Active Network Attacks
A technical deep dive into packet sniffing and spoofing from CS528, including ICMP attack mechanics, lab implementation details, and layered defenses.
Network Security Public Key Cryptography
Table of Contents 1. Introduction & Motivation 2. Why We Need PKC 3. Public Key Encryption 4. RSA Cryptosystem 5. RSA Security Analysis 6. CPA/CCA Security 7. Digital Signatures 8. Complete Comparison 1. Introduction: The Security Landscape 🎯 Course Context This lecture focuses on securing communication at different layers of the IP/TCP stack. We can […]
Network Security – TCP IP Attacks
🔒 TCP/IP Attacks & Security 📑 Table of Contents Overview TCP/IP Protocols IP Security ICMP Attacks TCP Scanning & Spoofing DoS Attacks Countermeasures 📖 1. Overview and Context Learning Objectives Understand the fundamental architecture and vulnerabilities of the TCP/IP protocol stack Identify and analyze common network-layer attacks including spoofing, sniffing, and scanning Comprehend DoS […]
Link Layer Security
Network Security: Link Layer Security 3.1 ARP Cache Poisoning Link Layer Addressing Fundamentals Two Types of Addresses: IP Address (32-bit): Network-layer address used for routing packets to destination networks across the internet MAC Address (48-bit): Link-layer (physical/Ethernet) address used to identify source and destination on the same local network Most LANs use globally unique 48-bit […]
Cryptography in Real-World Applications
TLS (Transport Layer Security) – Real-World Application What is TLS? Transport Layer Security (TLS) is a cryptographic protocol that provides secure communication over computer networks. It’s the successor to SSL (Secure Sockets Layer) and is widely used to secure web traffic (HTTPS), email, VPNs, and other network communications. Core Security Objectives: Confidentiality: Data encrypted so […]
Machine Learning – Adversarial Sample Detection
Adversarial Examples Inputs generated by adversaries to fool neural networks. Two types: Semantic based perturbations Restricted area to manipulate pixels Modify a specific area of the image Simulate real world scenarios Pervasive Perturbations Full access to pixel alteration Modify the whole image Different distance metrics Defense and Detections Adversarial detections – determine whether input […]
Machine Learning – Inference Attacks
How model inversion attack works? Attacker first trains a separate ML model known as Inversion Model based on the output of the target model Goal is to predict the input data (original dataset used to train the target model) Attacker can exploit information based on the input Types of MIA attacks: Query based attacks: […]
Machine Learning – Adversarial Attacks
Below are various papers reviewed regarding security vulnerabilities and adversarial attacks against machine learning. 6thSense Intrusion Detection System (IDS) for smart devices This paper presents 6thSense, a novel intrusion detection system (IDS) designed to defend against sensor-based threats in smart devices, particularly Android smartphones. The framework uses context-aware models and machine learning techniques to detect […]
Machine Learning – Black Box Attacks and Transferability
Adversary Knowledge White-box = adversary has complete knowledge of the targeted model, including its parameter values, architecture, training method and in some cases its training data Black-box = adversary has no knowledge about the ML model except input output samples of training data or input output pairings obtained using the target model as an oracle […]
Cryptography
Hash Function Definition: Mapping a long string to a shorter string. Key Properties: Collision-resistance: Difficulty in finding two inputs that map to the same output. Pre-image resistance: Difficulty in finding any pre-image for a given output. Uses: Protecting the integrity of systems and passwords. Used for the actual storage of passwords Private Key Encryption […]
Network Security
Syn Flood Attacks https://www.cloudflare.com/learning/ddos/syn-flood-ddos-attack/ A SYN flood (half-open attack) is a type of denial-of-service (DDoS) attack which aims to make a server unavailable to legitimate traffic by consuming all available server resources. By repeatedly sending initial connection request (SYN) packets, the attacker is able to overwhelm all available ports on a targeted server machine, causing […]
Web Security
SQL Injection = no sanitizing Cross-site scripting = inject javascript via uri https://example.com/test.php?color=green&background=</style><script>alert(String.fromCharCode(88,83,83))</script> Path Traversal = Allowing for path or directory traversal on your server is an amazingly bad idea. You would be allowing people to list the folders on your server and to navigate from folder to folder. This allows attackers to go […]
Security – Operating Systems
Computer System Components Hardware Provides basic computer resources (CPU, memory, I/O devics) Maybe addons Possible firmware Operating System Controls hardware and various apps Application Programs Users What is an Operating System Program that acts as an intermediary between user and computer hardware Efficiency – better utilization of resources Convenience – ease of use […]
Security – Passwords and Authentication
Basic, Fundamental Problem Client → Server How do you prove that you are who you claim to be? Users and servers prove themselves in different ways Different attack models Different assumptions about what they can feasibly do Authentication Determination of identity, usually based on a combination of Something the person has (smart card, […]
Security – Malware
Malware Malicious code that is stored on and runs on a victim’s system How does it get to run? Attacks a user – or network-facing vulnerable service (often using techniques we’ve just learned!) Backdoor: Added by a malicious developer Social engineering: Trick the user into running/clicking/installing Trojan horse: Offer a good service, add in the […]
Security – Side Channel Attacks
Covert Channels Covert means of transferring data Channel that transfers information in a way that violates a security policy An insider process leaks information to an outsider process not normally allowed to access that information Often divided into two (three) main categories: Storage Communication done in some memory space Timing Delay or some action in […]
Security – User Access Controls
Access Control Provides the essential services of authorization, identification and authentication, access approval, and accountability authorization specifies what a subject can do identification and authentication ensure that only legitimate subjects can log on to a system access approval grants access during operations, by association of users with the resources that they are allowed to access, […]
Cloud Microservice Security
Monolith Architecture Security Controls Below is a sample traditional monolithic architecture with various security controls. Microservices Microservices are an architectural approach. Decouple system into small, independent services Use well defined service APIs Each microservice is easy to change and deploy independently They fit naturally with containers – one microservice per container Consider the following […]
Data Privacy
Privacy Fundamental human right In most constitutions First law in 1361 against peeping toms and eavesdroppers In 1948’s Universal Declaration of Human Rights Most notable in the way it is constrained and infringed rather than how it is enforced What is Privacy? The ability to keep information about oneself confidential Information about me as […]
Cyber Ethics and Law
Before talking about Ethics and Law, we should look at the human cognition and understand some of our errors and biases. Our ethics and law try to address some of these errors. Human Biases The human factor in security incidents Analysis of security incidents reveals, more often than not, human factor as a major cause […]
Cyber Risk, Security, Economics and Insurance
Below are some notes when looking at cyber risk, security, economics and insurance. First a definition. What is Security? Security A system is secure if it is protected against all forms of threat This is hard to predict And cannot afford to protect against all of them Security = economic issue, not just engineering Solutions […]
Cybersecurity Strategies 2022
Notes from a recent whitepaper outlining cyber security strategies in 2022. Modern application development requires responsibilities across all of IT. Gartner estimates that by 2025 at least 75% of IT organizations will have faced at least one ransomware attack. Terminology / Concepts Shift Left Moving security review processes and tooling to earlier parts of the […]
XDR EDR SOAR and SIEM
Various topics related to Cybersecurity. XDR vs EDR vs SOAR vs SIEM Definitions on tools / services commonly used for cybersecurity. SIEM Combining security information management (SIM) and security event management (SEM), security information and event management (SIEM) offers real-time monitoring and analysis of events as well as tracking and logging of security […]
Web Application Security
Some common web security topics and patterns. Crypto-miner Cryptocurrency mining, or cryptomining, is a process in which transactions for various forms of cryptocurrency are verified and added to the blockchain digital ledger. Also known as cryptocoin mining, altcoin mining, or Bitcoin mining (for the most popular form of cryptocurrency, Bitcoin), cryptocurrency mining has increased […]
Federal Identity and Credentials
Federal Identity, Credential and Access Management F-ICAM There are 5 parts to Federal Identity, Credential and Access Management System. This is a combination of applications, tools, standards and policies. Identity Management Identity Management is how an agency collects, verifies, and manages attributes to establish and maintain enterprise identities for federal government employees, contractors, and authorized […]
Information Systems Government Compliance
Organizations DHS – Major US Government agency focused on cyber security is DHS. They focus on the physical and cyber threats to the nation. US-CERT (United States Computer Emergency Readiness Team) – coordinates cyber information sharing and manages national cyber risks. (www.us-cert.gov). They also distribute vulnerability and threat information to National Awareness System (NCAS) and […]