Security big data machine learning. 6 Short Links on PDNS Graph Analytics for Security. Detecting Malicious Domains via Graph Inference. Detection of Early-Stage Enterprise Infection by Mining Large-Scale Log Data.

Bypassing certificate checks in OpenSSL 1. Many lines of code have been changed, but most important is a Security Fix that allowed an attacker to bypass certain checks on certificates. The problem is summarized in the changelog of the new release. How does certificate validation work? How does the attack work? Certificate with .

My RSS aggregator is at news. An archive of documents obtained from the public internet is kept at cyberwar. Because links break all too often, and Lots Of Copies Keep Stuff Safe. Journal of Homeland Security Affairs. Journal of Intelligence and Counterintelligence.

I ramble about a number of things - but travel experiences, movies and music feature prominently. See my label cloud for a better idea. It is a distraction, that really damages an otherwise less reported story.

Information Security Research and Education, University College London. Teaching Privacy Enhancing Technologies at UCL. Professor Sasse featured in BBC article on insecure fingerprint recognition. Professor Angela Sasse has been recently quoted in BBC article on HTC phone storing.

This entry is written mostly for my non-cryptographer friends who wonder why I am always criticizing Estonian e-voting scheme, but it may also be interesting for cryptographers all around the globe. All opinions are my own. First of all, as a cryptographer, it is my job not to support insecure systems. Given the current situation in Estonia, paper-voting is the only thing that I can do, but I hope things will improve rapidly.