Usable Cybersecurity Assessment Tools
summary
EU-funded CCAT moves four academic tools toward production-grade usability so organisations can make verifiable compliance decisions. TLS-Scanner probes servers and clients and detects specific attacks (Raccoon, ALPACA, padding oracles) for security solution providers. Alby uses black‑box active automata learning to model embedded hardware (Sancus) and test on‑line devices. Scrutiny runs crypto implementation and side‑channel tests against smartcards and libraries and found the Roca class issue. sec-certs scrapes certification records and maps product–certificate relations for vendors, authorities, and certificate consumers. Tools are open source, functional but not yet production ready; open usability testing and October updates are planned.
AI-written summary · about
chapters (8)
- 0:00CSec project introduction
- 1:25Target audiences
- 2:50TLS Scanner overview
- 3:54Alby for embedded security
- 5:20Scrutiny cryptographic toolset
- 7:25Sexert certification landscape
- 8:53Human-centered usability
- 10:43Q&A
related talks
47mUsing the CGC’s fully automated vulnerability detection tools
43mSecurity Testing Tools: Can I Touch You There?
38mFree security resources that your competitors use!
49mA11y in Cybersecurity Panel
01h 03m“Secure Coding Best Practices: Your First Line Is The Last Line Of Defense (2 of 2)”
29mAttack Defense Graph Analysis for Supporting SOC and CSIRT Operations
22mEnabling Security Defenders with AI
40mTool Time: Building Your Cybersecurity Architecture Planning Toolbox