Running Secure Server Software on Insecure Hardware without a Parachute
summary
Covers techniques for running server software when the underlying server hardware cannot be trusted, focusing on applying client-side protection methods to servers. Discusses anti-reverse-engineering measures, secure key management approaches, and design patterns for renewing protected systems.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:33Web Infrastructure
- 4:08Threat Model
- 5:09DRM
- 7:16Shortterm Secrets
- 8:07Whitebox Cryptography
- 9:41Code Obfuscation
- 12:01Keyless SSL
related talks
30mHow Secure Is Your Build/Server?
45mUsing Linux Securely in the Cloud
30mSteps Towards Achieving a Secure Linux Server
01h 00mSafety not Guaranteed
51mPlaying to lose: making sensible security decisions by assuming the worst
41mSecurity: The world is broken and you are guilty
01h 17mSecure by Design - Security Principles for the Working Architect
07mSecurity Problems in Software and Attack Patterns