RuhrSec 2020 #StayAtHome Edition
2020-05-08..2020-06-08
-- online --
RuhrSec ·
[RuhrSec 2016, RuhrSec 2017, RuhrSec 2019, RuhrSec 2020 #StayAtHome Edition, RuhrSec 2023, RuhrSec 2025]
who it's for
security researchers, security engineers, reverse engineers, web application security engineers, vulnerability disclosure advocates, hardware security engineers
topics
TLS 1.3 0-RTT forward security; PPF-based ticket schemes; session resumption hybrid ticket+cache; DTLS protocol state fuzzing; Mealy-machine model learning for protocols; radare2 ESIL code emulation; JavaScript AST camouflage for malware; Content Security Policy adoption and script restriction; vulnerability disclosure practices and legal risk; hardware reverse engineering workflow and obfuscation primitives
| title | author | length |
|---|---|---|
| Efficient Forward Security for TLS 1.3 0-RTT | Kai Gellert | 44m |
Presents a new session-resumption construction that plugs into TLS 1.3 0-RTT without client or protocol changes, trading negligible client work for server… | ||
| Hacker Rights | Chloe Messdaghi | 27m |
Sixty percent of security researchers don't report vulnerabilities because outdated laws (CFAA/DMCA), scary media imagery (hoodies, ski masks) and brittle… | ||
| Restricting the scripts, you're ... | Sebastian Roth, Ben Stock | 43m |
A seven‑year archive study of 10,000 sites extracts Content Security Policy headers from 2012–2018 and finds only about 11% adoption by end of 2018, with level… | ||
| Analysis of DTLS Implementations ... State Fuzzing | Robert Merget | 49m |
Extends TLS-Attacker with DTLS support and uses protocol state fuzzing to learn Mealy-machine models for 13 DTLS implementations, with models up to ~66 states… | ||
| Code emulation ... radare2's ESIL | Arnau Gàmez i Montolio | 01h 00m |
Shows how radare2's ESIL actually executes code snippets as a reverse‑polish stack machine on steroids, mapping CPU registers and virtual memory so emulation… | ||
| HideNoSeek: Camouflaging Malicious JavaScript ... | Aurore Fass | 37m |
HideNoSeek automatically rewrites malicious JavaScript ASTs into exact copies of benign ASTs (using an AST enhanced with control and data-flow) so the… | ||
| Towards Cognitive Obfuscation | Steffen Becker, Carina Wiesen | 25m |
A three-phase model of hardware reverse engineering emerges: candidate identification, candidate verification and realization; participants (students plus one… | ||
| nothing matches | ||