#Research
"Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem", CCS'2021.

#AI
USENIX 2021:
Interpretable Deep Learning/Explainable AI under Fire

t.iss.one/Library_Sec

#Research
"BEACON: Directed Grey-Box Fuzzing with Provable Path Pruning", S&P, 2022.
]-> Code:
https://hub.docker.com/r/yguoaz/beacon

t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

#Whitepaper
"Conti Ransomware Group In-Depth Analysis", 2021.

t.iss.one/Library_Sec

The ROI of Modern Pentesting 2021:
Does your pentesting program bring enough value?

t.iss.one/Library_Sec

#Research
"Debloating Address Sanitizer", USENIX 2022.

t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

#HTB_WriteUp
Fulcrum
t.iss.one/Library_Sec

#Infosec_Standards
NIST SP 800-40 Rev.4:
"Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology", November 2021.

t.iss.one/Library_Sec

"Triple Threat: North Korea-Aligned TA406 Steals, Scams and Spies", Nov. 2021.

t.iss.one/Library_Sec

#Metasploit

From Exploit to Metasploit - The basics

t.iss.one/Library_Sec

#AD
Active Directory Security

t.iss.one/Library_Sec

#Infosec_Standards
NIST SP 1800-31 (Draft):
"Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways", November 2021.

t.iss.one/Library_Sec

#HTB_WriteUp

HTB Writeups - ForwardSlash

t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

#Analytics
"The VOID Community Report, 2021.

// Verica Open Incident Database (VOID)

#Cloud_Security
"The Continuous Audit Metrics Catalog.
Version 1.0", 2021.

📚 t.iss.one/Library_Sec

#Research
"BLACKSMITH: Scalable Rowhammering in the Frequency Domain", 2022.

]-> Blacksmith Revives Rowhamer:
https://comsec.ethz.ch/research/dram/blacksmith