PickVids28c3: The Science of Insecurity
推荐理由
The best talk on computer security I have seen is Meredith Patterson's Science of Insecurity at 28c3
强烈推荐sedachv · 原文
说明
这是2011年由28c3发布的一部演讲，主题归在Security & hacking。它讲的是language-theoretic security这一支里的具体问题，而不是把整个领域扫一遍。适合已经能看懂基本术语、想继续往下走的人。内容上可以概括成：Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.这些读者给出的理由，核心是：HN commenters call it one of the best security talks and the standard introduction to LANGSEC, which they use to argue for simpler, well-specified input formats.讲法不绑某一条新闻，过几年仍然可以当材料看。从2012年到2024年，有9位不同的读者在9个不同月份把它推荐出来，其中明确叫别人去看的有2次。适合一次性看完。讲者把一个判断讲透，演示是在给这个判断配例子。如果已经会了基本定义，就把注意力放在它怎么把language-theoretic security变成能跟着复述的例子。
视频信息
- 频道
- 28c3
- 时长
- 59 分 23 秒
- 发布年份
- 2011
同主题更多
- Behind the Scenes of iOS Security
- Why Electronic Voting Is Still A Bad Idea
- USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
- Defcon 18 Changing threats to privacy Moxie Marlinspike Part
- DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
- Elevator Hacking: From the Pit to the Penthouse