Cybersecurity & Secure HW
Networking/OS security, cryptography/PKI, hardware security, embedded/IoT security, pentest, and threat intelligence.
280 topics · 0 with articles
Articles for this branch are still being written. The topics below are the planned roadmap.
Intern Engineer· 40
- 802.1X: EAP-TLS and PEAP AuthenticationArticle coming
- ARP Spoofing and MAC Flooding MitigationArticle coming
- Air-Gap Security and Data Diode ConceptsArticle coming
- Audit Logging: auditd Rules and AnalysisArticle coming
- BGP Hijacking and RPKI MitigationArticle coming
- Bluetooth Security: KNOB, BIAS, BLESA AttacksArticle coming
- CVE and CPE: Vulnerability Naming ConventionsArticle coming
- Cellular Security: 5G NR Security ArchitectureArticle coming
- Certificate Validation: Chain of Trust, OCSP, CRLArticle coming
- Container Security: Docker Escape, NamespaceArticle coming
- DDoS Mitigation: BGP Blackholing, AnycastArticle coming
- DNS Security: DNSSEC, DoH, DoT, RPKIArticle coming
- DNS Tunneling Attack and DetectionArticle coming
- Encrypted C2 (Command and Control) DetectionArticle coming
- Firewall Types: Stateless, Stateful, NGFWArticle coming
- HSTS, HPKP, and Certificate PinningArticle coming
- IPv6 Security: NDP Attack MitigationsArticle coming
- Kernel Hardening: ASLR, DEP, SMEP, SMAPArticle coming
- Kubernetes Network Policy and PodSecurityArticle coming
- Linux File Permissions: chmod, ACL, setuidArticle coming
- Linux Privilege Escalation: SUID, sudoArticle coming
- NAT and PAT: Security ImplicationsArticle coming
- NIDS: Snort and Suricata Rule BasicsArticle coming
- Network Segmentation: DMZ, VLAN, Micro-SegmentArticle coming
- Network Traffic Analysis with WiresharkArticle coming
- OSI Model: 7 Layers and Security at EachArticle coming
- PAM (Pluggable Authentication Modules)Article coming
- SIEM Integration: Linux Logs to Splunk/ELKArticle coming
- SSH Hardening: Key-Only, Fail2ban, 2FAArticle coming
- Software-Defined Perimeter (SDP)Article coming
- TCP/IP Protocol Stack: Headers and FlagsArticle coming
- TLS 1.3 Handshake: Phases and Key ExchangeArticle coming
- VLAN Hopping and Double-Tagging AttackArticle coming
- VPN Protocols: IKEv2/IPSec, WireGuard, OpenVPNArticle coming
- WAF (Web Application Firewall) ConfigurationArticle coming
- Wi-Fi Security: WPA3, Enterprise ModeArticle coming
- Windows AD: Kerberos, NTLM, Pass-the-HashArticle coming
- Windows Privilege Escalation: Token ImpersonationArticle coming
- Zero Trust Network Architecture (ZTNA)Article coming
- eBPF for Runtime Security (Falco, Tetragon)Article coming
Junior Engineer· 40
- ACME Protocol (Let Encrypt) AutomationArticle coming
- AES-GCM: Authenticated Encryption (AEAD)Article coming
- BLAKE2 and BLAKE3: Fast Cryptographic HashArticle coming
- Blockchain and Distributed Ledger for IdentityArticle coming
- CA Hierarchy: Root, Intermediate, Issuing CAArticle coming
- CMP (Certificate Management Protocol)Article coming
- Certificate Transparency (CT) LogsArticle coming
- ChaCha20-Poly1305 for Performance ContextsArticle coming
- Commitment Schemes and Hash-Based SignaturesArticle coming
- Cryptographic Agility Design PatternArticle coming
- Diffie-Hellman Key Exchange: DH and ECDHArticle coming
- Digital Certificate: X.509 Fields (Subject, SAN)Article coming
- ECDSA: Signing and Verification ProcessArticle coming
- EdDSA (Ed25519) for High-Performance SignaturesArticle coming
- Elliptic Curve Cryptography (ECC): P-256Article coming
- Format-Preserving Encryption (FPE)Article coming
- Forward Secrecy: Ephemeral ECDHEArticle coming
- HKDF: HMAC-based Key Derivation FunctionArticle coming
- HMAC: Construction and Security ProofArticle coming
- Hash Functions: SHA-256, SHA-384, SHA-512Article coming
- Homomorphic Encryption: BFV, CKKS SchemesArticle coming
- Hybrid Classical + PQC Cryptography TransitionArticle coming
- NIST PQC Standardization: FIPS 203, 204, 205Article coming
- OCSP Stapling for Certificate RevocationArticle coming
- PBKDF2, bcrypt, scrypt, Argon2 for PasswordsArticle coming
- PKI Design for Enterprise and IoT DevicesArticle coming
- Post-Quantum Cryptography: CRYSTALS-DilithiumArticle coming
- Post-Quantum Cryptography: CRYSTALS-KyberArticle coming
- Post-Quantum Cryptography: SPHINCS+, FALCONArticle coming
- Quantum Key Distribution (QKD): BB84 ProtocolArticle coming
- Quantum-Safe TLS 1.3 with PQCArticle coming
- RSA Key Exchange and OAEP PaddingArticle coming
- SHA-3 (Keccak): Sponge ConstructionArticle coming
- Secure Multi-Party Computation (SMPC)Article coming
- Side-Channel Resistant Implementation (Masking)Article coming
- Symmetric Encryption: AES-128/256 ModesArticle coming
- Threshold Cryptography and Secret SharingArticle coming
- Verifiable Random Function (VRF)Article coming
- X25519 and X448 for Key AgreementArticle coming
- Zero-Knowledge Proofs: zk-SNARKs, zk-STARKsArticle coming
Middle Engineer· 80
- 5G Modem Security for IoT (SIM Swap Prevention)Article coming
- AMD SEV-SNP: VM Memory EncryptionArticle coming
- ATECC608: ECC, SHA, and RNG in HWArticle coming
- AUTOSAR E2E Protection ProfileArticle coming
- AUTOSAR SecOC: Message Authentication CodeArticle coming
- Anti-Tamper: Mesh Sensor, Environmental MonitorArticle coming
- AppArmor and SELinux for Embedded LinuxArticle coming
- Arm TrustZone-A: Normal vs. Secure WorldArticle coming
- Automotive Ethernet Security (MACsec 802.1AE)Article coming
- BLE MITM Attack and MitigationArticle coming
- BLE Security: Pairing Modes and LE Secure ConnectionsArticle coming
- BLE Sniffing with Ubertooth OneArticle coming
- Backdoor Detection in Embedded FirmwareArticle coming
- CAN Bus Intrusion Detection System (IDS)Article coming
- CHERI Capability Hardware ArchitectureArticle coming
- Clock Glitching Attack on MCUArticle coming
- CoAP DTLS for Secure IoT CommunicationArticle coming
- Correlation Power Analysis (CPA) AttackArticle coming
- Debug Port Security: TrustZone-M DAP ControlArticle coming
- Differential Power Analysis (DPA) AttackArticle coming
- EU Cyber Resilience Act (CRA) for EmbeddedArticle coming
- Electromagnetic (EM) Side-Channel AnalysisArticle coming
- Embedded Linux Security Hardening (CIS)Article coming
- Fault Injection: Voltage Glitching AttackArticle coming
- File System Analysis: SquashFS, JFFS2, UBIFSArticle coming
- Firmware Reverse Engineering with GhidraArticle coming
- Hardware Formal Verification for SecurityArticle coming
- Hardware Isolation for Multi-Domain SystemsArticle coming
- Hardware Root of Trust: ROM, eFuse, OTPArticle coming
- Hardware Security Module (HSM) Types and APIArticle coming
- Hardware Trojan: Types and DetectionArticle coming
- IC Anti-Counterfeiting: PUF and On-Chip IDArticle coming
- IEC 62443-4-2 Component Security LevelArticle coming
- ISO 15118: V2G TLS Communication SecurityArticle coming
- ISO/SAE 21434: Automotive Cybersecurity Eng.Article coming
- Industrial Protocol Security: Modbus, DNP3Article coming
- Intel SGX: Enclave Memory EncryptionArticle coming
- Intel TDX: Trusted Domain ArchitectureArticle coming
- IoT Firmware Extraction: JTAG, UART, SPI FlashArticle coming
- JTAG Disabling and Debug Lock MechanismsArticle coming
- Kernel Lockdown and Integrity MeasurementArticle coming
- LPWAN Security: LoRaWAN JoinServer, Root KeysArticle coming
- Laser Fault Injection: Optical AttackArticle coming
- Lightweight Cryptography: ASCON, GIFT-COFBArticle coming
- MQTT Security: TLS, ACL, AuthenticationArticle coming
- Matter / Thread PKI and Device AttestationArticle coming
- Matter Protocol Security: PASE, CASE, NOCArticle coming
- Memory Protection: MPU Region LockArticle coming
- Microprobing and FIB (Focused Ion Beam) AttackArticle coming
- NB-IoT and LTE-M Security FeaturesArticle coming
- NXP SE050 and Infineon OPTIGA IntegrationArticle coming
- OBD-II Port Attack Surface and ProtectionArticle coming
- OT Protocol Anomaly Detection (Claroty, Nozomi)Article coming
- Open Titan: Open-Source Root of TrustArticle coming
- PKCS#11 API for HSM IntegrationArticle coming
- PUF Challenge-Response ProtocolArticle coming
- PUF: SRAM PUF and Ring Oscillator PUFArticle coming
- Physically Unclonable Function (PUF) DesignArticle coming
- Post-Quantum on MCU: Kyber-512 on Cortex-M4Article coming
- RISC-V Security ExtensionsArticle coming
- Replay Attack on PKES (Keyless Entry)Article coming
- Root of Trust (RoT): Design and Boot ChainArticle coming
- SBOM for Embedded: CycloneDX FormatArticle coming
- Secure Boot on Embedded Linux: U-Boot + IMAArticle coming
- Secure Boot: Chain of Trust from ROM to AppArticle coming
- Secure Element: ISO 7816, GlobalPlatform APIArticle coming
- Secure Enclave: Apple SEP, Samsung eSEArticle coming
- Secure OTA Update: TLS + Code Signing + Anti-RollbackArticle coming
- Side-Channel: Simple Power Analysis (SPA)Article coming
- Supply Chain Hardware IntegrityArticle coming
- TPM 2.0: PCR Registers, Attestation, Sealed StorageArticle coming
- TPMS Wireless Attack and CountermeasuresArticle coming
- Template Attack and Profiling MethodsArticle coming
- Thread Network Security: DTLS, MLE, MACArticle coming
- Trusted Platform Module (TPM 2.0) ArchitectureArticle coming
- UDS Security Access: Seed-Key AlgorithmArticle coming
- Yocto Security: meta-security LayerArticle coming
- Zigbee 3.0 Security: CCM* EncryptionArticle coming
- Zigbee Coordinator Trust Center SecurityArticle coming
- eFuse and OTP Burning for Device IdentityArticle coming
Senior Engineer· 40
- Active Directory Attacks: KerberoastingArticle coming
- Adversary Emulation: MITRE ATT&CK PlansArticle coming
- Azure AD Privilege Escalation TechniquesArticle coming
- BloodHound for AD Attack Path EnumerationArticle coming
- Broken Authentication: JWT Attacks, Session FixArticle coming
- Buffer Overflow Exploitation: Stack SmashingArticle coming
- CSRF Exploitation and SameSite Cookie FixArticle coming
- Cloud Penetration: AWS Privilege EscalationArticle coming
- Container Escape: Docker runc CVE ExploitsArticle coming
- Cross-Site Scripting (XSS): Reflected, Stored, DOMArticle coming
- DCSync Attack and Golden Ticket ForgeryArticle coming
- Directory Traversal and LFI/RFI ExploitationArticle coming
- Full-Scope Red Team Engagement PlanningArticle coming
- Heap Exploitation: Use-After-Free, Heap SprayArticle coming
- Insecure Deserialization ExploitationArticle coming
- Kubernetes Cluster Pentest: RBAC AbuseArticle coming
- Lateral Movement: PsExec, WMI, SMB RelayArticle coming
- Linux Privilege Escalation: SUID, Cron, PATHArticle coming
- Network Scanning with Nmap: Host DiscoveryArticle coming
- OWASP API Security Top 10 (2023)Article coming
- OWASP Top 10 Web Vulnerabilities 2021Article coming
- Offensive Security Certified Professional (OSCP)Article coming
- Password Cracking: Hashcat, John the RipperArticle coming
- Password Spraying and Credential StuffingArticle coming
- Physical Pentest: Tailgating, Lock PickingArticle coming
- Purple Team Exercise Planning and ExecutionArticle coming
- ROP Chain Construction for Stack ExploitationArticle coming
- Red Team: Cobalt Strike and Brute Ratel C2Article coming
- SQL Injection Exploitation with SQLMapArticle coming
- SQL Injection: Error-Based, Blind, Time-BasedArticle coming
- SSRF Attack and Mitigation TechniquesArticle coming
- Service and Version Detection with NmapArticle coming
- Silver Ticket and Pass-the-Ticket AttackArticle coming
- Social Engineering Simulation: PhishingArticle coming
- Vulnerability Scanning: Nessus, OpenVAS, QualysArticle coming
- Web Application Scanning: Burp Suite ProArticle coming
- Web Fuzzing with ffuf and wfuzzArticle coming
- Windows PE: AlwaysInstallElevated, DLL HijackArticle coming
- Wireless Pentest: Aircrack-ng, WPA2 PMKIDArticle coming
- XXE (XML External Entity) InjectionArticle coming
Staff Engineer· 40
- Abuse Cases and Misuse Cases in RequirementsArticle coming
- CMMC Level 3: DoD Cybersecurity MaturityArticle coming
- CRA (Cyber Resilience Act) for Connected ProductsArticle coming
- Container Image Scanning: Trivy, Grype, ClairArticle coming
- DAST Tools: OWASP ZAP, Burp Suite AutomatedArticle coming
- DO-326A: Airworthiness Security Process (Aviation)Article coming
- DORA Financial Regulation ComplianceArticle coming
- ETSI EN 303 645 IoT Security BaselineArticle coming
- EU AI Act: Risk Classification for AI SystemsArticle coming
- GDPR Article 25: Data Protection by DesignArticle coming
- HIPAA Security Rule: Technical SafeguardsArticle coming
- IAST (Interactive Application Security Testing)Article coming
- IEC 62443-3-3: System Security RequirementsArticle coming
- IEC 62443-4-2: Component RequirementsArticle coming
- IEC 62443: Industrial Cybersecurity Standard SeriesArticle coming
- ISO/IEC 27001 ISMS ImplementationArticle coming
- ISO/SAE 21434: Road Vehicle CybersecurityArticle coming
- IaC Security Scanning: Checkov, tfsecArticle coming
- In-Toto Framework: Build Step AttestationArticle coming
- LINDDUN Privacy Threat ModelingArticle coming
- Microsoft SDL (Secure Development Lifecycle)Article coming
- NERC CIP: Critical Infrastructure for Power GridArticle coming
- NIST CSF 2.0: Six Functions MappingArticle coming
- NIST SP 800-160: Systems Security EngineeringArticle coming
- NIST SP 800-53 Rev 5: Security Controls CatalogArticle coming
- NIST SP 800-82 Rev 3: ICS Security GuideArticle coming
- OWASP SAMM (Software Assurance Maturity Model)Article coming
- PASTA (Process for Attack Simulation and Threat)Article coming
- PCI DSS v4.0: Payment Card SecurityArticle coming
- SAE J3061: Automotive Cybersecurity GuidebookArticle coming
- SAST Tools: Semgrep, CodeQL, Fortify, CheckmarxArticle coming
- SBOM Generation: Syft (CycloneDX), SPDX FormatArticle coming
- SCA (Software Composition Analysis): SnykArticle coming
- SLSA Framework: Build Provenance and IntegrityArticle coming
- SOC 2 Type II: Trust Service CriteriaArticle coming
- Secret Detection: GitLeaks, TruffleHogArticle coming
- Secure Coding Guidelines: CERT C, CERT JavaArticle coming
- Sigstore: Cosign, Fulcio, RekorArticle coming
- Supply Chain Security: SLSA, SigstoreArticle coming
- Threat Modeling: STRIDE CategoriesArticle coming
Distinguished Engineer· 40
- AI-Powered Threat Hunting PlatformsArticle coming
- AI/ML for Anomaly Detection in SOC (UEBA)Article coming
- APT Group Attribution and TrackingArticle coming
- Cognitive Warfare and Information OperationsArticle coming
- Cyber Deception: Fake Credential, BreadcrumbArticle coming
- Cyber Kill Chain Model (Lockheed Martin)Article coming
- Deception Technology: Honeypots, HoneytokensArticle coming
- Diamond Model of Intrusion AnalysisArticle coming
- Digital Forensics: Disk Imaging with FTK ImagerArticle coming
- EDR Solutions: CrowdStrike Falcon, SentinelOneArticle coming
- Elastic Stack (ELK): Kibana Dashboard for SOCArticle coming
- Fluentd / Logstash Log Ingestion PipelineArticle coming
- ICS Threat Intelligence (Dragos, Claroty)Article coming
- IOC Types: IP, Domain, Hash, URL, EmailArticle coming
- Incident Detection: Alert Triage ProcessArticle coming
- Incident Response Plan: Preparation to Lessons LearnedArticle coming
- Log Aggregation Pipeline: syslog to ELKArticle coming
- MISP Platform: Threat Sharing CommunityArticle coming
- MITRE ATT&CK Framework: Techniques and TTPsArticle coming
- MITRE ATT&CK Navigator for Coverage VisualizationArticle coming
- MITRE D3FEND: Defensive Countermeasure OntologyArticle coming
- Malware Analysis: Dynamic (Procmon, Cuckoo)Article coming
- Malware Analysis: Static (Strings, PE Headers)Article coming
- Memory Forensics: Volatility3 FrameworkArticle coming
- Nation-State Threat Actor ProfilingArticle coming
- Network Forensics: Packet Capture AnalysisArticle coming
- OSINT (Open Source Intelligence) TechniquesArticle coming
- OpenCTI Threat Intelligence PlatformArticle coming
- Ransomware Analysis and Decryption TechniquesArticle coming
- SIEM Correlation Rule DevelopmentArticle coming
- SIEM Platforms: Splunk, IBM QRadar, SentinelArticle coming
- SOC Tier Structure: L1 Triage, L2 Analysis, L3 HuntArticle coming
- STIX 2.1: Structured Threat Intelligence FormatArticle coming
- Sigma Rules for Log-Based DetectionArticle coming
- Snort and Suricata IDS Rule WritingArticle coming
- TAXII 2.1: Threat Intelligence Sharing ProtocolArticle coming
- Threat Intelligence Feed Aggregation and ScoringArticle coming
- Threat Intelligence Types: Strategic, Tactical, OperationalArticle coming
- XDR (Extended Detection and Response) PlatformArticle coming
- YARA Rules for Malware Pattern MatchingArticle coming