Featured | Security engineering

Cryptographic failures in RF encryption allow stealing robotic devices

Cryptography Applied Security Hardware

Friendly drone identification technology

UA DroneID

Friendly drone identification technology

How mobile app analytics library led to the PII exposure

vulnerability management third-party security

SBOM from the security perspective

sbom sbom security

Protecting ML models running on edge devices and mobile apps

machine learning security ml model security

Cossack Labs Mobile Security Score framework for mobile AppSec

Security engineering

Security autotests for measurable and stable application security processes

security automation vulnerability management

Practical OAuth security guide for mobile applications

oauth security google oauth security assessment

Building security for M&A solutions: 5-years of SSDLC

M&A solution

SaaS Virtual Data Room Cloud data security

Building security for M&A solutions: 5-years of SSDLC

Security tips on using YubiKey and FIDO U2F

yubikey security yubikey security flaws

Flutter application security considerations

flutter security flutter security vulnerabilities

Digital payment security: Architecture guide

digital wallets security building secure fintech apps

How to prevent digital wallet fraud

digital wallet fraud fintech security

Product security for one of the biggest African banks

Bank

Banking Mobile Security assurance

Product security for one of the biggest African banks

Xaman wallet security assurance and improvements

Finance Digital wallet

Xaman wallet security assurance and improvements

Exploring security vulnerabilities in NFC digital wallets

nfc security nfc security risk

Smart contract security audit: tips & tricks

audit smart contracts smart contract audit consulting

Smart contract security audit for Allbridge Classic

Finance Smart contracts

Smart contract security audit for Allbridge Classic

Introduction to automated security testing

automated security testing dynamic application security testing tools

IIoT security: protecting specialised edge ML devices

ML models

Industrial IoT AI / ML Security architecture SSDLC

IIoT security: protecting specialised edge ML devices

Cryptographic failures in RF encryption allow stealing robotic devices

cryptographic failures break fixed nonce ctr

Crypto wallet security assessment for Temple Wallet

Finance Digital wallet

Crypto wallet security assessment for Temple Wallet

React Native libraries: Security considerations

React Native react native security

TLS certificate validation in Golang: CRL & OCSP examples

ocsp verifier how to validate tls certificate

Building a secure data vault for PII protection

Mass consumer service

B2B2C Mass consumer services Secure data vault

Building a secure data vault for PII protection

Crypto wallets security as seen by security engineers

crypto wallets security assessment crypto wallets security issues

Cryptographic IP protection for AI/ML product

ML & TensorFlow

Mobile application AI / ML

Cryptographic IP protection for AI/ML product

Shared responsibility model in cloud security: mind the gap

cloud strategy cloud security

Protecting telemetry data in state-wide critical infrastructure network

Ukraine’s largest
power grid operator

Power grid operator Critical infrastructure SCADA security

Protecting telemetry data in state-wide critical infrastructure network

Building ironclad data security for M&A solution leader

M&A solution

SaaS Virtual Data Room Cloud data security

Building ironclad data security for M&A solution leader

React Native app security: Things to keep in mind

React Native react native security

Audit logs security: cryptographically signed tamper-proof logs

security log secure log records

How to build OpenSSL for Carthage iOS

encryption iOS encryption

OpenSSL for iOS: tricks of OpenSSL semver

openssl boringssl

PII Encryption Requirements. Cheatsheet

Quick migration to field level encryption of governmental data

GovTech

Service platform GovTech Finance

Quick migration to field level encryption of governmental data

Lift & Shift: cloud security strategy

cloud security lift and shift

How to prepare for data security issues

security security incidents

Implementing End-to-End encryption in Bear App

end-to-end encryption Bear app

End-to-end encryption and multi-device synchronisation for 6M users

Mobile application Cloud data security

End-to-end encryption and multi-device synchronisation for 6M users

Secure search over encrypted data

searchable encryption blind indexing

Proxy-Mediated Searchable Encryption in SQL Databases Using Blind Indexes

White papers & Research

Install Acra 1-Click App through DigitalOcean Marketplace

Acra DigitalOcean

Encrypting patients' data across hospital networks

EHR exchange Cloud data security

Encrypting patients' data across hospital networks

Acra on DigitalOcean Marketplace

Defense in depth security strategy based on data encryption

Acra defense in depth

How to build an SQL Firewall

How to prevent SQL injections when WAF’s not enough

Blockchain & GDPR: dos and don’ts while achieving compliance

blockchain security etherium

Hiring External Security Team: What You Need to Know

security consulting pentesting

How to Implement Tracing in a Modern Distributed Application

GDPR for software developers: implementing rights and security demands

GDPR GDPR requirements

Poison Records in Acra – Database Honeypots for Intrusion Detection

Acra poison records

How to reduce Docker image size (Example)

Moving to OpenSSL 1.1.0 — How We Did It

End-to-end encryption for remote debugging tool

Software application Application level encryption

End-to-end encryption for remote debugging tool

Auditable Macros in C Code

cryptography macros

Replacing OpenSSL with Libsodium

cryptography infographic

Replacing OpenSSL with BoringSSL in a Complex Multi-Platform Layout

cryptography android

Importing with ctypes in Python: fighting overflows

Plugging leaks in Go memory management

Hermes, a framework for cryptographically assured access control and data security

White papers & Research

13 tips to enhance database and infrastructure security

infosec backend security

Why making Internet safe is everyone’s responsibility

safe internet global threats

Key management in data security: fundamentals

key management crypto

Backend security: design patterns best practices

database security backend security

Zero Knowledge Protocols without magic

zkp zero knowledge protocols

Perimeter security: avoiding disappointment, shame and despair

web security applied crypto

Choose your Android crypto (Infographic)

cryptography android

Building Sesto, in-browser password manager

password manager password storage

Benchmarking Secure Comparator

Secure Comparator SMP

Crypto in iOS: Choose your destiny (Infographic)

cryptography ios

Building secure end-to-end webchat with Themis

pythemis webthemis

Building LibreSSL for PNaCl

Building and Using Themis in PNaCl

Themis Webthemis PNaCl Chrome web security crypto

What's wrong with Web Cryptography

cryptography js

Secure Comparator: a ZKP-Based Authentication System, rev 1.2

White papers & Research

Introducing Secure Comparator

Secure Comparator ZKP

Why we need novel authentication schemes?

authentication kerberos

WeakDH/LogJam vs Secure Session

Armoring ed25519 to meet extended security challenges

Why you should avoid SSL for your next application

SSL cryptography network security secrecy Themis NaCL POODLE BEAST CRIME Heartbreak LogJam Diffie Hellmann

Building encrypted chat service with Themis and mobile websocket example

cryptography mobile ruby ios objc android java

Notes on adding cutting edge features

cutting edge themis secure comparator zkp ed25519

Releasing Themis into public: usability testing

cossack labs data security