Large Language Models (LLMs) & Cybersecurity – Navigating the Dual-Edged Sword
The integration of Large Language Models (LLMs) has transformed [...]
CrowdStrike: A Lesson in Memory Safety
This blog post discusses the recent CrowdStrike incident where [...]
How can a Stack Buffer Overflow be used to Execute Arbitrary Code?
The article explains Stack-based Buffer Overflow attacks (CWE-121), highlighting [...]
A Deep Dive into the Recent Eclipse ThreadX CVEs: Who’s Affected?
This blog post discusses two newly discovered CVEs affecting [...]
Finding Segmentation Faults in Binary Machine Code: Comparing Different Approaches
The blog post explores different approaches to finding segmentation [...]
What is Attribute Based Access Control (ABAC)?
Attribute based access control (ABAC) is a different approach to [...]
AuthoriZation Based Access Control (ZBAC) and model-driven security
Today I would like to share my views about [...]
Resource-Based Access Control (ResBAC) vs. Identity-Based Access Control (IBAC)
Most technical access control policies today are specified "identity-centric", [...]
Implementing NIST 800-53 AC with OpenPMF™
NIST Special Publication 800-53 (Rev. 4), "Security and Privacy Controls [...]
Implementing Proximity-Based Access Control (PBAC) using Model-Driven Security
A particularly advanced and highly useful access control approach we [...]
