YoVDO

Three New Attacks Against JSON Web Tokens

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Cybersecurity Courses Cryptography Courses JSON Web Tokens Courses

Course Description

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore three new attacks against JSON Web Tokens (JWTs) in this 40-minute Black Hat conference talk. Delve into the vulnerabilities of JWTs and the associated Javascript Object Signing and Encryption (JOSE) standards, which have been criticized for cryptographic design flaws and unnecessary complexity. Examine the well-known "alg":"none" attack and discover how these security issues can impact web authentication, session management, and identity federation. Learn from security researcher Tom Tervoort as he presents his findings and discusses the implications for developers and security professionals working with JWT implementations.

Syllabus

Three New Attacks Against JSON Web Tokens


Taught by

Black Hat

Related Courses

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Black Hat via YouTube Attacks From a New Front Door in 4G & 5G Mobile Networks
Black Hat via YouTube AAD Joined Machines - The New Lateral Movement
Black Hat via YouTube Better Privacy Through Offense - How to Build a Privacy Red Team
Black Hat via YouTube Whip the Whisperer - Simulating Side Channel Leakage
Black Hat via YouTube