Three New Attacks Against JSON Web Tokens
Offered By: Black Hat via YouTube
Course Description
Overview
Explore three new attacks against JSON Web Tokens (JWTs) in this 40-minute Black Hat conference talk. Delve into the vulnerabilities of JWTs and the associated Javascript Object Signing and Encryption (JOSE) standards, which have been criticized for cryptographic design flaws and unnecessary complexity. Examine the well-known "alg":"none" attack and discover how these security issues can impact web authentication, session management, and identity federation. Learn from security researcher Tom Tervoort as he presents his findings and discusses the implications for developers and security professionals working with JWT implementations.
Syllabus
Three New Attacks Against JSON Web Tokens
Taught by
Black Hat
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network