Learn how to secure Model Context Protocol (MCP) transport layers using post-quantum cryptography (PQC) to defend against future quantum computing threats.
The post PQC-Hardened Model Context Protocol Transport Layers appeared first on Security Boulevard.
Are Organizations Truly Safe Without Effective Non-Human Identity Management? The Growing Importance of Agentic AI in Platform Security How can organizations navigate the complex terrain of cybersecurity to ensure both human and machine identities are secure? The answer may lie within the burgeoning field of Agentic AI, which is transforming platform security. Where businesses increasingly […]
The post How does Agentic AI improve platform security appeared first on Entro.
The post How does Agentic AI improve platform security appeared first on Security Boulevard.
Are You Managing Your Non-Human Identities Effectively? Managing Non-Human Identities (NHIs) poses unique challenges for cybersecurity professionals. With the reliance on cloud services grows, so does the necessity for robust secrets management. Understanding the importance of NHIs—and how to protect them—is crucial for maintaining business security. Deciphering Non-Human Identities NHIs are essentially machine identities within […]
The post What makes secrets management essential for businesses appeared first on Entro.
The post What makes secrets management essential for businesses appeared first on Security Boulevard.
How Safe Are Autonomous Agents in Your Cloud Environment? Have you ever considered the security risks posed by autonomous agents in your organization’s cloud environment? With technology advances, the rise of machine identities or Non-Human Identities (NHIs) has become a focal point in contemporary cybersecurity discussions. These NHIs operate much like a “tourist” with a […]
The post How do autonomous agents decide in secure environments appeared first on Entro.
The post How do autonomous agents decide in secure environments appeared first on Security Boulevard.
How Secure Are Your Non-Human Identities? Imagine you’re managing a bustling airport, where travelers are constantly arriving and departing. Now, replace those travelers with machine identities, and you’re picturing the modern cloud environment. Non-Human Identities (NHIs) represent these machine identities, analogous to travelers, each carrying encrypted “passports” in the form of passwords, tokens, or keys. […]
The post What are the best practices for NHI management appeared first on Entro.
The post What are the best practices for NHI management appeared first on Security Boulevard.
A Solutions Architect explores the harsh realities of de-identifying sensitive data by creating custom scripts, including the questions and complexities that arise along the way.
The post Data masking: DIY internal scripts or time to buy? appeared first on Security Boulevard.
Radware this week revealed it has acquired Pynt, a provider of a set of tools for testing the security of application programming interfaces (APIs). Uri Dorot, a senior product marketing manager for Radware, said that capability will continue to be made available as a standalone tool in addition to being more tightly integrated into the..
The post Radware Acquires Pynt to Add API Security Testing Tool appeared first on Security Boulevard.
Session 10C: Privacy Preservation
Authors, Creators & Presenters: Eduardo Chielle (New York University Abu Dhabi), Michail Maniatakos (New York University Abu Dhabi)
PAPER
Recurrent Private Set Intersection for Unbalanced Databases with Cuckoo Hashing and Leveled FHE
A Private Set Intersection (PSI) protocol is a cryptographic method allowing two parties, each with a private set, to determine the intersection of their sets without revealing any information about their entries except for the intersection itself. While extensive research has focused on PSI protocols, most studies have centered on scenarios where two parties possess sets of similar sizes, assuming a semi-honest threat model. However, when the sizes of the parties' sets differ significantly, a generalized solution tends to underperform compared to a specialized one, as recent research has demonstrated. Additionally, conventional PSI protocols are typically designed for a single execution, requiring the entire protocol to be re-executed for each set intersection. This approach is suboptimal for applications such as URL denylisting and email filtering, which may involve multiple set intersections of small sets against a large set (e.g., one for each email received). In this study, we propose a novel PSI protocol optimized for the recurrent setting where parties have unbalanced set sizes. We implement our protocol using Levelled Fully Homomorphic Encryption and Cuckoo hashing, and introduce several optimizations to ensure real-time performance. By utilizing the Microsoft SEAL library, we demonstrate that our protocol can perform private set intersections in 20 ms and 240 ms on 10 Gbps and 100 Mbps networks, respectively. Compared to existing solutions, our protocol offers significant improvements, reducing set intersection times by one order of magnitude on slower networks and by two orders of magnitude on faster networks.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.
The post NDSS 2025 – Recurrent Private Set Intersection For Unbalanced Databases With Cuckoo Hashing appeared first on Security Boulevard.
A survey of 506 cybersecurity leaders and practitioners working for organizations with more than 500 employees, published today, finds that while 80% report security and DevOps teams are using shared observability tools, less than half (45%) say the two teams are very aligned on tooling and workflows compared to 43% that said these teams are..
The post Survey Surfaces Lots of Room for DevSecOps Improvement appeared first on Security Boulevard.
5 min readManaging digital identities for both human and non-human users is a central challenge for modern organizations. As companies adopt more SaaS platforms, microservices, and multi-cloud environments, they face two major identity challenges: Each login represents a potential vulnerability and productivity loss. According to 1Password, one in three employees (34%) reuse passwords at work, even when […]
The post SSO vs. Federated Identity Management: A Guide appeared first on Aembit.
The post SSO vs. Federated Identity Management: A Guide appeared first on Security Boulevard.
Cyber incidents in the public sector rarely begin with chaos. More often, they start quietly, with access that appears routine and activity that blends into normal operations. That pattern is evident in a recent breach involving the Victoria Department of Education, where unauthorized access exposed personal information belonging to current and former students and triggered
The post Student Data at Risk: What the Victoria Education Breach Exposes About Public Sector Security appeared first on Seceon Inc.
The post Student Data at Risk: What the Victoria Education Breach Exposes About Public Sector Security appeared first on Security Boulevard.
A 149M-credential breach shows why encryption alone isn’t enough. Infostealer malware bypasses cloud security by stealing passwords at the endpoint—where encryption offers no protection.
The post Another Credential Leak, Another Dollar appeared first on Security Boulevard.
Master cryptographic agility for AI resource governance. Learn how to secure Model Context Protocol (MCP) with post-quantum security and granular policy control.
The post Cryptographic Agility for Contextual AI Resource Governance appeared first on Security Boulevard.
Explore different methods for authenticating devices on a network, from hardware addresses to advanced certificate-based systems for developers.
The post Methods for Authenticating Devices on a Network appeared first on Security Boulevard.
What Makes Non-Human Identities (NHIs) Vital for Cloud Security? Where businesses increasingly shift operations to the cloud, how can they ensure robust security while managing machine identities? Non-Human Identities (NHIs) offer a promising solution, playing a pivotal role in safeguarding digital environments from potential risks. Businesses across various sectors, from healthcare to financial services, are […]
The post How does Agentic AI reduce risks in digital environments? appeared first on Entro.
The post How does Agentic AI reduce risks in digital environments? appeared first on Security Boulevard.
How Can Organizations Meet the Challenges of Compliance Automation? What are the key challenges businesses face when aiming to satisfy regulatory requirements through compliance automation? Managing non-human identities (NHIs) and secrets security in cloud environments is becoming increasingly important for businesses across various industries. Financial services, healthcare, travel, and DevOps teams are all seeking robust […]
The post Can compliance automation keep regulators satisfied? appeared first on Entro.
The post Can compliance automation keep regulators satisfied? appeared first on Security Boulevard.
Have You Considered the Impact of AI on Secrets Security Management? Where cyber threats grow more sophisticated every day, ensuring robust security for Non-Human Identities (NHIs) is crucial. NHIs are pivotal in maintaining security standards across digital environments, and effective secrets management is integral to this process. By harnessing the power of Artificial Intelligence (AI), […]
The post How does AI enhance visibility in secrets management? appeared first on Entro.
The post How does AI enhance visibility in secrets management? appeared first on Security Boulevard.
How Can Non-Human Identities Enhance Your Security Protocols? Are you fully harnessing the potential of Non-Human Identities (NHIs) in securing your enterprise’s digital? With digital environments increasingly rely on machine interactions, Non-Human Identities have emerged as crucial components of a robust cybersecurity strategy. Understanding and managing these entities can significantly strengthen your organization’s security posture, […]
The post How improved can compliance be with AI integration? appeared first on Entro.
The post How improved can compliance be with AI integration? appeared first on Security Boulevard.
At 6:32 a.m., a hospital in Belgium pulled the plug on its own servers. Something was already inside the network, and no one could say how far it had spread. By mid-morning, scheduled procedures were canceled. Critical patients were transferred out with help from the Red Cross. Staff went back to paper. Emergency services ran at reduced […]
The post When Hospitals Go Dark and Browsers Turn Rogue appeared first on ColorTokens.
The post When Hospitals Go Dark and Browsers Turn Rogue appeared first on Security Boulevard.
Session 10C: Privacy Preservation
Authors, Creators & Presenters: Xiaoguang Li (Xidian University, Purdue University), Zitao Li (Alibaba Group (U.S.) Inc.), Ninghui Li (Purdue University), Wenhai Sun (Purdue University, West Lafayette, USA)
PAPER
On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attacks
Recent studies reveal that local differential privacy (LDP) protocols are vulnerable to data poisoning attacks where an attacker can manipulate the final estimate on the server by leveraging the characteristics of LDP and sending carefully crafted data from a small fraction of controlled local clients. This vulnerability raises concerns regarding the robustness and reliability of LDP in hostile environments. In this paper, we conduct a systematic investigation of the robustness of state-of-the-art LDP protocols for numerical attributes, i.e., categorical frequency oracles (CFOs) with binning and consistency, and distribution reconstruction. We evaluate protocol robustness through an attack-driven approach and propose new metrics for cross-protocol attack gain measurement. The results indicate that Square Wave and CFO-based protocols in the server setting are more robust against the attack compared to the CFO-based protocols in the user setting. Our evaluation also unfolds new relationships between LDP security and its inherent design choices. We found that the hash domain size in local-hashing-based LDP has a profound impact on protocol robustness beyond the well-known effect on utility. Further, we propose a zero-shot attack detection by leveraging the rich reconstructed distribution information. The experiment show that our detection significantly improves the existing methods and effectively identifies data manipulation in challenging scenarios.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.
The post NDSS 2025 – On the Robustness Of LDP Protocols For Numerical Attributes Under Data Poisoning Attacks appeared first on Security Boulevard.
