Collaborate Disseminate
I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker.
In contrast, in secure connection, both device start by genera… Continue reading How does BLE secure connection ensure man in the middle protection?
Why are there predefined sets of cipher suites. Why is creating your own cipher suites not recommended.
I read that developing a security layer on top of communication protocol without any binding between them could cause issue like MITM attack. I am having hard time seeing how that could be possible. Can someone shed some light on this.
Reading into information security, I noticed two branches. Access control when communication with external device by using some type of cryptographic authentication and encryption mechanism and things like control flow integrity. My questi… Continue reading Why do we need security measure likes control flow integrity and buffer overflow guard if we have good access control protocol in place?