Information Security

Key Derivation Functions (KDF)

• Key Derivation Function: https://en.wikipedia.org/wiki/Key_derivation_function

• PBKDF2: https://en.wikipedia.org/wiki/PBKDF2

• How to store sensitive user data in a database and allow user access through session key: https://security.stackexchange.com/questions/157422/store-encrypted-user-data-in-database

Data transmission

• RSA: https://en.wikipedia.org/wiki/RSA_(cryptosystem)

• HTTPS (Hyper Text Transfer Protocol Secure): https://pt.wikipedia.org/wiki/Hyper_Text_Transfer_Protocol_Secure

• TLS: https://pt.wikipedia.org/wiki/Transport_Layer_Security

Courses

• Univesp - Segurança da Informação (pt_BR): https://youtube.com/playlist?list=PLxI8Can9yAHenoHipBXp9XuJY4BBxBUPQ

Certificate Transparency

• https://certificate.transparency.dev/

Dynamic Arp Inspection

When and ARP request is sent via broadcast to the local network, a malicious host can issue an ARP reply with it's own MAC address. This type of attack is called ARP poisoning. to prevent it, switches can implement dynamic ARP inspection (DAI).