Skill UI

This skill simulates security incidents using discussion-based tabletop exercises for Security Operations Center (SOC) teams. It is designed to test incident response procedures, evaluate cross-functional communication workflows (e.g., Legal, PR, Executive), and assess decision-making capabilities under pressure, all without touching production environments. Ideal for compliance validation, playbook refinement, and comprehensive team training.

A structured framework for performing initial security incident triage. It guides analysts through classifying incident types using established standards like NIST SP 800-61r3, assigning business impact severity (P1-P4), enriching alerts with threat intelligence, and determining containment and escalation paths. Use when SIEM/EDR alerts require human judgment or when coordinating multiple concurrent security events.

This skill serves as the central entry point for comprehensive API security testing. It guides testers to systematically categorize and prioritize potential vulnerabilities by focusing on core dimensions such as documentation review (Recon), object-level authorization (BOLA), token integrity (JWT), and complex data structures (GraphQL/Hidden Params). Use this as the initial step when assessing a new REST or GraphQL endpoint.

This guide details how to audit and position security research submissions for premier academic venues like CCS, S&P, USENIX, and NDSS. It teaches authors to structure their 'Related Work' section by comparing their novelty against the 'security big four,' specialist literature, and real-world practitioner records (such as CVEs and vendor advisories). The goal is to clearly articulate the technical delta and eligibility for publication.

A comprehensive guide for authors planning research submissions to top-tier academic security conferences like CCS. It details the two-cycle HotCRP workflow, decision criteria, and strategic advice on addressing threat model soundness, novelty, evidence quality, and crucial ethical disclosure concerns across all stages, from initial review to minor revision.

A comprehensive guide for authors submitting to top-tier security conferences (e.g., IEEE S&P). It details best practices for constructing the 'Related Work' section, focusing on defining a clear 'security delta' statement, mapping coverage across multiple attack vectors, managing resubmission overlaps (40% rule), and verifying citation attribution using tools like dblp and IEEE Xplore.

This guide helps researchers evaluate whether a security or privacy project is a suitable fit for top-tier academic conferences like IEEE S&P. It covers critical fit tests, such as establishing a defensible threat model and ensuring end-to-end evidence closure. It also provides advice on SoK paper formats, routing among major security venues (USENIX, CCS, NDSS), and adhering to submission rules like one-year embargoes.

A comprehensive guide for drafting and revising security research papers intended for top-tier conferences like IEEE S&P (Oakland). It teaches authors how to structure their work to withstand rigorous reviewer scrutiny, focusing on passing the 'first-round survival test,' implementing load-bearing threat models, and calibrating all claims to remove hyperbole and ensure maximum impact within strict page limits.

This guide models the three-stage review process for the Journal on Communications (JOC). It helps authors understand the initial screening (format, relevance, plagiarism), expert peer review, and final committee review. By predicting potential outcomes and identifying strategic 'levers' at each stage, users can effectively revise manuscripts, manage submission timelines, and significantly increase the chances of successful publication in communication, networking, or information security fields.

This guide provides a comprehensive framework for authors responding to peer reviews in major security conferences. It details how to triage reviewers' comments, structure technical responses (pointing to evidence, not arguing), handle complex objections like adaptive attacks and ethics, and effectively participate in the interactive discussion phase to refine the paper.

A rigorous guide for drafting academic papers for top-tier security conferences like NDSS. It teaches authors how to structure complex security arguments, define capability-bounded adversaries, quantify claims with evidence, weave ethical considerations into the narrative, and adhere to strict page limits to maximize acceptance chances.

A comprehensive guide for positioning computer science manuscripts for top-tier security conferences like USENIX Security. It covers core topics (systems, network, privacy, software security), required evidence (rigorous artifact, measurement, vulnerability analysis), and strategic advice on framing the work to meet adversarial reviewer expectations. Ideal for authors preparing high-stakes academic submissions.