Skill UI

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This guide covers essential security best practices for Spring Boot applications. Learn how to implement robust authentication (JWT, OAuth2), authorization using method security, secure input validation, prevent SQL injection, manage secrets, and configure vital security headers (CORS, CSRF). Essential for building production-ready, secure Java backend services.

A comprehensive CI/CD quality gate checklist for Spring Boot projects. It guides developers through mandatory steps including building, static analysis (SpotBugs, PMD), running unit/integration tests, measuring code coverage, performing security scans (OWASP), and reviewing diffs before merging or deploying.

This comprehensive guide assists authors in evaluating the suitability, framing, and structural requirements for submitting research on wireless, mobile, IoT, sensing, and network security/privacy to the ACM WiSec conference. It provides critical expertise on aligning the paper's contribution type, threat model, and evidence standards with top-tier academic conference expectations, ensuring the work emphasizes the physical or network context.

A comprehensive guide for authors planning research submissions to top-tier academic security conferences like CCS. It details the two-cycle HotCRP workflow, decision criteria, and strategic advice on addressing threat model soundness, novelty, evidence quality, and crucial ethical disclosure concerns across all stages, from initial review to minor revision.

A comprehensive checklist and audit guide for submitting papers to ACM CCS. This resource covers mandatory requirements such as abstract registration deadlines, adherence to the strict two-column sigconf template, rigorous anonymization protocols, dedicated ethics sections, and avoiding desk-reject triggers. Essential for authors preparing for top-tier security conferences.

This comprehensive guide assists researchers in determining the optimal top-tier academic venue (such as CCS, S&P, USENIX, NDSS, PETS) for their security research. It teaches how to rigorously classify the security contribution type, sharpen the threat model, and assess the technical fit of the work based on its nature (attack, defense, protocol, etc.).

This comprehensive guide serves as the mandatory final audit checklist for papers submitted to top-tier security conferences (like S&P). It covers crucial, non-negotiable steps—including meticulous formatting, ORCID verification, deep anonymization techniques, and ethics considerations—to prevent preventable desk-rejects during the submission workflow.

This guide models the three-stage review process for the Journal on Communications (JOC). It helps authors understand the initial screening (format, relevance, plagiarism), expert peer review, and final committee review. By predicting potential outcomes and identifying strategic 'levers' at each stage, users can effectively revise manuscripts, manage submission timelines, and significantly increase the chances of successful publication in communication, networking, or information security fields.

Performs a comprehensive security audit of Model Context Protocol (MCP) implementations, including servers, clients, and tools. This skill reviews code against critical security baselines (MCP-01 to MCP-05), OWASP MCP Top 10, and common Remote Code Execution (RCE) vectors (e.g., command injection, deserialization, SSRF). The output provides a detailed report with file and line references, ensuring compliance and identifying vulnerabilities before release. Use this when auditing network-exposed services or client security posture.

This guide provides a comprehensive framework for authors responding to peer reviews in major security conferences. It details how to triage reviewers' comments, structure technical responses (pointing to evidence, not arguing), handle complex objections like adaptive attacks and ethics, and effectively participate in the interactive discussion phase to refine the paper.

A comprehensive guide detailing the high standards required for presenting security evidence at major conferences. It covers methodologies for proving claims—including attacks, defenses, and detection systems—across live internet measurements, controlled testbeds, and emulation. Key requirements include adaptive adversary modeling, rigorous measurement hygiene, and adherence to ethical review protocols to ensure results are reproducible and relevant to real-world networks.