The Java Agent - Modifying Bytecode at Runtime to Protect Against Log4J
Explore Java Agents for runtime bytecode modification, focusing on protecting against Log4J vulnerabilities. Learn about JNDI, RASPs, and see live demos of dynamic attachment and vulnerability patching.
Introduction to Embedded Linux Security
Explore embedded Linux security concepts, threat modeling, secure boot, encryption, coding practices, access control, and network protection for robust system design.
Bug Hunting with Static Code Analysis
Explore automated techniques for identifying security flaws in source code, from simple scripts to advanced analyzers, and learn to integrate them into continuous integration systems for early bug detection.
Automation in Application Security
Discover strategies for preventing application attacks through automation, enhancing security beyond traditional mitigation and detection methods.
Connection String Attacks
Explore connection string vulnerabilities and attack techniques in web applications, focusing on security implications and prevention strategies.
EOS - Hackers New Bank
Exploración de ataques y vulnerabilidades en la blockchain EOS, incluyendo casos de estudio de pérdidas millonarias y análisis de CVEs específicos por un experto en seguridad de blockchain.
Attacking GSM - Alarms, Smart Homes, Smart Watches and More
Explore vulnerabilities in GSM devices like alarms and smartwatches. Learn number spoofing, brute-force attacks, and mobile operator exploits. Gain hands-on experience and develop security requirements for GSM systems.
Defibrilating Web Security
Exploring fallacies in server-side web security and introducing innovative solutions, including contextual runtime taint tracking for Java and Ruby.
Don't Feed The Hippos
Exploring common failures in security communication with developers, this talk offers insights on avoiding 'insecure hippos' and provides best practices for effective collaboration in software security.
Summer of Fuzz - MacOS
Explore overlooked attack surfaces on macOS through fuzzing techniques. Learn to bypass security protections, debug effectively, and use new tools for crash triage in Apple core apps and services.
Colorful Like a Chameleon - Security Nightmares of Embedded Systems
Explore security vulnerabilities in embedded systems, focusing on real-world examples and practical attack scenarios. Learn about potential risks and strategies for enhancing embedded system security.
Patching Loopholes - Finding Backdoors in Applications
Explore techniques for identifying hidden vulnerabilities and backdoors in applications, enhancing your ability to secure digital transactions and sensitive data storage.
Lessons From Two Years of Crypto Audits
Explore fascinating security issues and risks in memory-safe languages like Rust, based on insights from two years of cryptocurrency audits.
Writing Trusted Applications in Rust
Explore using Rust for Trusted Applications, leveraging its security features like memory safety and error handling for system-level code development in secure environments.
Shifting Knowledge Left - Keeping up with Modern Application Security
Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.
IOT and AppSec
Explore the intersection of Internet of Things (IoT) and application security, examining potential vulnerabilities and strategies for safeguarding connected devices and systems.
Security Module for PHP7 - Killing Bugclasses and Virtual-Patching the Rest
Explore Snuffleupagus, a new PHP security module for killing bug classes and virtual-patching vulnerabilities without modifying application code. Learn its features and implementation.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.
The ThreadFix Ecosystem - Vendors, Volunteers, and Versions
Explore ThreadFix: an open-source system for managing app vulnerabilities, automating security tasks, and integrating tools. Learn about its components, ecosystem, and real-world case studies of platform improvements.
Mobile Landscape - The Security of Wearables
Explore the security challenges of wearable devices, including device, application, and network security. Learn about potential threats and considerations for developing secure wearable applications.
New Farming Methods for the Epistemological Wasteland of Application Security
Explore innovative approaches to application security, focusing on early-stage security testing and practical tools for immediate implementation in development processes and delivery pipelines.