Path Traversal Attacks on Android - Ekoparty 2023
Explora vectores de ataque de path traversal en Android, técnicas para sobrescribir y leer archivos internos, y métodos de mitigación. Presentado por Anderson Valencia, pentester de aplicaciones web y móviles.
Unexpected Data Dependency Creation and Chaining - A New Attack to SDN
Explores a novel attack on Software-Defined Networking, demonstrating unexpected data dependencies and their chaining effects. Covers attack mechanics, impacts, and potential countermeasures.
Side-Channel Attacks
Explore side-channel attacks, including Spectre, timing attacks, and countermeasures. Learn about developer knowledge, resistance techniques, and future directions in cybersecurity.
Network Security - It's A Trap
Explore network security vulnerabilities and traps, learning to identify and mitigate potential threats in digital environments.
Surviving an Application DoS - Strategies and Open Source Defense Framework
Explore strategies to defend against Application-Level DoS attacks using a new open-source Node.js framework. Learn to identify threats, analyze traffic patterns, and implement active defense measures.
The Past, Present, and Future of Cross-Site and Cross-Origin Request Forgery
Explore the evolution of Cross-Site Request Forgery attacks, their impact on applications, and effective defense strategies. Learn about vulnerabilities in API-based systems and best practices to prevent CSRF.
P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control
Explore innovative network security techniques using P4Control for high-speed cross-host attack prevention through in-network information flow control.
Not All Attacks Are Malicious: DDoS from Outside and Within
Explore DDoS attacks on NRK.no, their impact, and mitigation strategies. Learn about internal and external threats, and how to minimize consequences when attacks occur.
Navigating Record-Breaking DDoS Attacks - Lessons Learned and Best Practices
Experts share insights on combating evolving DDoS attacks, discussing attacker motivations, methods, and best practices for defending against increasingly complex and frequent threats.
HTTP Request Smuggling - Web Application Hacking Techniques
Explore HTTP Request Smuggling techniques for web application security, uncovering vulnerabilities and enhancing your hacking skills.
Side Channels in Cryptography - Session 2
Explore advanced cryptographic concepts and latest research on side channel attacks in this Crypto 2023 session, chaired by Chitchanok Chuengsatiansup.
CHERI - A Hybrid Capability-System Architecture for Scalable Software Compartmentalization
Explores CHERI architecture for enhanced memory protection and software compartmentalization, demonstrating improved scalability and security benefits over traditional MMU designs.
Kubernetes Exposed - One YAML Away from Disaster
Explore real-world Kubernetes security vulnerabilities, common errors, and exploitation techniques. Learn to detect and mitigate risks in internet-connected clusters based on actual cybersecurity experiences.
Timing Attacks in Cryptographic Libraries - Developers' Perspectives
Explore cryptographic library developers' perspectives on timing attacks and their mitigation strategies in this insightful conference session.
Mitigating Kubernetes Attacks
Explore Kubernetes attack vectors, mitigation strategies, and best practices for securing cloud-native deployments. Learn to protect your clusters using MITRE ATT&CK framework and Azure's extensions.
GitHub Actions: Vulnerabilities, Attacks, and Counter-Measures
Explore vulnerabilities, attacks, and countermeasures for GitHub Actions, enhancing your understanding of secure CI/CD practices and DevSecOps implementation.
Software Security Analysis - Present and Future Research Initiatives
Explore software security analysis, covering vulnerability detection, attack mitigation, and automated exploit generation. Learn about cutting-edge research initiatives in program comprehension and security testing techniques.
DNS Protocol in the Hands of the Attacker
Explore DNS protocol vulnerabilities and attack techniques in this cybersecurity presentation. Learn how attackers exploit DNS weaknesses and discover effective defense strategies.
Ekoparty #UniTalks Colombia - Evadiendo la protección de ransomware de Windows
Explicación detallada sobre ransomware y técnicas para evadir la protección antiransomware de Windows, destacando la importancia de implementar controles de mitigación efectivos.
Bringing Zero Trust to Industrial Control Systems
Explore Zero Trust concepts for Industrial Control Systems, addressing vulnerabilities and improving cybersecurity readiness across IT and OT domains for enhanced threat response.
A Critical Assessment of Supply Chain Intrusion Vectors
Critical analysis of supply chain attacks, distinguishing between modification and third-party compromise. Explores functionality, execution, and defensive measures, providing insights for risk assessment and mitigation strategies.