DeepLocker - Concealing Targeted Attacks with AI Locksmithing
DeepLocker: AI-powered targeted attacks using deep neural networks for evasive malware. Explores mechanisms, implications, and defenses against AI-weaponized cybercrime.
SDL That Won't Break the Bank
Learn cost-effective strategies for implementing a secure development lifecycle in smaller organizations, addressing unique challenges and leveraging available resources.
Automated Discovery of Deserialization Gadget Chains
Explore automated discovery of deserialization gadget chains, understanding vulnerabilities, and learning techniques to find and mitigate exploits in Java libraries and applications.
Outsmarting the Smart City
Explore vulnerabilities in smart city tech, privacy implications, and future trends. Learn to identify city systems and understand attack consequences.
Catch Me, Yes We Can - Pwning Social Engineers Using Natural Language Processing Techniques in Real-Time
Explore techniques to detect and prevent social engineering attacks across various communication channels using content-based analysis and natural language processing.
Lessons and Lulz - The Annual Black Hat USA NOC Report
Insights into setting up, stabilizing, and securing the Black Hat conference network. Learn about tools, techniques, and improvements made by the NOC team to enhance network operations and security.
Lowering the Bar - Deep Learning for Side Channel Analysis
Explore deep learning's potential to automate power side channel analysis, enhancing cryptanalytic techniques and signal processing for improved security assessments.
The Science of Hiring and Retaining Female Cybersecurity Engineers
Explore latest strategies for recruiting and retaining women in cybersecurity, addressing barriers, debunking myths, and implementing effective frameworks for diversity and inclusion.
From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore secure administration challenges, vulnerabilities in password vaults, and effective strategies for protecting administrative credentials in enterprise environments.
Beating the Blockchain by Mapping Out Decentralized Namecoin and Emercoin Infrastructure
Explore decentralized domain infrastructure using Namecoin and Emercoin blockchains, focusing on unofficial TLDs and alternate DNS resolution for takedown-resistant domains.
Stop That Release, There's a Vulnerability!
Explore BlackBerry's software defect tracking system and risk-based release evaluation process for effective security gating in product development.
Pestilential Protocol - How Unsecure HL7 Messages Threaten Patient Lives
Explore healthcare cybersecurity risks, focusing on vulnerabilities in medical devices and HL7 messaging protocols that could potentially endanger patient safety and compromise sensitive medical data.
Black Box is Dead - Long Live Black Box!
Explore the evolution of ATM security against logic attacks, focusing on black box devices and encryption measures implemented to protect cash dispensers.
Back to the Future - A Radical Insecure Design of KVM on ARM
Explore ARM architecture vulnerabilities in KVM, focusing on privilege escalation through exception-generating instructions and hypervisor calls. Learn about potential security risks in virtualization.
AFL's Blindspot and How to Resist AFL Fuzzing for Arbitrary ELF Binaries
Explore AFL fuzzing limitations, its blindspot impact on bug detection, and techniques to resist fuzzing for ELF binaries. Learn about AFL's challenges with symbolic execution seeds.
InfoSec Philosophies for the Corrupt Economy
Explores corruption's impact on information security, contrasting developed and developing countries through real-life criminal and victim accounts. Offers insights into navigating security challenges in corrupt environments.
Every ROSE Has Its Thorn - The Dark Art of Remote Online Social Engineering
Explore the methodology of Remote Online Social Engineering campaigns, from target selection to exit strategies, with insights on defense, detection, and counterattacks against online deception.
How Can Communities Move Forward After Incidents of Sexual Harassment or Assault
Strategies for community healing and accountability after sexual misconduct incidents, focusing on survivor support, offender responsibility, and fostering a stronger, more inclusive environment.
Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels
Explore vulnerabilities in S/MIME and OpenPGP email encryption standards, focusing on outdated cryptographic primitives and potential attack vectors using exfiltration channels.
ZEROing Trust - Do Zero Trust Approaches Deliver Real Security?
Analyze effectiveness of zero trust security across modern OS platforms, examining measurable properties to establish trust in various threat scenarios.
Money-rity Report - Using Intelligence to Predict the Next Payment Card Fraud Victims
Explore predictive methods for identifying potential credit card fraud victims before transactions occur, shifting from reactive to proactive fraud prevention strategies.