The Security Wolf of Wall Street - Fighting Crime With High-Frequency Classification
Explore real-time threat detection using machine learning on massive DNS data. Learn about Avalanche stream processing and NLP-Rank for automated phishing detection at scale.
The Tactical Application Security Program - Getting Stuff Done
Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.
Numchecker - A System Approach for Kernel Rootkit Detection
Explore NumChecker, a VMM-based framework for detecting kernel rootkits using Hardware Performance Counters. Learn about its implementation, effectiveness, and security analysis.
Multivariate Solutions to Emerging Passive DNS Challenges
Explore emerging challenges in passive DNS threat intelligence and learn multivariate solutions to overcome them, enhancing your ability to identify related malicious domains effectively.
Removing Roadblocks to Diversity
Insightful discussion on strategies to attract, retain, and promote women and minorities in cybersecurity, addressing industry challenges and sharing personal experiences to foster inclusivity and diversity.
Behind the Scenes of iOS Security
Explore iOS security mechanisms including HomeKit, Auto Unlock, iCloud Keychain, Data Protection, and JIT hardening. Learn about Apple's innovative approaches to protect user data and enhance mobile security.
HTTP Cookie Hijacking in the Wild - Security and Privacy Implications
Explores security vulnerabilities in websites with partial HTTPS deployment, revealing how cookie hijacking can expose sensitive user data and functionality across major online platforms.
AirBnBeware - Short Term Rentals Long Term Pwnage
Explore network security risks in short-term rentals, including attacks and defenses for both renters and property owners. Learn practical countermeasures to protect against potential threats in the sharing economy.
A Lightbulb Worm
Explore the potential for worms in smart light networks, focusing on Philips Hue's security measures and advanced techniques for hacking IoT devices.
HEIST - HTTP Encrypted Information can be Stolen Through TCP-Windows
Unveils HEIST, a browser-based attack exploiting SSL/TLS vulnerabilities without network access. Demonstrates how to leak cross-origin response sizes, enabling compression-based attacks and sensitive information extraction from popular websites.
The Year in Flash
Explore notable Flash vulnerabilities and exploits from the past year, including attack surfaces, common vulnerability types, and future trends in Flash security.
Pangu 9 Internals
Explore iOS 9 jailbreak internals, vulnerabilities, and exploitation techniques used in Pangu 9. Learn about system service flaws, code execution methods, and persistent code signing bypass.
Breaking FIDO - Are Exploits in There?
Explore FIDO authentication's vulnerabilities, potential exploits, and protective measures for enterprises in this comprehensive analysis of the protocol's security landscape.
Iran's Soft-War for Internet Dominance
Análisis detallado de las campañas de intrusión cibernética de Irán contra disidentes, críticos y organizaciones internacionales, revelando patrones y objetivos de vigilancia y control.
Weaponizing Data Science for Social Engineering - Automated E2E Spear Phishing on Twitter
Automated spear phishing on Twitter using machine learning and social engineering techniques. Explores target profiling, content generation, and high-value target identification for more effective phishing campaigns.
Attacking BYOD Enterprise Mobile Security Solutions
Exposé des failles de sécurité des solutions BYOD et EMS, avec démonstration d'attaques et présentation d'un nouvel outil, Swizzler, pour contourner les protections sur appareils jailbreakés ou non.
SGX Secure Enclaves in Practice - Security and Crypto Review
Explore Intel's SGX technology for secure remote computation, including its implementation, development environment, cryptographic aspects, and potential applications in secure storage and delegation.
Windows 10 Mitigation Improvements
Explore Microsoft's data-driven approach to software security, including proactive monitoring, analysis of exploits, and mitigation improvements in Windows 10 to enhance protection against vulnerabilities.
Building Trust and Enabling Innovation for Voice Enabled IoT
Explore security considerations for voice-enabled IoT devices using the Voice Privacy Alliance's toolkit, focusing on building trust and fostering innovation in this emerging technology.
Attacking SDN Infrastructure - Are We Ready for the Next-Gen Networking?
Exploring SDN vulnerabilities through attacks on control plane, channel, and data plane. Demonstrates critical exploits affecting network availability and confidentiality, and introduces SDN security projects.
An Inconvenient Trust - User Attitudes Toward Security and Usability Tradeoffs
Exploring user perspectives on encryption methods, balancing security and usability in digital communications. Insights from a study on key-exchange vs. key-directory models for everyday messaging.