Taxonomic Modeling of Security Threats in Software Defined Networking
Comprehensive analysis of security threats in Software Defined Networking, exploring vulnerabilities, potential attack scenarios, and providing recommendations for effective countermeasures.
Tracking App Behaviors With - Nothing Changed - Phone For Evasive Android Malware
Explore advanced techniques for tracking and analyzing evasive Android malware behaviors, including obfuscation, dynamic code loading, and native-level monitoring, without modifying the phone's OS.
Behind The Mask - The Agenda, Tricks, And Tactics Of The Federal Trade Commission As They Regulate Cybersecurity
Insider's expose of FTC's cybersecurity regulation tactics, revealing government overreach and bullying practices. Highlights whistleblower case, Congressional investigation, and implications for businesses facing federal scrutiny.
Stranger Danger - What Is The Risk From 3rd Party Libraries
Explore the risks of third-party libraries in software, analyzing vulnerability metrics and exposure times. Learn strategies to mitigate risks and improve security practices in your organization.
These Are Not Your Grand Daddy's CPU Performance Counters - CPU Hardware Performance Counters For Security
Explore advanced CPU performance counters for enhanced platform security, including RowHammer defense and ROP mitigation. Learn practical techniques with real-world exploit demonstrations and performance impact analysis.
Unicorn - Next Generation CPU Emulator Framework
Versatile CPU emulator framework supporting multiple architectures and platforms. Offers clean API, thread-safety, and language bindings for building advanced security tools and research.
Understanding and Managing Entropy Usage
Explore cryptographic entropy usage, sources, and management across systems. Learn to analyze and improve random number generation for enhanced security in modern IT infrastructures.
API Deobfuscator - Resolving Obfuscated API Functions in Modern Packers
Uncover obfuscated API functions in modern packers using memory access analysis and iterative run-until-API methods. Learn techniques to deobfuscate Themida 32/64 packed binaries for effective malware analysis.
Using Static Binary Analysis to Find Vulnerabilities and Backdoors in Firmware
Explore techniques for detecting vulnerabilities and backdoors in embedded device firmware using static binary analysis, focusing on challenges and automated solutions for complex binary blobs.
Understanding the Attack Surface and Attack Resilience of Project Spartan's New EdgeHTML Rendering Engine
Explore EdgeHTML's attack surface, compare it with MSHTML, and analyze exploit mitigations in Windows 10's new rendering engine for enhanced web security understanding.
Breaking Honeypots for Fun and Profit
Explore techniques to detect, bypass, and exploit honeypot technologies, turning defensive tools against defenders. Includes global honeypot mapping and vulnerability analysis.
Staying Persistent in Software Defined Networks
Explore vulnerabilities in software-defined networks, focusing on ONIE and network operating systems. Learn about potential exploits, malware persistence, and strategies for securing control plane networks.
Bypass Surgery - Abusing Content Delivery Networks
Exploring vulnerabilities in CDNs, this talk reveals attack patterns against high-availability websites, demonstrating potential risks and exploit development with far-reaching consequences.
Exploiting XXE Vulnerabilities in File Parsing Functionality
Techniques for exploiting XXE vulnerabilities in file parsing, focusing on XML-supported formats like docx and xlsx. Includes real-world examples and introduces a tool for creating 'XXE backdoored' files.
Mobile Point of Scam - Attacking the Square Reader
Explores vulnerabilities in Square Reader devices, revealing potential for fraudulent transactions and credit card skimming through software flaws and hardware modifications in mobile point-of-sale systems.
Distributing the Reconstruction of High-Level Intermediate Representation
Explore distributed reverse engineering techniques using intermediate representation in a clustered environment to analyze malware, extract characteristics, and improve threat intelligence initiatives.
Reverse Engineering Flash Memory for Fun and Benefit
Explore Flash memory reverse engineering techniques, including direct interaction, reprogramming, and file system analysis. Learn to handle meta information, deal with bad blocks, and leverage journaling file systems for deeper insights.
Advanced Windows NT - 2K Security
Explore advanced Windows NT/2K security, including payloads, buffer overflows, and kernel mode injection techniques for enhanced system protection.
National Information Assurance Partnership
Explore the National Information Assurance Partnership and its impact on cybersecurity standards and practices in this insightful presentation from Black Hat USA 2000.
Defending Your Network with Active Directory Services
Explore advanced network defense strategies using Active Directory Services, focusing on cutting-edge techniques to enhance security and protect against evolving threats.
Compromising Web Servers and Defensive Techniques
Explore web server vulnerabilities and learn defensive strategies to protect against common attacks and security breaches in this comprehensive cybersecurity presentation.