Governments as Malware Authors - The Next Generation
Explore government-sponsored malware development, examining involved nations, skill acquisition, budgets, and potential countermeasures against sophisticated cyber threats.
Defeating the Transparency Feature of DBI
Techniques to break transparency in dynamic binary instrumentation tools, exposing limitations and enabling detection of analysis environments for malware and binary applications.
Internet Scanning - Current State and Lessons Learned
Internet scanning research: latest results, tools, and findings. Explore new scan types, data processing, and vulnerability statistics. Learn about recent discoveries in misconfigurations and security improvements across countries and industries.
Badger - The Networked Security State Estimation Toolkit
Toolkit for estimating network security state using CPTL framework. Imports monitoring data, provides configurable scoring, and offers graphical view of security elements.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.
Abuse of CPE Devices and Recommended Fixes
Exploring vulnerabilities in consumer network devices, quantifying risks, and proposing solutions for improved security in home and small office networks.
802.1x and Beyond
Dissecting IEEE 802.1x and related protocols, exploring vulnerabilities in popular systems, and demonstrating remote code execution over 802.11 wireless using WPA Enterprise.
Leviathan - Command and Control Communications on Planet Earth
Explore global malicious command and control infrastructure, its impact on cybersecurity, and techniques used by hackers to hide communications within web traffic.
VoIP Wars - Attack of the Cisco Phones
Explore vulnerabilities in Cisco hosted VoIP systems, including signaling attacks, authentication bypasses, and client compromises. Learn practical penetration testing techniques using the Viproy toolkit.
Multipath TCP - Breaking Today's Networks with Tomorrow's Protocols
Explore how MultiPath TCP challenges network security by enabling multiple endpoints and paths, changing addresses mid-connection, and evading controls. Learn tools and strategies for risk mitigation.
Evasion of High-End IPS Devices in the Age of IPv6
Explore novel IPv6 attack techniques that bypass high-end IPS devices, examining security implications and proposing mitigation strategies for network protection.
Mobile Device Mismanagement
Explore vulnerabilities in Mobile Device Management solutions, their impact on enterprise security, and the overlooked risks in deploying these widely-used security products.
Unwrapping the Truth - Analysis of Mobile Application Wrapping Solutions
Explore mobile application wrapping solutions for BYOD, analyzing their security claims, implementation, and vulnerabilities in iOS and Android environments.
Researching Android Device Security with the Help of a Droid Army
Explore Android device security using a diverse cluster to tackle fragmentation, enhance auditing, and improve exploit development techniques.
Understanding IMSI Privacy
Explore mobile security vulnerabilities and privacy issues in cellular networks. Learn about IMSI catchers, silent SMS, and a new Android-based privacy framework with live demonstrations.
A Practical Attack Against VDI Solutions
Explore a practical attack against VDI solutions, demonstrating how malicious apps can exploit screen scraping to bypass security measures and exfiltrate data from remote workstations.
It Just -Net-works - The Truth About iOS 7's Multipeer Connectivity Framework
Explore iOS 7's Multipeer Connectivity Framework: network-level analysis, security model, threats, and real-world app implementation. Gain insights into peer-to-peer communication on iOS devices.
Android FakeID Vulnerability Walkthrough
Explore Android's FakeID vulnerability, its impact on device security, and learn how to detect and mitigate risks through technical analysis and live demonstrations.
Reflections on Trusting TrustZone
Explore TrustZone security, vulnerabilities, and exploitation techniques in ARM devices. Gain insights into real-world implications and see a live demonstration of bootloader unlocking.
Catching Malware En Masse - DNS and IP Style
Innovative strategies to detect and mitigate malware at DNS and IP levels, including botnet tracking, AS graph analysis, and IP range investigation. Includes a 3D visualization engine for effective threat intelligence.
Secure Because Math - A Deep-Dive on Machine Learning-Based Monitoring
Explore machine learning techniques in information security, their strengths and limitations, and practical applications for incident detection and response. Learn to evaluate ML-based security solutions critically.