De Mysteriis Dom Jobsivs - Mac EFI Rootkits
Explore EFI-based rootkits on Intel Macs, covering architecture, kernel injection techniques, persistence methods, and potential defenses against these sophisticated threats.
Intrusion Auditing Under Windows NT
Forensic techniques for auditing Windows NT systems post-intrusion, focusing on preserving evidence and using specialized tools to detect and analyze unauthorized access and system modifications.
Appliance Firewalls - A Detailed Review
Comprehensive review of network firewall appliances, examining features, vendor claims, and real-world test results of nearly two dozen devices. Uncovers truths behind marketing promises.
1000 Hackers in a Box - Failings of Security Scanners
Critique of commercial security scanners, exposing their shortcomings, false promises, and potential to encourage bad security practices. Challenges assumptions about their effectiveness in network protection.
Putting Intrusion Detection into Intrusion Detection Systems
Explore advanced intrusion detection techniques, focusing on proactive strategies and internal network monitoring to enhance cybersecurity beyond traditional perimeter defenses.
Total BS Security - Business-based Systems Security
Practical approach to selecting security solutions based on business needs, using real-world case studies and concepts to determine and sell the most effective systems for various operations.
Security Issues with Implementing and Deploying the LDAP Directory System
Explore LDAP security vulnerabilities, common deployment errors, and intruder techniques. Learn to safeguard authentication services and protect sensitive data in directory systems.
Hope, Hype, Horrors - E-Commerce Explored
Explore e-commerce's growth, potential, and challenges. Analyze threats in emerging technologies and discuss the current state of online business transactions and security concerns.
Computer Security - Textbook View
Explore computer security challenges, from software design to system management, with insights on trust issues, complexity, and evolving threats in the digital landscape.
The Issues Surrounding the Hiring of Hackers
Explore ethical considerations and practical challenges of employing individuals with hacking backgrounds in cybersecurity roles.
Introduction to Cyber Forensic Analysis
Explore techniques for investigating network-based intrusions, focusing on evidence collection and preservation for legal purposes. Learn about back-tracing, forensic tools, and RMON2-based documentation.
Google Native Client - Analysis of a Secure Browser Plugin Sandbox
Explore Google's Native Client sandbox for Chrome, its architecture, security features, and potential vulnerabilities. Learn about PPAPI and a tool for fuzzing PPAPI interfaces.
HTExploit - Bypassing Htaccess Restrictions
Explore HTExploit, an open-source Python tool that bypasses htaccess authentication, allowing unauthorized directory listing and exposing web security vulnerabilities.
Next Generation Clickjacking
Explore advanced clickjacking techniques, including data injection and extraction, cross-browser vulnerabilities, and a new tool for creating multi-step attacks on web applications.
Changing Threats to Privacy - From TIA to Google
Explore evolving privacy threats and innovative solutions in the digital age, from centralized databases to subtle, pervasive data collection by tech giants and social media platforms.
Security the Facebook Way
Explore Facebook's security values, spam prevention strategies, and innovative approaches to safeguarding user data in this insightful keynote presentation.
Hiding in the Familiar - Steganography & Vulnerabilities in Pop Archives Formats
Explore vulnerabilities in common archive formats, revealing steganographic techniques and processing errors that impact security tools and forensic analysis. Includes demonstrations and new tool introduction.
Huawei - From China with Love
Exploring vulnerabilities in 3G/4G USB modems, focusing on Huawei devices. Discusses potential for widespread infection and botnet creation through software exploits.
Using D-Space to Open Doors
Explore vulnerabilities in proximity card access systems, from RFID tags to backend databases. Learn attack techniques through demonstrations on popular deployments.
Who's Really Attacking Your ICS Devices?
Explore the reality of ICS/SCADA system attacks, including attacker profiles and motivations, through insights from a custom-built honeynet mimicking industrial control devices.
Power Analysis Attacks for Cheapskates
Discover affordable power analysis attack techniques for cryptographic systems using open-source hardware and software. Learn to set up a budget-friendly lab and perform live demonstrations against AES implementations.