Phase II - 2nd Generation Honeynet Technologies
Explore cutting-edge advancements in honeypot technologies for enhanced cybersecurity. Learn about innovative techniques to detect and analyze network intrusions from industry experts.
Security Aspects in Java Bytecode Engineering
Explore security vulnerabilities in Java bytecode and learn techniques for bytecode engineering to enhance application security.
Scene of the Cybercrime
Explore cybercrime investigation techniques, digital forensics, and legal considerations in this comprehensive talk on combating online criminal activities.
Fact and Fiction - Defending Your Medical Devices
Explore medical device security, debunk myths, and learn about a real software bug. Gain insights on improving device security and proper vulnerability disclosure to the FDA.
With BIGDATA Comes BIG Responsibility - Practical Exploiting of MDX Injections
Explore OLAP technology vulnerabilities in Business Intelligence systems, focusing on MDX-related attacks, code injection, and data retrieval vectors. Learn practical exploitation techniques for critical corporate data.
Defending Networks with Incomplete Information - A Machine Learning Approach
Explore machine learning techniques for network defense, focusing on automated event classification and prioritization to enhance security monitoring efficiency and effectiveness.
Post Exploitation Operations with Cloud Synchronization Services
Explore post-exploitation techniques using cloud sync services. Learn about DropSmack v2, credential theft, and security risks. Gain insights for both network defenders and penetration testers.
Predicting Susceptibility to Social Bots on Twitter
Exploring user susceptibility to social bots on Twitter through machine learning and personality analysis, with implications for targeted interactions and awareness training.
Energy Fraud and Blackouts - Issues with Wireless Metering Protocols
Análisis de seguridad del protocolo inalámbrico M-Bus para medidores inteligentes, revelando vulnerabilidades que amenazan la privacidad, integridad y fiabilidad de las redes eléctricas avanzadas.
Pass the Hash 2 - The Admin's Revenge
Explore advanced strategies to detect and prevent Pass-The-Hash attacks in Windows networks, addressing vulnerabilities and enhancing enterprise security against lateral movement.
How to Grow a TREE from CBASS
Innovative binary analysis toolset for cross-platform programs. Integrates with IDA Pro, enabling interactive visualization and on-demand analysis for efficient reverse engineering and vulnerability detection.
Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk
Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.
Hot Knives Through Butter - Bypassing Automated Analysis Systems
Explores advanced techniques used by malware to evade automated analysis systems, including extended sleep calls, mouse click triggers, and timed activation. Provides insights for security professionals on evolving threats.
BlackBerryOS 10 from a Security Perspective
Comprehensive analysis of BlackBerryOS 10's security architecture, exploring attack surfaces, privilege escalation, remote entry points, rootkit persistence, and the effectiveness of BlackBerry Balance.
Using Online Activity as Digital Fingerprints to Create a Better Spear Phisher
Explore data mining and NLP techniques to profile online activity, creating digital fingerprints for enhanced social engineering. Learn to analyze user interactions, vocabulary, and communication patterns.
OptiROP - Hunting for ROP Gadgets in Style
Discover efficient ROP gadget hunting with OptiROP, a tool using semantic queries for quick, precise results across executable formats on x86/x64 architectures. Simplify shellcode development.
Password Hashing - The Future is Now
Explore the future of password hashing, its challenges, and the Password Hashing Competition initiative to develop improved methods for securing digital systems.
Bochspwn - Identifying 0-Days via System-Wide Memory Access Pattern Analysis
Innovative approach to discovering kernel vulnerabilities using CPU-level instrumentation and memory access pattern analysis. Introduces "Bochspwn" project, which identified numerous Windows kernel vulnerabilities.
Mobile Malware - Why the Traditional AV Paradigm Is Doomed
Explore mobile malware threats, limitations of traditional antivirus methods, and innovative approaches like cloud-based screening and hardware-supported security solutions for protecting mobile devices.
CMX - IEEE Clean File Metadata Exchange
Explore IEEE's CMX system for efficient software whitelisting, reducing false positives in security through metadata exchange without copyright concerns.
Javascript Static Security Analysis Made Easy with JSPrime
Explore JSPrime, a user-friendly tool for JavaScript static security analysis. Learn about its features, including library-aware scanning, variable tracing, and minimal false positives, to enhance your code security.