Malicious File for Exploiting Forensic Software
Exploiting vulnerabilities in forensic software file viewers through malicious files, demonstrating code execution and DoS attacks. Includes fuzzing techniques, vulnerability analysis, and countermeasures.
The Web Is Vulnerable - XSS Defense on the BattleFront
Comprehensive analysis of real-world XSS vulnerabilities and attacks, presenting advanced protection methods and introducing detectXSSlib, a new tool for real-time XSS detection.
End-to-End Analysis of a Domain Generating Algorithm Malware Family
Comprehensive analysis of a Domain Generating Algorithm malware family, covering deobfuscation, DGA analysis, sinkholing, and attribution of the malware's author and accomplices.
Black-Box Assessment of Pseudorandom Algorithms
Explore flaws in common PRNGs, learn to identify and reverse-engineer them through black-box analysis, and discover efficient algorithms for predicting past and future outputs.
Take Risk, Don't Fail
Explore risk-taking strategies and failure avoidance in cybersecurity with insights from NASA's Chief Engineer Brian Muirhead at Black Hat USA 2013.
Mainframes - The Past Will Come Back to Haunt You
Unveiling mainframe security: Learn configuration, access methods, and potential vulnerabilities in this eye-opening talk for IT security professionals unfamiliar with mainframe systems.
Pwnie Awards
Celebrate and roast the best and worst in information security at the annual Pwnie Awards ceremony, featuring humor, recognition, and industry insights.
Catching Insider Data Theft With Stochastic Forensics
Discover stochastic forensics: a novel technique for detecting insider data theft by analyzing statistical patterns in file systems, even months after the incident occurs.
Shelters or Windmills - The Struggle For Power and Information Advantage
Explore the historical power dynamics of information advantage and its impact on societal shifts, drawing parallels to today's digital revolution and its implications for the future.
Security Issues Affecting Internet Transit Points and Backbone Providers
Explore security vulnerabilities in Internet infrastructure, focusing on BGP4 protocol issues, IP spoofing, and routing attacks. Learn about potential threats to network integrity and financial implications for publicly traded companies.
An Introduction to SPIKE
Explore SPIKE, a powerful fuzzing tool for discovering software vulnerabilities. Learn its applications, techniques, and potential impact on cybersecurity testing and exploit development.
Protecting America's Cyberspace - Version 1.0 of the National Plan
Explore the inaugural National Plan for safeguarding America's digital infrastructure, presented by Dr. Jeffrey A. Hunker at a pivotal cybersecurity conference in 1999.
Building a Forensic Toolkit That Will Protect You From Evil Influences
Explore techniques for secure forensic analysis of compromised systems, focusing on creating a protected environment and essential utilities for Solaris and Windows NT investigations.
Phreaking and PBX Tricks
Explore advanced techniques in phone system manipulation and PBX exploitation, uncovering vulnerabilities and learning ethical hacking methods for telecommunications security.
Taxonomy of Intrusion Detection Systems
Explore the classification and categorization of intrusion detection systems, understanding their types, functionalities, and applications in cybersecurity.
Vendors' Response to Security Problems Without Pressure to Go Public
Análisis crítico de métodos para descubrir vulnerabilidades de seguridad: parches de proveedores, avisos de seguridad y divulgación completa. Evaluación de la eficacia y debate sobre mejores prácticas.
Overlooked Local Attack Techniques
Explore overlooked local attack techniques for enhanced information security, leveraging fast response and direct machine examination for more effective penetration testing and analysis.
Burglar Alarms and Booby Traps
Discover innovative network defense strategies using insider knowledge. Learn fun tricks to build effective intrusion detection systems for networks, websites, and firewalls.
Security Ideas from All Over
Explore diverse security lessons applicable to Internet, castles, walls, and immune systems. Gain insights from a seasoned expert's global perspective on universal security principles.
Over the Router, Through the Firewall, to Grandma's House We Go
Cross-platform hack demonstration showcasing network penetration techniques, traversing routers and firewalls to access sensitive corporate data using multiple hosts and visual aids.
Towards a Taxonomy of Network Security Testing Techniques
Explore network security testing techniques, their effectiveness, and limitations. Gain insights into security scanners' functionality and potential misleading results.