Secure DNS Solutions
Explore DNS security vulnerabilities and recent IETF standards addressing these issues. Learn about potential attacks and solutions to protect this critical Internet infrastructure.
Security Issues with Configuring and Maintaining an IIS 4 Server
Explore critical security considerations for configuring and maintaining IIS 4 servers, essential for IT professionals and system administrators.
VPN Architectures - Looking at the Complete Picture
Comprehensive exploration of VPN architectures, addressing enterprise security concerns, integration with authorization systems, and deployment strategies for branch offices and remote users.
Open Source Monitoring
Explore Open Source Monitoring's role in corporate security, including methodologies, examples, and outsourcing considerations for protecting against information leaks and potential threats.
Vulnerability Disclosure - What the Feds Think
Explore federal perspectives on vulnerability disclosure with insights from government and industry experts in cybersecurity and information assurance.
Neutralizing Nimda - Automated Strikeback
Explore automated defense strategies against the Nimda worm, focusing on proactive measures and countermeasures to neutralize its spread and impact on network security.
Hacking Appliances - Ironic Exploitation of Security Products
Explore common vulnerabilities in security appliances and learn about attack vectors that external hackers can exploit to gain control over gateways, firewalls, and other network solutions.
Building a Defensive Framework for Medical Device Security
Explore a defensive framework for medical device security, categorizing devices and providing recommendations for regulatory agencies and future research focus areas.
Dude, Where's My Laptop?
Analysis of laptop and mobile device security solutions, exploring their effectiveness against theft and data protection claims. Reveals vulnerabilities and challenges common anti-theft measures.
DropSmack - How Cloud Sync Services Render Your Corporate Firewall Worthless
Explore cloud sync services' security risks, including malware delivery, command and control channels, and data exfiltration. Learn detection strategies and see live demonstrations of potential vulnerabilities.
Hacker Court
Explore legal and ethical dilemmas in cybersecurity through a mock trial featuring industry experts, examining hacking scenarios and their implications.
Hacking the Smartcard Chip
Detailed walkthrough of compromising a current-gen smartcard, covering hardware and software aspects. Condenses months of work into a technical presentation.
Internet Explorer Turns Your Personal Computer into a Public File Server
Discover how Internet Explorer vulnerabilities can expose your entire file system to attackers. Learn about design flaws, security risks, and potential attack vectors in this eye-opening presentation.
Exploiting Lawful Intercept to Wiretap the Internet
Explores security vulnerabilities in Cisco's lawful intercept technology, demonstrating how attackers could exploit these weaknesses for unauthorized surveillance. Offers recommendations for network operators and interface redesign.
Hacking Oracle 11g
Explore advanced techniques for exploiting vulnerabilities in Oracle 11g databases, including privilege escalation and data manipulation strategies.
Preventing Child Neglect in DNSSEC-bis Using Lookaside Validation
Explore DNSSEC-bis and Lookaside Validation techniques to enhance DNS security and prevent child neglect in domain name systems.
Owning Anti-Virus - Weaknesses in a Critical Security Component
Explore critical vulnerabilities in anti-virus software, uncovering weaknesses that could compromise system security and discussing potential exploitation techniques.
The Unveiling of My Next Big Project
Renowned cryptographer Philip R. Zimmermann unveils his latest groundbreaking project, exploring cutting-edge developments in cryptography and digital security.
Building Robust Backdoors in Secret Symmetric Ciphers
Explore techniques for creating undetectable backdoors in symmetric ciphers, examining historical cases and discussing innovative approaches to cryptographic vulnerabilities.
Ozone HIPS - Unbreakable Windows
Explore cutting-edge Host Intrusion Prevention System technology for Windows, enhancing system security and resilience against cyber threats.
Announcing OWASP Guide to Securing Web Applications & Services 2.0
Comprehensive guide to securing web applications and services, covering best practices, vulnerabilities, and mitigation strategies for developers and security professionals.