I Know You Want Me - Unplugging PlugX
Comprehensive analysis of PlugX malware, exploring its evolution, detection techniques, and countermeasures. Gain insights into advanced threat intelligence and cybersecurity strategies.
Comprehensive Virtual Appliance Detection
Explore techniques for detecting virtual appliances, including resolution analysis, HTML5 feature support, and 3D performance observations. Learn practical methods for identifying virtualized environments.
Keynote by Dr. Steve Crocker
Dr. Steve Crocker explores Internet history, security challenges, and governance issues. He discusses early developments, current security technologies, and policy concerns, concluding with a challenge to the cybersecurity community.
Persist It - Using and Abusing Microsoft's Fix It Patches
Explore Microsoft's Fix It patches, their analysis, and potential for system persistence through reverse engineering and exploitation techniques.
The Machines That Betrayed Their Masters
Explore device tracking vulnerabilities and a distributed surveillance framework, including drone-based tracking and geolocation techniques for privacy awareness.
Z - MAKE TROY NOT WAR - Case Study of the Wiper APT in Korea, and Beyond
Análisis detallado del ataque "Wiper" en Corea del Sur en 2013, explorando el vector de infección inicial, examinando muestras de malware y estableciendo conexiones con otros casos de APT desde 2009.
Dude, WTF in My CAN!
Exploring CAN bus security vulnerabilities in modern vehicles, demonstrating remote access and control using a low-cost custom tool, and discussing car forensics for legal applications.
Point-of-Sale Malware
Explore point-of-sale malware threats, attack vectors, and defense strategies in this informative webcast. Gain insights to protect retail systems and customer data.
Owning the Routing Table - Part II
Powerful OSPF attack exploiting protocol ambiguity to control routing tables in autonomous systems. Enables network manipulation, DoS, and unauthorized access to information flows. Multi-vendor fix underway.
Spy-Jacking the Booters
Exposé on "booter" DDoS-for-hire services: their operations, vulnerabilities, and impact. Insights into defending against attacks and the criminal ecosystem behind these illicit services.
Hacking, Surveilling, and Deceiving Victims on Smart TV
Explore vulnerabilities in Smart TVs, including remote surveillance and deception techniques. Learn about potential security risks and attack vectors in this emerging technology platform.
Revealing Embedded Fingerprints - Deriving Intelligence - USB Stack Interactions
Techniques for analyzing USB stack interactions to gather intelligence on embedded systems, including OS identification and vulnerability exploitation challenges.
Home Invasion v2.0 - Attacking Network-Controlled Hardware
Explore security risks of network-connected home devices, including potential for physical access and surveillance. Learn about vulnerabilities in smart locks and other IoT products.
Fully Arbitrary 802.3 Packet Injection - Maximizing the Ethernet Attack Surface
Explore novel Ethernet attack techniques using affordable hardware and custom firmware. Learn about frame manipulations, SFD parsing anomalies, and Ethernet Packet-In-Packet injection for enhanced network security testing.
RFID Hacking - Live Free or RFID Hard
Practical guide on RFID hacking techniques, tools, and defenses. Learn to build custom long-range RFID hacking tools using Arduino, steal badge info, clone cards, and exploit vulnerabilities in proximity badge systems.
Rooting SIM Cards
Explore SIM card vulnerabilities and their impact on mobile security. Learn about implementation flaws, potential exploits, and the implications for trusted computing in smartphones and embedded devices.
Truncating TLS Connections to Violate Beliefs in Web Applications
Exploring TLS truncation attacks to exploit web application flaws, demonstrating vulnerabilities in authentication systems and their impact on popular platforms like Helios, Microsoft Live, and Google.
TOR - All the Things
Explore Tortilla, a new tool for securely routing all TCP/IP and DNS traffic through Tor on Windows, enabling anonymous use of any program without additional hardware or VPNs.
BIOS Security
Explore BIOS security vulnerabilities, SRTM manipulation, and trust subversion techniques. Learn about NIST standards and academic solutions for ensuring BIOS integrity.
Just-In-Time Code Reuse - The More Things Change, the More They Stay the Same
Explore advanced exploit techniques undermining fine-grained ASLR through just-in-time code reuse, demonstrating real-world applications and implications for cybersecurity defenses.
Combating the Insider Threat at the FBI - Real World Lessons Learned
Insider threat detection at FBI: multidisciplinary approach combining psychology, technology, and analytics. Lessons from real-world program implementation, focusing on deterrence, behavioral analysis, and predictive techniques.