New Trends in FastFlux Networks
Explores new trends in fast-flux networks, including slower change rates, shared resources, multi-level structures, and similarities with benign applications. Proposes novel detection approaches based on these findings.
BinaryPig - Scalable Malware Analytics in Hadoop
Scalable malware analytics framework using Hadoop for processing large volumes of malware samples. Enables efficient feature extraction, machine learning, and data exploration for security researchers.
Virtual Deobfuscator - A DARPA Cyber Fast Track Funded Effort
Innovative tool for automated reverse engineering of virtualization obfuscators, requiring minimal manual effort and recreating near-original instructions without extensive bytecode analysis.
Above My Pay Grade - Cyber Response at the National Level
Explore national-level cyber incident response, from individual banks to presidential decisions, examining the flow of information and decision-making in major cybersecurity crises.
Abusing Web APIs Through Scripted Android Applications
Exploiting Android app vulnerabilities to abuse web APIs, using JRuby for scripting and Burp Suite for testing. Demonstrates attacks bypassing security measures and exposes potential weaknesses in mobile app ecosystems.
Dissecting CSRF Attacks & Countermeasures
Explore CSRF attacks, current countermeasures, and a proposed header-based policy for improved web security. Learn detection techniques and a new concept called Storage Origin Security for simplified protection.
Big Data for Web Application Security
Explore how big data analytics can enhance web application security, with real-world examples of proactive and reactive security measures using MapReduce and Cascading.
Maltego Tungsten as a Collaborative Attack Platform
Explore real-time collaborative intelligence gathering and attack integration using Maltego Tungsten. Learn to leverage shared graphs for effective team-based penetration testing and target profiling.
Power Analysis Attacks for Cheapskates
Discover affordable power analysis attack techniques for cryptographic systems using open-source hardware and software. Learn to set up a budget-friendly lab and perform live demonstrations against AES implementations.
The Future of Personal Information
Explore the future of personal data with industry experts discussing privacy, security, and technological advancements in information management.
Clonewise - Automated Package Clone Detection
Automated system for detecting embedded code vulnerabilities in software packages. Uses machine learning to identify package clones, improving security tracking for Linux vendors like Debian and Red Hat.
iSCSI Security - Insecure SCSI
Explore iSCSI security vulnerabilities and potential attack vectors in storage area networks, with insights from expert Himanshu Dwivedi.
National Security, Industrial and Corporate Information Security, and Information Security Providers
Explore national security, industrial and corporate information security, and the role of security providers in this comprehensive discussion by industry experts.
Compare, Port, Navigate
Explore signature domination, propagation graphs, and automatic classification in this advanced cybersecurity analysis session, featuring innovative techniques for code comparison and navigation.
Rapid Threat Modeling
Learn rapid threat modeling techniques to identify and mitigate security risks in software systems. Enhance your ability to protect against potential vulnerabilities and attacks.
Routing in the Dark - Scalable Searches in Dark P2P Networks
Explore scalable search techniques in dark peer-to-peer networks, focusing on navigable small world networks and practical applications for secure, decentralized communication.
Shatter-Proofing Windows
Explore techniques for enhancing Windows security against shatter attacks, focusing on vulnerabilities in message-passing mechanisms and potential safeguards for system integrity.
The Defense Cyber Crime Center
Explore the Defense Cyber Crime Center's role in digital forensics, cybercrime investigation, and national security through expert insights and real-world case studies.
Advanced ARM Exploitation
Explore advanced ARM exploitation techniques, including hardware eavesdropping, bus tapping, and integrated circuit interfacing. Learn practical skills for hardware penetration testing and debugging.
A Dirty Blackmail DoS Story
Explore a detailed analysis of a sophisticated DoS attack targeting email systems, uncovering vulnerabilities and discussing effective countermeasures.
Checking Array Bound Violation Using Segmentation Hardware
Explore innovative techniques for detecting array bound violations using segmentation hardware, enhancing software security and preventing buffer overflow attacks.