Watching the Watchdog - Protecting Kerberos Authentication With Network Monitoring
Explore advanced Kerberos attack detection techniques and learn to protect Windows networks using network monitoring. Includes a novel "Diamond PAC" attack variant and the "Kerberos Leash" tool.
SMBv2 - Sharing More Than Just Your Files
Unveils a new attack vector against SMBv2, affecting all IE versions. Demonstrates remote credentials theft and user impersonation from the internet, exploiting bugs for complete user compromise without interaction.
Understanding SCADA's Modbus Protocol
Hands-on workshop exploring the Modbus protocol: analyze network captures, configure simulators, and generate traffic to query and fuzz Modbus devices. Practical skills for SCADA systems.
Multivariate Solutions to Emerging Passive DNS Challenges
Explore emerging challenges in passive DNS threat intelligence and learn multivariate solutions to overcome them, enhancing your ability to identify related malicious domains effectively.
HEIST - HTTP Encrypted Information can be Stolen Through TCP-Windows
Unveils HEIST, a browser-based attack exploiting SSL/TLS vulnerabilities without network access. Demonstrates how to leak cross-origin response sizes, enabling compression-based attacks and sensitive information extraction from popular websites.
Attacking SDN Infrastructure - Are We Ready for the Next-Gen Networking?
Exploring SDN vulnerabilities through attacks on control plane, channel, and data plane. Demonstrates critical exploits affecting network availability and confidentiality, and introduces SDN security projects.
BGP Stream
Explore BGP Stream: real-time detection of potentially malicious BGP/ASN changes for enhanced network security and traffic flow monitoring.
Taxonomic Modeling of Security Threats in Software Defined Networking
Comprehensive analysis of security threats in Software Defined Networking, exploring vulnerabilities, potential attack scenarios, and providing recommendations for effective countermeasures.
The Bug Hunter's Methodology v4 - Recon Edition
Explore cutting-edge techniques for bug hunters and red teamers to discover and expand attack surfaces, focusing on domain reconnaissance, subdomain enumeration, and IP space analysis.
How Overlay Networks Can Make Public Clouds Your Global WAN Network
Explore overlay networks for secure, flexible cloud-based WANs. Learn how developers can leverage public clouds as global points of presence, enhancing application-layer integration and security for enterprises of all sizes.
Container Networking Untangling Services Meshes and SDNs
Explore service meshes and SDNs in container networking, comparing Istio, Linkerd, Conduit, and OpenContrail for Kubernetes integration, scalability, routing, and security policy enforcement.
Learning DNS
Explore DNS fundamentals and intricacies with Julia Evans in this engaging keynote, uncovering the inner workings of domain name systems and their impact on web development.
Using Rails to Communicate with the New York Stock Exchange
Learn to build scalable trading apps with Rails, managing complex APIs, TCP protocols, and RPC for high-frequency transactions with the New York Stock Exchange.
Building End to End Telecom Solutions Using Magma Across Open Source Projects
Explore end-to-end telecom solutions using Magma across open source projects, featuring insights from industry experts on innovative approaches to connectivity and cloud-native technologies.
Blink - Fast Connectivity Recovery Entirely in the Data Plane
Explores programmable switches for rapid rerouting using TCP-induced signals to detect failures. Presents Blink, a data-driven system analyzing TCP flows at line rate to quickly recover connectivity in the data plane.
Effectively Prefetching Remote Memory with Leap
Innovative prefetching solution for remote memory access, improving latency and performance in memory disaggregation systems through online algorithms and efficient kernel data paths.
Post-Quantum Crypto - Today’s Defense Against Tomorrow’s Quantum Hacker
Overview of post-quantum cryptography and its practical applications in securing today's data against future quantum threats. Includes lessons from real-world integrations and demonstrations of quantum-safe alternatives.
What's the Latest 411 on 419s?
Explore the latest tricks used by online scammers and learn three crucial OpSec strategies to protect yourself in an increasingly hostile digital environment.
Patchwerk - Kernel Patching for Fun and Profit
Explore techniques for patching and securing Linux kernels on IoT devices without source code. Learn to inspect, compile, and apply patches to vendor OEM kernels for vulnerability mitigation and reverse engineering.
How We Drained Every Backbone Router Simultaneously
Exploring Meta's 2021 outage: causes, cascading effects, and lessons learned. Insights into network infrastructure, disaster recovery, and future improvements for preventing similar incidents.
Tor .onions - The Good, The Rotten and The Misconfigured
Explore the world of Tor .onion sites, examining their benefits, risks, and common configuration issues. Gain insights into the hidden web's landscape and security implications.