Unexpected Exposures in the Secure Shell - SSH Security Testing and Research
Delve into SSH security vulnerabilities, implementation challenges, and exploitation techniques across various platforms, featuring the new open-source testing tool 'sshamble'.
Breaking Network Crypto in Popular Chinese Keyboard Apps
Uncover security vulnerabilities in Chinese IME keyboards' network protocols and how attackers can intercept keystrokes from 800 million users due to poorly implemented encryption methods.
Defeating EDR Evading Malware with Memory Forensics
Discover advanced memory forensics techniques to detect and analyze EDR-evading malware, including system call manipulation, module overwriting, and debug register abuse.
Exposing Attacks Hiding in the Sheer Noise of False Positives - Using Data Science for Security Operations
Discover how data science transforms overwhelming security data into actionable insights, helping identify coordinated attacks amid false positives using open-source models and security knowledge encoding.
Using Bloodhound as a Defender: Tips from the Red Team
Discover how to leverage BloodHound from a red team perspective to identify and remediate critical Active Directory security flaws, with practical insights using the new ad-recon automation tool.
Getting Started in Industrial Control Systems Cybersecurity - Beyond Engineering
Discover how to break into Industrial Control Systems (ICS) cybersecurity, exploring career paths, debunking myths, and gaining practical insights for protecting critical infrastructure.
Network Forensic Analysis in an Encrypted World
Explore network forensics in encrypted environments, focusing on metadata analysis, hunting techniques, and leveraging encryption for defense. Learn to adapt and thrive in modern cybersecurity landscapes.
Rethinking Password Strength Beyond Brute-force Entropy
Explore password security beyond entropy, challenging conventional wisdom and offering insights on effective strategies for creating and managing strong passwords.
Grappling Hooks on the Ivory Tower - This Year in Practical Academic Research
Explore practical applications of academic research in cybersecurity, including experiment testing, paper analysis, and interdisciplinary approaches. Learn to leverage academic tools for real-world problem-solving.
The Leverage of Language, or, How I Realized Information Theory Could Save Information Security
Explore how information theory can revolutionize cybersecurity through language leverage, visualization, and innovative approaches to incident response and threat intelligence.
Mainframed - The Forgotten Fortress
Explore mainframe security vulnerabilities, including password limitations and hashing weaknesses. Learn about the Master Console, ISPF file editor, and using Netcat on UNIX systems for mainframe penetration testing.
What if Petraeus Was a Hacker? Email Privacy for the Rest of Us
Explore email privacy, legal guarantees, and tools to protect your digital communications. Learn from high-profile cases and discover practical strategies for safeguarding your online presence.
Hivemind - Distributed File Storage Using Javascript Botnets
Explore distributed file storage using JavaScript botnets, covering WebSockets, Redis, and web workers. Learn about data prioritization, network traffic optimization, and potential security implications.
Discovering Dark Matter Towards Better Android Malware Heuristics
Explore advanced techniques for detecting Android malware using innovative heuristics and data analysis methods to uncover hidden threats and improve mobile security.
The Wire on Fire - The Spies Who Loved Telcos
Explore telecom espionage tactics and vulnerabilities in this IT security talk, uncovering threats to communication networks and discussing protective measures.
Auto-testing for Situational Awareness
Explore strategies for auto-testing that go beyond regression prevention, focusing on creating situational awareness through temporal tracking and comprehensive metric analysis.
Theory Makes Beautiful Programs
Explore MC/DC coverage, its importance in safety-critical industries, and how theoretical algorithms can enhance code correctness and beauty through an innovative gcc implementation.
WinUI Everywhere
Explore Uno Platform: build native apps for iOS, Android, Windows, MacOS, Linux, and Web using C# and XAML. Learn about hot reload, Figma plugins, and extensions for efficient cross-platform development.
Does Spam Have an Opinion
Explore sentiment analysis of spam messages using cloud computing and machine learning, with a humorous twist involving llama photos.
Apollo Federation - Connecting GraphQL Microservices
Learn to connect distributed GraphQL microservices using Apollo Federation, enabling seamless querying of multiple APIs through a single endpoint. Explore implementation with AWS AppSync and Apollo Server in Azure Function.
JavaScript Apps Go International
Explore ECMAScript Internationalization API to solve formatting challenges in global apps. Learn to handle numbers, plurals, dates, and time zones for diverse user bases.