For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
Explore vulnerabilities in mobile point-of-sale systems, including MitM attacks, arbitrary code injection, and firmware exploitation. Learn to identify weaknesses and conduct security assessments in payment technologies.
Exploits with Scratch
Explore network exploitation using Scratch programming language, extending its capabilities to create exploits and fuzz vulnerable services through custom TCP/IP function blocks.
Using SmartNICs to Provide Better Data Center Security
Explore SmartNIC-based data center security, featuring improved isolation, offload capabilities, and policy scaling. Learn about innovative host introspection techniques for enhanced threat detection and workload integrity.
JARVIS Never Saw It Coming - Hacking Machine Learning in Speech, Text and Face Recognition
Explore hacking techniques for machine learning systems in speech, text, and facial recognition, including exploits, backdoors, and adversarial attacks. Live demo included.
Catch Me If You Can - Ephemeral Vulnerabilities in Bug Bounties
Explore ephemeral vulnerabilities in bug bounties, their impact, and how to identify and exploit them. Learn from real-world examples and strategies for continuous security assessment.
ARM Assembly and Shellcode Basics - Workshop
Comprehensive workshop on ARM assembly and shellcode creation, covering basics, execve() shell, and reverse shell. Includes hands-on practice with QEMU emulator and Raspberry Pi hardware.
Engineering My Way Into InfoSec
Explore one engineer's journey into InfoSec, covering education, certifications, challenges, and strategies for success in the field. Gain insights on networking, mentorship, and personal growth.
Sex, Secret and God - A Brief History of Bad Passwords
Explore the evolution of password security, common pitfalls, and best practices for creating strong, memorable passwords in this informative cybersecurity talk.
Transfer Learning - Analyst-Sourcing Behavioral Classification
Explore advanced threat detection using AI and transfer learning techniques. Learn about active learning, data sharing, and improving phishing domain detection across organizations.
The Commoditization of Security Solutions - Will You Be Replaced by a Small Script?
Explore the impact of security solution commoditization on the industry and professionals. Learn strategies to stay relevant in an evolving landscape.
Measuring the Use and Abuse of Brain Wallets
Explore the security vulnerabilities of brain wallets in cryptocurrency, analyzing usage patterns, draining techniques, and implications for blockchain technology.
Microservices and FaaS for Offensive Security
Explore offensive security using microservices and FaaS, covering Lambda, Google Cloud, IBM OpenWhisk, and more. Learn practical applications and improvements for cybersecurity projects.
Koadic C3 - Windows COM Command & Control Framework
Explore Koadic C3, a Windows COM-based command and control framework. Learn about VBScript, threading, HTML applications, and lateral movement techniques for advanced penetration testing.
Rate the Recruiter
Insights on agency vs. corporate recruiters, red flags, and effective strategies for job seekers in cybersecurity. Practical tips for evaluating recruiters and optimizing LinkedIn profiles.
GO Forth And Reverse
Explore Go language reverse engineering challenges, tool limitations, and strategies for function recovery and string analysis. Learn heuristics and resources for effective Go binary analysis.
Optimizations for Bitcoin Key Cracking
Explore optimizations for Bitcoin key cracking, covering cryptographic concepts, algorithms, and techniques to enhance security and efficiency in cryptocurrency systems.
IATC Cyber Crisis Simulation
Participate in an immersive cyber crisis simulation led by experts, exploring decision-making, stakeholder dynamics, and geopolitical impacts in a high-stakes scenario.
Minimum Viable Risk Management Program
Learn essential strategies for implementing a practical risk management program, focusing on asset inventory, binary risk assessment, and effective decision-making processes.
The Role of Data Visualization in Improving Machine Learning Models
Explore data visualization techniques to enhance machine learning models for malware detection, with practical insights and a live demonstration.
Your Facts Are Not Safe with Us - Russian Information Operations as Social Engineering
Explore Russian information operations as social engineering, examining tactics, targets, and mitigation strategies. Learn about RT's role and the impact on public perception.
Hacking College, a Cybersecurity Career, and Certifications
Insights on navigating cybersecurity education, certifications, and career paths from Navy veteran Marcus Carey. Practical advice for aspiring professionals in the field.