From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore secure administration practices, vulnerabilities in traditional methods, and strategies to enhance cybersecurity in enterprise environments. Learn to protect privileged credentials and implement effective access controls.
How We Made the Badge Before You Showed Up
Explore the creation process of a unique badge, featuring Python programming, accelerometer technology, and software optimization techniques.
SIM Simulator - A Security Assessment Tool for Mobile Communications
Explore SIMulator, a security assessment tool for mobile communications. Learn about SIM cloning, custom key injection, and architecture using STM32F103 and Node.js for realistic SIM emulation and MITM attacks.
I Am AD FS and So Can You - Attacking Active Directory Federated Services
Explore Active Directory Federated Services (AD FS) security, including claims pipeline, tokens, and vulnerabilities. Learn attack techniques, defense strategies, and best practices for securing AD FS deployments.
Finding the Best Threat Intelligence Provider
Explore threat intelligence providers, focusing on data quality, formats, and alignment to enhance network security monitoring and defend against advanced persistent threats.
Distributed Security Alerting
Explore distributed security alerting with Spotify's approach, covering customizable architecture, plugins, and data-driven security metrics for effective engineering and leadership.
Old New Things - An Examination of the Philips TriMedia Architecture
Explore the Philips TriMedia architecture, examining its history, features, and potential vulnerabilities through firmware analysis and hardware exploration.
Practical Attack Simulations in Critical National Infrastructure
Explore practical attack simulations in Critical National Infrastructure, focusing on risk reduction, threat modeling, and effective testing strategies for industrial control systems.
Threat Modelling and Beyond for Cisco ACI
Explore advanced threat modeling techniques for Cisco ACI, covering physical layout, architecture, STRIDE analysis, and potential vulnerabilities in network security.
IoT Processor and Binary Breakdown - The Good the Bad and the Ugly
Explore IoT processor architecture, binary analysis, and firmware vulnerabilities. Gain insights into hardware, Linux deployment, and virtualization for secure IoT development.
Subs, Ships, & Satellites - The Internet of Invisible Things
Explore the hidden world of critical infrastructure systems in maritime and space domains, uncovering vulnerabilities and discussing innovative approaches to cybersecurity challenges.
Practical Magic - Behavior-based Safety Design for IoT
Explore behavior-based safety design for IoT, covering government regulation, incentive problems, choice architecture, and leveraging the Mindspace framework for effective security habits.
Security and Privacy for Multi-Prefix and Provisioning Domains in IPv6
Explore IPv6 security and privacy with multi-prefix and provisioning domains. Learn about implementation, routing, confidentiality, and potential threats in this comprehensive technical overview.
Hacking Robots Before Skynet
Explore vulnerabilities in collaborative robots, from firmware to physical attacks. Learn about security risks, reverse engineering, and potential solutions in industrial robotics.
Are You Sure - You Are Alone? Pwning IoT-CCTV Devices!
Explore IoT-CCTV device vulnerabilities, learn exploitation techniques, and understand the potential impact on security and privacy in this eye-opening presentation.
Knockin' on IPv6's Doors
Explore IPv6 security, including prefix discovery, DNS analysis, and mitigation strategies. Learn about tools, automation, and best practices for securing IPv6 networks.
Dynamic IPv6 Prefix Problems and VPNs
Explore challenges and solutions for dynamic IPv6 prefix allocation in VPN environments, covering routing, policies, and potential fixes for enterprise networks.
SAP Bugs - The Phantom Security
Explore SAP security vulnerabilities, including directory traversal and secure storage issues, with insights on potential risks and mitigation strategies.
Introducing a Comprehensive Active Directory Security Metric
Comprehensive metric for assessing Active Directory security, covering key indicators, measurement points, and development process. Insights for enhancing organizational cybersecurity posture.
Mobile App Security Fails and How To Survive Them
Explore mobile app security vulnerabilities and defense strategies, covering platform misuse, insecure communication, authentication flaws, and real-world case studies for improved protection.
Attack and Defend Microsoft Enhanced Security Administrative Environment
Learn to attack and defend Microsoft's Enhanced Security Administrative Environment, covering Red Forest, DC Sync, service accounts, Exchange, and AD security techniques.