When the Magic Wears Off - Flaws in ML for Security Evaluations and What to Do About It
Explore flaws in machine learning for security evaluations, addressing experimental bias and proposing solutions for fair malware classifier comparisons in real-world settings.
A Safer Way to Pay - Comparing the Security & Integrity of 21st Century Payment Systems
Explore modern payment systems' security and privacy risks, comparing options like EMV, contactless, and mobile payments to help you make informed choices for safer transactions.
Deep Dive on the Dark Web
Explore tools and techniques used by cybercriminals on the dark web, from stolen credit cards to ransomware, and learn proactive defense strategies against various cyber threats.
How I Break Into Casinos, Airports and CNI - The Basics of Social Engineering
Discover the art of social engineering for ethical hacking. Learn reconnaissance, disguise, pretext creation, and interaction techniques to infiltrate secure facilities while maintaining professionalism and ethics.
BotProbe - Botnet Traffic Capture Using IPFIX
Explore IPFIX for efficient botnet traffic capture, reducing data volume by 97% and enhancing threat detection capabilities in network security.
Solving Threat Detection
Explore key issues in threat detection, including information sharing, SOC models, and tooling challenges. Learn practical solutions and real-world examples from Countercept's hunt team experiences.
Random Problems in IoT
Explore IoT device security vulnerabilities related to random number generation, their impact on cryptography, and potential solutions for embedded systems.
Hunt Or Be Hunted
Explore advanced threat hunting techniques, datasets, and analytical approaches for effective cybersecurity. Learn to detect compromises missed by traditional methods and improve defensive strategies.
Truly Anonymous Credentials Using Modern Cryptography
Explore anonymous authentication using linkable ring signatures, enabling spam prevention without compromising user privacy. Learn cryptographic principles and see a demo of an anti-spam anonymous forum on Tor/I2P.
WiFi-based IMSI Catcher
Explore WiFi-based IMSI catchers, their potential for easier smartphone tracking, and learn about mitigation strategies for vendors, operators, and users to address privacy concerns.
The Underground Economy of Apple ID
Explore the underground economy of Apple IDs, including real-world attacks, profit methods, and protective measures. Learn about vulnerabilities and Apple's mitigation efforts.
BeyondCorp - Beyond "Fortress" Security
BeyondCorp: A new security model that grants access based on device and user credentials, eliminating the need for traditional VPNs and enabling secure work from any network.
Advanced Internet Dataset Combinations for Threat Hunting and Attack Prediction
Explore advanced techniques for threat hunting and attack prediction using innovative Internet dataset combinations, moving beyond traditional methods for enhanced cybersecurity.
Weathering the Storm - The Art of Crisis Communications
Mastering crisis communications in security: strategies for effective internal and external stakeholder management during high-pressure situations.
Reducing Mixtape to Master Key Scenarios - How to Block the Dark Army from Mayhem Using API-Driven Access Control
Discover API-driven access control strategies to enhance security by eliminating "master keys" and implementing temporary, context-based privileged access in your infrastructure.
Hijacking .NET to Defend PowerShell
Explore stealthy .NET hijacking techniques for defending against PowerShell attacks, covering assembly modification, injection, profiling, and function hooking from a blue team perspective.
Five Keys to Building an Application Security Program in the Age of DevOps
Discover strategies for integrating security into DevOps practices, balancing risk management with rapid development, and implementing automated security measures for more secure code delivery.
Bypassing Malware Analysis Sandboxes Is Easy - Let’s Discuss How They Are Doing It and Why It Works
Explore techniques used by malware to evade analysis sandboxes, comparing various sandbox solutions and their effectiveness in detecting and analyzing different types of malware.
Assessing the Embedded Devices On Your Network
Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.
When Bandit Strikes - Defend Your Python Code
Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.
Swimming Upstream - Regulation vs Security
Strategies for navigating regulatory challenges in security, balancing compliance with effective security practices across industries. Insights on driving change and achieving security goals.