Where Malware Meets Murphy
Exploring worst-case scenarios in ransomware incidents, this talk discusses security infrastructure failures, first responder mistakes, and unexpected challenges in malware recovery.
Exploiting GLIBC - Hacking Everything
Exploración detallada de la vulnerabilidad CVE-2015-7547 en glibc, demostrando técnicas de explotación remota y su impacto en diversos productos de software compilados con versiones antiguas.
Don't Feed The Hippos
Exploring common failures in security communication with developers, this talk offers insights on avoiding 'insecure hippos' and provides best practices for effective collaboration in software security.
Targeted Attacks in Asia
Evolution of politically motivated targeted malware attacks in Asia over five years. Analysis of attack campaigns against human rights groups, media, and political parties, revealing overlaps and shifts in tactics. Discussion on countermeasures and futur…
Analogue Network Security
Explore innovative approaches to network security through analogue thinking. Gain insights into unconventional defense strategies and attacker understanding, inspiring new perspectives on solving security challenges.
Security in a World Out of Our Control
Exploring evolving security challenges in a BYOD world, emphasizing the need for new models that address access, trust, and control in rapidly changing technological environments.
Extortion and Cooperation in the Zero-day Market
Análisis del mercado de vulnerabilidades zero-day desde la teoría de juegos, explorando estrategias de cooperación, extorsión y maximización de beneficios para compradores y vendedores.
Advanced SOHO Router Exploitation
Explore advanced techniques for exploiting SOHO routers, including firmware analysis, vulnerability discovery, and ARM/MIPS exploit development. Learn about 0-day vulnerabilities and post-exploitation concepts for household routers.
Hacking Cookies in Modern Web Applications and Browsers
Explore cookie vulnerabilities in web apps and browsers, covering secure flags, HSTS, HttpOnly, domain attributes, and XSS via cookies. Learn to enhance web security from an expert.
Implementing Your Own Generic Unpacker
Detailed guide on creating a stealthy, efficient generic unpacker for Windows, covering kernel mechanisms, memory management, and PE loading. Includes implementation details and results on real-world samples.
Discovering Your Passion in Cyber Security
Explore diverse cybersecurity career paths, uncover your passion, and learn strategies for professional growth in this insightful talk by industry expert Cherie Burgett.
Treble or Trouble - Where Android's Latest Security Enhancements Help And Where They Fail
Explore Android's security enhancements, focusing on Project Treble's impact. Analyze SELinux, Stagefright, and MediaDrmServer vulnerabilities to understand where improvements succeed or fall short.
Implementing the Three Cs of Courtesy, Clarity, and Comprehension to Optimize End User Engagement
Optimize end user engagement through courtesy, clarity, and comprehension. Learn effective strategies to enhance communication and interaction in professional settings.
PG - I Club and So Can You
Learn to start and run an "I Club" for sharing knowledge and skills in computer security, with practical tips on logistics, advertising, and community building.
PG - I Club and So Can You
Learn to start and run an "I Club" for cybersecurity enthusiasts, fostering community learning and skill development through shared experiences and competitions.
Technical Tactics - Fear & Loathing in Building Management Systems
Explore vulnerabilities in Building Management Systems and their potential impact on safety and security. Learn about risks, attack vectors, and mitigation strategies in this eye-opening presentation.
SniffAir – An Open-Source Framework for Wireless Security Assessments
Explore SniffAir, an open-source framework for wireless security assessments. Learn its functionality, features, and applications in enhancing network security through practical demonstrations and expert insights.
IMSI Catchers and the Happy Yellow Helicopter - Security Challenges at Standing Rock
Explore security challenges at Standing Rock, including IMSI catchers and surveillance. Learn about indigenous-led movements, cyber warfare, and human rights in the context of media blackouts.
Building a Benign Data Set
Explore techniques for creating unbiased datasets in machine learning, focusing on common pitfalls and strategies to mitigate selection, capture, negative set, and category biases.
A System Dynamics Approach to CNO Modelling
Explore system dynamics for modeling cyber network operations, focusing on Operation Aurora and phishing. Learn about policy management, capabilities, and feedback loops in cybersecurity.
How to Obtain 100 Facebook Accounts Per Day Through Internet Searches
Discover techniques to efficiently gather numerous Facebook accounts daily using advanced internet search strategies for research or security testing purposes.