Building Information Security Program from Scratch
Aprenda a construir um programa de segurança da informação eficaz, focando em métricas, gerenciamento de riscos e contratação de profissionais apaixonados pelo tema.
Be Ready for BeyondCorp - Enterprise Identity, Perimeters and Your Application
Explore BeyondCorp's enterprise security model, focusing on user and device authentication, access control, and implementation in open-source web applications using tools like SAML and Django.
Could a Few Lines of Code Mess It All Up
Explores risks of open source dependencies, revealing potential vulnerabilities in popular packages and discussing impacts on app security. Offers insights on mitigating risks in hybrid development.
Slippery When Wet - A Dirty Little Pigment Story
Explore the paradox of digital signatures vs. wet ink, examining trust issues, security concerns, and the future of identity verification in everyday transactions.
Lean Security
Explore lean security strategies to align with DevOps and Continuous Delivery, enhancing transparency and efficiency while maintaining robust defense systems in fast-paced business environments.
IOT and AppSec
Explore the intersection of Internet of Things (IoT) and application security, examining potential vulnerabilities and strategies for safeguarding connected devices and systems.
Infosec in the New World Order - Rugged DevOps and More
Explore the intersection of information security and DevOps with Gene Kim, focusing on rugged DevOps principles and their impact on modern cybersecurity practices.
Building Effective Cyber Security and Risk Management Programs
Explore strategies for developing robust cyber security and risk management programs with insights from Dr. Ron Ross, enhancing organizational resilience against digital threats.
Social Engineering
Learn about social engineering from David Hughes in less than an hour with LASCON's online material. Less than hour.
Hacking and Defending iPhone Application
Explore iPhone app vulnerabilities and defense strategies through hands-on demonstrations and practical techniques for securing iOS applications.
Network Attack Collaboration
Explore network attack collaboration techniques with Raphael Mudge. Learn strategies for coordinating and executing effective penetration testing in complex environments.
Automated vs. Manual Security - You Can't Scan for The Stupid
Explore the limitations of automated security tools and the importance of manual testing in identifying vulnerabilities that scanners miss, particularly those caused by human error.
Effortless, Agentless Breach Detection in the Enterprise - Token All the Things!
Discover innovative techniques for detecting network breaches using honeytokens. Learn about Canarytokens and new methods to set tripwires without agents or hardware, improving your network security.
Three Decades in Security - What’s Changed, and What Hasn’t
Explore cybercrime evolution over 30 years: changing motivations, increased stakes, persistent vulnerabilities, and enduring hacking techniques. Assess lessons learned and current security landscape.
Frictionless Security
Explore automated, non-intrusive security integration into company infrastructure. Learn from successes, failures, and future improvements in implementing frictionless security programs.
Hunting Asynchronous Vulnerabilities
Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.
Old Dog, New Tricks - Forensics With PowerShell
Explore PowerForensics: a PowerShell-based toolset for live digital forensics and incident response, enabling efficient investigation of advanced cyber threats without system imaging.
Attacking VxWorks - From Stone Age to Interstellar
Explore vulnerabilities in VxWorks, a real-time operating system, from historical exploits to cutting-edge attack techniques. Gain insights into securing critical infrastructure and embedded systems.
Forging the USB Armory
Explore the development of the USB armory, an open-source hardware device for security applications. Learn about its architecture, security features, and potential uses as a trusted USB device.
Hackers in the Wire and Drones Oh My!
Explore powerful, inexpensive penetration testing using ARM-based devices, from wired/wireless dropboxes to flying drones. Control actions remotely, with devices like BeagleBone Black and Raspberry Pi 2.
Reverse Engineering and Exploiting Font Rasterizers - The OpenType Saga
Explore critical vulnerabilities in OpenType font handling across popular software, revealing potential for arbitrary code execution and bypassing exploit mitigations. Learn about reverse-engineering techniques and in-depth vulnerability analysis.