Methodology for Creation and Practical Applications of Polyglots
Explore the creation and applications of polyglots - data parsed as multiple formats. Learn techniques, historical uses, and future potential in computer security.
DevOps, CI, APIs, Oh My! - Security Gone Agile
Explore agile security practices for rapid deployment in DevOps environments, covering infrastructure, APIs, and code security to keep pace with modern development cycles.
Intro to GPG and the Web of Trust
Learn to use GPG for secure communication, data encryption, and email protection. Explore key concepts like the Web of Trust, key management, and participate in key signing parties to establish authenticity.
DevOops, I Did It Again
Explore security vulnerabilities in DevOps tools and practices, including AWS, Chef, Puppet, and Jenkins. Learn about misconfigurations and potential risks in fast-paced development environments.
OpenStack API Security Testing Automation in Action
Automated security testing framework for OpenStack API, integrating with Agile and CI/CD. Demonstrates Rackspace's approach to detect vulnerabilities efficiently, improving consistency and auditability.
Burning Down the Haystack to Find the Needle
Explore network flow pattern analysis to detect and prevent contemporary threats, and learn how to build a security analytics program for enhanced threat visibility and response.
How to Use Adaptive Hashes Without Making Yourself Vulnerable to DoS Attacks
Explore secure adaptive hashing techniques to protect passwords from brute force attacks while preventing DoS vulnerabilities. Learn a proof-of-work solution that balances security and performance in authentication systems.
Security for Non-Unicorns
Strategies for uncovering, preventing, and managing security issues in legacy systems and code for established companies. Practical approaches to improving security beyond startup environments.
iOS Apps Reverse - iPwn Apps
Explore iOS app reverse engineering techniques and tools to uncover hidden information and potential vulnerabilities in AppStore applications.
Mobile AppSec - Development and Alphabet Soup
Explore mobile app security challenges, vulnerabilities, and solutions. Learn effective strategies for protecting data and applications in the rapidly evolving mobile landscape.
The Real Cost of Security
Explore the complexities of security costs with Wendy Nather as she shares research findings, challenges assumptions, and discusses affordability in this thought-provoking LASCON presentation.
Ice Cream - Sudo Make Me a Sandwich
Explore Android 4.0+ rooting techniques, device protection mechanisms, and manufacturer-specific vulnerabilities. Learn about boot processes, signature checks, and tools for identifying security flaws in customized builds.
User Auth for Winners - How to Get It Right the First Time
Learn best practices for secure user authentication, from account creation to password reset, and implement robust systems to prevent breaches. Gain insights on REST-based platforms, authentication tokens, and scaling strategies.
Stupid Webappsec Tricks
Discover simple yet effective techniques for detecting vulnerabilities and making malicious activity economically infeasible in web application security.
Why CloudHSM Can Revolutionize AWS
Explore CloudHSM's potential to revolutionize AWS security through encryption, automation, and credential management, addressing trust concerns in cloud computing for sensitive data protection.
HTTPS Can Byte Me
Explore HTTPS vulnerabilities and security implications with industry experts, gaining insights into potential risks and mitigation strategies for secure web communication.
How I Met Your Girlfriend
Explore social engineering techniques and privacy vulnerabilities in popular platforms with hacker Samy Kamkar's revealing presentation on digital security risks.
Why Does Bad Software Happen to Good People
Explore the root causes of software failures and their impact on users in this insightful keynote, offering valuable perspectives on improving software quality and reliability.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.
Testing Modern Applications with Hackazon
Learn to test modern web applications using Hackazon, focusing on e-commerce functions, AJAX workflows, and RESTful APIs. Discover hidden vulnerabilities and systematic testing approaches.
The ThreadFix Ecosystem - Vendors, Volunteers, and Versions
Explore ThreadFix: an open-source system for managing app vulnerabilities, automating security tasks, and integrating tools. Learn about its components, ecosystem, and real-world case studies of platform improvements.