Pushing Security Left by Mutating Byte Code
Explore techniques for building secure software through bytecode mutation, including obfuscation, encryption, and cross-compilation to protect against reverse engineering and enhance product security.
Subverting Trust in Windows - A Case Study of the How and Why of Engaging in Security Research
Explore Windows security research through a case study on subverting trust, covering dynamic analysis, code signatures, and PowerShell, with insights on validating trust and lessons learned.
Mechanical Backdoors in Cold War Encryption Machines
Explore Cold War encryption machines, their deliberate weaknesses, and the NSA's exploitation. Uncover the fascinating history of supply-chain attacks and mechanical cryptography.
Delivering Secure, Client-Side Technology to Billions of Users
Explore Google's approach to securing Android for billions, covering encryption, app analysis, ecosystem collaboration, and update processes for a safer mobile experience.
At the Heart of Combating Cyberthreats
FBI Director Wray discusses cyberthreats, the Bureau's role in combating them, and challenges facing America's cybersecurity landscape in a fireside chat-style interview.
Securing the Genome - The Intersection of Genomics, Cloud and Big Data
Explore genomic data security in the cloud, addressing challenges, threats, and compliance for unlocking medical breakthroughs while protecting sensitive genetic information.
The Modus Operandi of EV Certificates Fraudsters - Findings from the Field
Explore the dark web's SSL/TLS certificate market and its impact on cybersecurity. Learn about EV certificate fraud, research findings, and implications for digital trust and encryption.
How FIDO2 and WebAuthn Stop Account Takeovers
Explore FIDO2 and WebAuthn for robust user authentication, learn implementation strategies, and understand how these technologies prevent account takeovers and enhance security.
You, Me and FIPS 140-3 - A Guide to the New Standard and Transition
Explore the new FIPS 140-3 cryptographic standard, its key differences from FIPS 140-2, and the transition timeline. Learn about updated requirements, terminology changes, and implications for current certifications.
How the Best Hackers Learn Their Craft
Discover the proven system for building elite hacker teams, from talent identification to competition success. Learn surprising strategies for developing top-tier cybersecurity skills and fostering creative problem-solving abilities.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable WiFi Devices
Explore how a vulnerability in Amazon Echo led to the discovery of Kr00k, a widespread WiFi security flaw affecting billions of devices from major tech companies. Learn about its implications and potential risks.
Implications of the Global Push to Ban End-to-End Encryption
Explore global encryption bans, their impact on privacy, security, and democracy. Analyze government policies, cybersecurity trends, and the privacy-preserving movement's response to these challenges.
OpenSSL and FIPS - They Are Back Together
Explore OpenSSL's FIPS 140-2 validation, architectural changes, and industry impact. Learn about TLS v1.3 support, validation scope, and post-certification steps in this technical presentation.
The Network Is Going Dark - Why Decryption Matters for SecOps
Explore strategies for decrypting encrypted network traffic, focusing on TLS 1.3 challenges and solutions like SSL fingerprinting and session-key forwarding for effective network security operations.
Two Weeks with a Russian Ransomware Cell
Insights from two weeks of dialogue with Russian ransomware operators, revealing their methods, motivations, and advice for IT security, with implications for future cybersecurity strategies.
API Abuse through Mobile Apps - New Attacks, New Defenses
Explore mobile app API security challenges and defenses, including OAuth2, TLS pinning, and app attestation. Learn through a simulated battle between a delivery app and an attacker.
Protect Privacy in a Data-Driven World - Privacy-Preserving Machine Learning
Explore privacy-preserving machine learning techniques to harness AI's power while maintaining data confidentiality, with insights on federated learning, trusted execution environments, and homomorphic encryption.
Crypto 101 - An Intro to Real World Crypto
Explore real-world cryptography essentials, including ciphers, elliptic curve cryptography, hashing functions, and secure password storage techniques for practical implementation.
Quantum Computing
Explore quantum computing fundamentals, from quarks to cryptography, with expert insights on superposition, parallelism, and polarization.
Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration
Learn techniques to inspect mobile traffic, prevent data exfiltration, and understand certificate pinning. Explore mobile app virtualization, trusted SSL proxies, and hardware-protected clients for enhanced security.
Building Dictionaries and Destroying Hashes Using Amazon EC2
Explore password cracking techniques using Amazon EC2, covering hashing algorithms, methodology tools, and cloud-based strategies for efficient and cost-effective password recovery.