
Explore EFI-based rootkits on Intel Macs, covering architecture, kernel injection techniques, persistence methods, and potential defenses against these sophisticated threats.

Forensic techniques for auditing Windows NT systems post-intrusion, focusing on preserving evidence and using specialized tools to detect and analyze unauthorized access and system modifications.

Comprehensive review of network firewall appliances, examining features, vendor claims, and real-world test results of nearly two dozen devices. Uncovers truths behind marketing promises.

Critique of commercial security scanners, exposing their shortcomings, false promises, and potential to encourage bad security practices. Challenges assumptions about their effectiveness in network protection.

Explore advanced intrusion detection techniques, focusing on proactive strategies and internal network monitoring to enhance cybersecurity beyond traditional perimeter defenses.

Explore LDAP security vulnerabilities, common deployment errors, and intruder techniques. Learn to safeguard authentication services and protect sensitive data in directory systems.

Explore e-commerce's growth, potential, and challenges. Analyze threats in emerging technologies and discuss the current state of online business transactions and security concerns.

Explore computer security challenges, from software design to system management, with insights on trust issues, complexity, and evolving threats in the digital landscape.

Explore ethical considerations and practical challenges of employing individuals with hacking backgrounds in cybersecurity roles.

Explore techniques for investigating network-based intrusions, focusing on evidence collection and preservation for legal purposes. Learn about back-tracing, forensic tools, and RMON2-based documentation.

Explore HTExploit, an open-source Python tool that bypasses htaccess authentication, allowing unauthorized directory listing and exposing web security vulnerabilities.

Explore advanced clickjacking techniques, including data injection and extraction, cross-browser vulnerabilities, and a new tool for creating multi-step attacks on web applications.

Explore evolving privacy threats and innovative solutions in the digital age, from centralized databases to subtle, pervasive data collection by tech giants and social media platforms.

Explore Facebook's security values, spam prevention strategies, and innovative approaches to safeguarding user data in this insightful keynote presentation.

Explore vulnerabilities in common archive formats, revealing steganographic techniques and processing errors that impact security tools and forensic analysis. Includes demonstrations and new tool introduction.

Exploring vulnerabilities in 3G/4G USB modems, focusing on Huawei devices. Discusses potential for widespread infection and botnet creation through software exploits.

Explore vulnerabilities in proximity card access systems, from RFID tags to backend databases. Learn attack techniques through demonstrations on popular deployments.

Explore the reality of ICS/SCADA system attacks, including attacker profiles and motivations, through insights from a custom-built honeynet mimicking industrial control devices.

Discover affordable power analysis attack techniques for cryptographic systems using open-source hardware and software. Learn to set up a budget-friendly lab and perform live demonstrations against AES implementations.

Explore innovative XML out-of-band data retrieval techniques for accessing files and resources from victim's machines, even with normal output from vulnerable applications.

Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.