
Explores legal implications of active cyber defense, covering technology, information control, and controversial practices. Emphasizes importance of collaboration between security professionals and legal counsel.

Unveiling spyphone attacks: A proof-of-concept technique bypassing mobile malware detection and MDM features, demonstrating vulnerabilities in mobile security and surveillance risks.

Explore legal risks for security researchers under the Computer Fraud and Abuse Act, including key cases, implications, and strategies to avoid legal trouble in cybersecurity work.

Explore Bugwise, a free online service for detecting software bugs through decompilation and data flow analysis, showcasing its success in finding vulnerabilities in Debian Linux.

Insights from a record-breaking DDoS attack: strategies, vulnerabilities, and defensive measures for safeguarding networks against evolving cyber threats.

Explore techniques for identifying and defending against long-term network intrusions by foreign intelligence agencies, with insights on open-source tools for detecting impersonation attacks.

In-depth analysis of APT attacks targeting Taiwan, showcasing automated detection systems, forensic techniques, and insights into attacker operations. Includes release of collaborative APT classification platform.

Advanced SQL injection techniques for bypassing firewalls and intrusion detection systems, including optimization methods and the Leapfrog framework for testing security measures.

Profiling and analyzing real-world attacks on industrial control systems, revealing surprising findings about attacker tactics, origins, and motivations in ICS security.

Explore the analysis and exploitation of Twine, a consumer IoT device, through reverse engineering, traffic capture, and firmware analysis. Learn techniques for understanding embedded systems.

Innovative machine learning tool for automated malware capability detection, trained on web technical documents. Provides probabilistic and traceable output for rapid reverse engineering of active malware variants.

Exploitation techniques for Teridian 8051-based SoCs in smart grid systems, covering architecture, security barriers, and methods to gain code execution and firmware access.

Explore vulnerabilities in cloud-based DDoS protection services and learn techniques to bypass and unmask protected websites using the "No Cloud Allowed" tool.

Explores weaknesses in DDoS mitigation techniques, demonstrating bypass methods for various protection layers. Introduces a PoC tool for near-perfect mitigation evasion, highlighting vulnerabilities in current defense strategies.

Explores new trends in fast-flux networks, including slower change rates, shared resources, multi-level structures, and similarities with benign applications. Proposes novel detection approaches based on these findings.

Scalable malware analytics framework using Hadoop for processing large volumes of malware samples. Enables efficient feature extraction, machine learning, and data exploration for security researchers.

Innovative tool for automated reverse engineering of virtualization obfuscators, requiring minimal manual effort and recreating near-original instructions without extensive bytecode analysis.

Explore national-level cyber incident response, from individual banks to presidential decisions, examining the flow of information and decision-making in major cybersecurity crises.

Exploiting Android app vulnerabilities to abuse web APIs, using JRuby for scripting and Burp Suite for testing. Demonstrates attacks bypassing security measures and exposes potential weaknesses in mobile app ecosystems.

Explore CSRF attacks, current countermeasures, and a proposed header-based policy for improved web security. Learn detection techniques and a new concept called Storage Origin Security for simplified protection.

Explore real-time collaborative intelligence gathering and attack integration using Maltego Tungsten. Learn to leverage shared graphs for effective team-based penetration testing and target profiling.