Detecting and Defending Against State-Actor Surveillance
Explore state-sponsored surveillance techniques and learn effective detection and defense strategies against high-tech spying methods used by well-funded agencies.
The Future of Data Exfiltration and Malicious Communication
Explore advanced data exfiltration techniques, covert channels, and protocol engineering for secure communication. Learn about innovative approaches to network security and malicious traffic detection.
Hacking Invisibly and Silently with Light and Sound
Explore innovative hacking techniques using light and sound, from C2 channels and exfiltration to disrupting motion detectors and speech jamming. Learn advantages, disadvantages, and mitigation strategies for these unconventional attacks.
All Security Is Good(s)- Design Guidance for Economics - L Jean Camp - USENIX Enigma Conference - 2020
Explore economic aspects of security adoption failures, incentive-aligned design, and the balance between information sharing and privacy, with real-world examples and research insights.
Hiding From Big Brother Using Distributed Steganography
Learn techniques for hiding data from surveillance using distributed steganography, exploring methods like hidden files, alternate data streams, and encryption combined with steganographic approaches.
Abusing Normality - Data Exfiltration in Plain Site
Explore stealthy data exfiltration techniques using everyday system objects and processes. Learn to identify and defend against sophisticated attacks that leverage normal-looking channels for malicious purposes.
Killsuit - The Equation Group's Swiss Army Knife for Persistence, Evasion, and Data Exfil
Explore the Equation Group's sophisticated persistence, evasion, and data exfiltration tool, examining its features, installation methods, and exploitation techniques.
Exfiltrating Data Through IoT
Explore IoT protocols and their vulnerabilities for data exfiltration. Learn detection techniques and real-world examples to safeguard networks against emerging IoT-based threats.
Break the Top 10 Cloud Attack Killchains
Explore top cloud attack kill chains and effective defense strategies. Learn to identify vulnerabilities, prevent credential exposure, and secure cloud infrastructure across major providers.
Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration
Learn techniques to inspect mobile traffic, prevent data exfiltration, and understand certificate pinning. Explore mobile app virtualization, trusted SSL proxies, and hardware-protected clients for enhanced security.
Anatomy of an APT Attack
Explore tactics of APT attacks, including state-sponsored hackers and organized crime. Learn about real-world compromises, remediation processes, and the global impact of cybercrime.
DFEx - DNS File Exfiltration
Explore DNS file exfiltration techniques, including a unique protocol for bypassing NG Firewalls. Learn about HIPS tricks and innovative approaches to data transfer across networks.
Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration
Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.
A Practical Attack Against VDI Solutions
Demonstration of a proof-of-concept attack exploiting screen scraping to bypass VDI security measures, highlighting vulnerabilities in secure BYOD solutions.
Emanate Like A Boss - Generalized Covert Data Exfiltration With Funtenna
Explore Funtenna, a software technique for covert data exfiltration through electromagnetic emanations in various computing devices, including its mechanisms, implementations, and implications for network security.
The Fox is in the Henhouse - Detecting a Breach Before the Damage is Done
Detect network breaches early using visibility tools, data analysis, and real-time decision-making. Learn to choose and integrate security solutions for proactive threat response.
Using Machine Learning to Detect Sensitive Documents on SharePoint
Explore machine learning techniques for identifying sensitive documents on SharePoint, addressing insider threats and data exfiltration risks while discussing unique challenges in security-focused ML model development.
NSA Playset - Bridging the Airgap without Radios
Explore innovative techniques for bridging airgaps without radio technology, uncovering potential vulnerabilities in secure systems and networks.
DNS Hardening - Proactive Network Security Using F5 iRules and Open Source Analysis Tools
Explore proactive DNS security using F5 iRules and open-source tools. Learn to detect and mitigate threats like DGAs, malformed packets, and DNS DDoS attacks for enhanced network protection.
Inaudible Sound as a Covert Channel in Mobile Devices
Explores ultrasonic and vibration-based covert channels in mobile devices for data exfiltration, bypassing security measures. Proposes solutions to regulate sound-based vulnerabilities in information flow control.
Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud
Explore practical cache covert channels in cloud environments for secret data exfiltration between isolated virtual machines, presented by security researchers at Black Hat Asia.