Won't Somebody Please Think of the Data!
Strategies for protecting corporate data from internal threats, focusing on database security, GDPR compliance, and collaboration between engineering and operations teams.
NuGraph - GraphDB as a Cloud Service Built Upon JanusGraph and FoundationDB
Explore eBay's NuGraph, a high-performance GraphDB cloud service built on JanusGraph and FoundationDB, designed for secure, real-time business insights from massive datasets.
Exploring and Exploiting the SQLite
Explore SQLite vulnerabilities, auditing strategies, and fuzzing techniques. Learn about Magellan 2.0, shadow tables, and bypassing defense mechanisms for remote code execution in Chrome and SQLite binaries.
DBREACH - Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics
Explore database vulnerabilities through compression side-channel attacks, learning techniques to extract encrypted content and strategies for prevention and patching.
Blended Web and Database Attacks on Real-Time, In-Memory Platforms
Explore innovative attack vectors on real-time, in-memory platforms, blending web and database vulnerabilities. Learn about new SQL injection techniques, server-side JavaScript exploits, and R-based attacks in SAP HANA.
Data Recovery on Encrypted Databases with k-Nearest Neighbor Query Leakage
Explores data recovery attacks on encrypted databases supporting k-nearest neighbor queries, analyzing feasibility of exact reconstruction and proposing practical approximate reconstruction methods for spatial data.
Secret Management with Hashicorp's Vault
Overview of HashiCorp's Vault for secure secret management, covering features like dynamic secrets, authentication methods, and integration options for enhanced security and access control.
Connection String Attacks
Explore connection string vulnerabilities and attack techniques in web applications, focusing on security implications and prevention strategies.
Generic Attacks on Secure Outsourced Databases
Explores generic attacks on secure outsourced databases, revealing vulnerabilities in data protection methods and proposing potential countermeasures for enhanced security in cloud storage systems.
Pentesting NoSQL DB's Using NoSQL Exploitation Framework
Explore NoSQL database vulnerabilities and exploitation techniques for MongoDB, CouchDB, and Redis using the NoSQL Exploitation Framework. Learn about injection attacks, security issues, and automated penetration testing methods.
Learning to Reconstruct - Statistical Learning Theory and Encrypted Database Attacks
Explores the connection between statistical learning theory and encrypted database attacks, presenting novel approaches for database reconstruction from access pattern leakage with improved efficiency and broader applicability.
Find Me in Your Database - An Examination of Index Security
Explore Oracle indexing architecture, new flaws, and forensic aspects. Learn to identify issues in custom applications and understand the security implications of database indexing.
Hacking Oracle 11g
Explore advanced techniques for exploiting vulnerabilities in Oracle 11g databases, including privilege escalation and data manipulation strategies.
Advanced SQL Injection in Oracle Databases
Explore advanced SQL injection techniques in Oracle databases, focusing on vulnerabilities, exploitation methods, and defensive strategies for database security professionals.
New Optimization and Obfuscation Techniques
Advanced SQL injection techniques for bypassing firewalls and intrusion detection systems, including optimization methods and the Leapfrog framework for testing security measures.
Demystifying MS SQL Server & Oracle Database Server Security
Uncover vulnerabilities and enhance security measures for MS SQL Server and Oracle Database Server in this comprehensive exploration of database security.
Database Security
Explore database security vulnerabilities and protection strategies with expert David Litchfield in this comprehensive Black Hat conference talk.
Blue Team Is Sexy - Part II - All You Baseline Are Belong to Us
Explore advanced blue team strategies, focusing on baseline security, reevaluating defensive measures, and leveraging tools like Nmap for enhanced protection and threat detection.
Steal All of the Databases
Explore advanced techniques for database exploitation and security vulnerabilities with expert Alejandro Caceres in this comprehensive cybersecurity presentation.
RESTful Web Services
Learn to secure RESTful web services by exploring test methods, authentication, responses, and common vulnerabilities. Gain practical insights for robust API protection.
SecOps - Innovating Security in Innovative Organizations
Explore innovative security approaches for modern organizations, focusing on data governance, compliance, and fostering a security-conscious culture.