Lessons From Defending The Indefensible
Optimizing infrastructure to defend against DDoS attacks: techniques, experiences, and lessons learned from protecting HTTP/S and DNS services at scale.
Attacking Hypervisors Using Firmware and Hardware
Explore vulnerabilities in hypervisors through firmware and hardware emulation, demonstrating attacks and their impacts. Learn about firmware rootkits and new testing modules for hypervisor security.
Crippling HTTPS with Unholy PAC
Explore how malicious Proxy AutoConfiguration can compromise HTTPS security, leak sensitive data, and enable cross-platform attacks, even on secure networks and browsers.
An Analysis of Computer Numerical Control Machines in Industry 4.0
Explores security risks in modern CNC machines, demonstrating practical attacks and discussing mitigation strategies for Industry 4.0 vulnerabilities in manufacturing environments.
Rock 'Em Sock 'Em Robots - Bot Swatting Like the Pros
Explore strategies for managing bot traffic, detecting malicious behavior, and improving data confidence in web systems. Learn to differentiate between beneficial and harmful bots.
Side Channel Attacks in 4G and 5G Cellular Networks
Explore vulnerabilities in 4G/5G networks, focusing on the ToRPEDO attack that exploits paging occasions to compromise user privacy and security.
Automate Security Tests for APIs with Syntribos - An Open Source Security Scanner
Explore Syntribos, an open-source automated security scanner for RESTful APIs. Learn its design, configuration, and capabilities to detect vulnerabilities like SQL injection and DoS attacks efficiently.
Point Break - A Study of Bandwidth Denial-of-Service Attacks against Tor
Explores bandwidth denial-of-service attacks against Tor, demonstrating feasibility and impact on network performance through experimentation and simulation. Analyzes costs and effects of various attack strategies.
AIS Exposed - Understanding Vulnerabilities and Attacks 2.0
Explore vulnerabilities in Automatic Identification Systems, including malicious routes, hijacking, spoofing, and DoS attacks. Learn about real-world experiments and proposed countermeasures.
Windows 2003 - Java Library Hole Allowing Multiplatform Denial-Of-Service
Explore a critical Java library vulnerability enabling multiplatform denial-of-service attacks on Windows 2003 systems, presented by security expert Marc Schöenefeld.
Common Darknet Weaknesses
Explore common vulnerabilities in darknet networks, focusing on attack strategies and mitigation techniques for encrypted anonymizing systems like Tor and I2P.
Leveraging Your APM NPM Solutions to Compliment Your Cyber Defense Strategy
Explore how APM and NPM solutions enhance cyber defense strategies, covering topics like denial of service, network flow, authentication, and cloud services.
Stories through Logging - It Was the Best of Logs, It Was the Worst of Logs
Explore effective logging practices for better storytelling and troubleshooting in IT systems. Learn to extract valuable insights from log files and improve system monitoring.
Election Hacking Defined and How to Fight Back
Explore election hacking vectors, from psychometrics to infrastructure attacks, and learn defensive strategies to protect democratic processes.
The Security Toolbox for Node
Explore top Node.js security threats and learn practical tools to protect against vulnerabilities in dependencies, data, and servers. Gain a comprehensive security toolkit for robust application defense.
Service Denied! Understanding How Regex DoS Attacks Work
Explore regex DoS attacks in Rails, understand their mechanics, and learn prevention strategies. Dive into CRuby's regex engine and grasp the underlying principles of regular expressions.
PEIMA - Harnessing Power Laws to Detect Malicious Activities
Explore power law-based techniques for detecting and mitigating DDoS attacks, intrusions, and other malicious network activities using PEIMA methodology.
Cybersecurity Vulnerabilities in Precision Time Protocol - Attacks and Mitigations
Explore critical cybersecurity vulnerabilities in IEEE 1588's Precision Time Protocol through experimental findings, including spoofing, DoS attacks, data injection, and covert channels, with proposed mitigation strategies.
Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds
Systematic study reveals vulnerabilities in IoT cloud platforms' MQTT integration, exposing risks of device control, DoS attacks, data theft, and status manipulation.
Preventing DoS Attacks in Node.js Applications - Security Best Practices
Master essential security techniques for protecting Node.js applications from DoS attacks, covering JSON parsing, XML bombs, regex vulnerabilities, and storage operations optimization.
Leveraging Blockchain for Secure and Immutable Firmware Updates
Explore blockchain-based secure firmware updates for IoT devices. Learn implementation strategies, smart contracts, and resilience against attacks through expert insights and a practical demo.