Drones, RemoteID and the Thrilling Future of UAS Flight
Explore RemoteID technology reshaping drone flight, focusing on safety, security, and regulatory compliance. Discover current applications and challenges in the thrilling future of UAV aviation.
Performing Rapid Triage Analysis using ANY.RUN
Explore rapid triage analysis using ANY.RUN for efficient malware assessment. Learn to gather crucial indicators of compromise and prioritize potential threats effectively.
Tracing Stack Usage and Stack Frames in a Debugger
Explore stack usage and stack frames in a debugger, tracing function calls to understand stack operations, calling conventions, and frame unwinding during program execution.
Gadgets II - Advanced Cryptographic Hardware Techniques
Explore advanced cryptographic hardware techniques and implementations in this CHES 2024 session, chaired by Rei Ueno.
Teach Your SBOM New Tricks with Bomshell
Explore bomshell, a scripting language for SBOM based on CEL. Learn to query, combine, and reshape SBOM documents across formats, enhancing compatibility and streamlining ingestion processes.
Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities
Explore strategies for mitigating open source software vulnerabilities, including supply chain attacks, SBOMs, and next-generation security controls for robust defense and compromise resilience.
Network ACLs Made Easy: Establishing Zero Trust Network Policies
Learn to automate Zero Trust network policies using AWS VPC Flow Logs and Terraform. Discover techniques for analyzing traffic data, optimizing security groups, and implementing efficient access controls without third-party solutions.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification
Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.
Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure
Explore challenges and solutions in multi-tenant identity management for B2B, B2C, and M2M environments, focusing on security, user experience, and balancing isolation with resource sharing.
Guardians of the Dataverse - Securing the AI Supply and Data Chain
Explore strategies to secure AI/ML and Big Data pipelines, leveraging insights from NIST SP 800-204D and CNCF projects to protect critical AI workflows and sensitive data.
SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport
Explore SPIFFE ecosystem growth, focusing on Linkerd and Teleport's implementation for workload identity verification across Kubernetes clusters and external environments.
All I Know About Cybersecurity I Learned from Fungus
Explore fascinating parallels between fungal biology and cybersecurity principles, gaining unique insights into cloud-native application security and best practices through nature-inspired analogies.
Leveraging Cryptographic Lineage for Context and Connected Trust
Explore cryptographic lineage for enhanced security, addressing challenges in AI adoption through attested claims and chain of custody, building on zero trust principles for improved traceability and trust in distributed systems.
A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security
Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.
When Infrastructure Gets Hacked
Explore digital security vulnerabilities in critical infrastructure systems and their potential impacts on daily life, emphasizing the importance of robust cybersecurity measures.
How to Stay Safe Online - Cyber Security Awareness for Everyone
Learn essential cyber security concepts, identify online threats, and protect your personal information with practical tips for securing networks and email.
TrustZone-M Security Vulnerabilities in Microcontroller TEEs - Lessons Learned
Explore TrustZone-M security vulnerabilities in Arm Cortex-M MCUs. Uncover isolation weaknesses, bypass techniques, and potential exploits in microcontroller Trusted Execution Environments.
The Hack@DAC Story - Learnings from Organizing the World's Largest Hardware Hacking Competition
Explore insights from organizing Hack@DAC, the world's largest hardware hacking competition. Learn about unique aspects, value for the security community, and key takeaways for industry, academia, and researchers.