Not Yet Another Fuzzer
Explore NYAF, a multi-platform fuzzer using emulation and Generation Search algorithm for improved analysis of IOT devices, embedded systems, and firmware. Learn about its advantages in scalability and efficiency.
Keynote Speaker
Ingeniera de seguridad y privacidad comparte su experiencia en roles de liderazgo en Notion, Lyft, Apple y Microsoft, abordando desafíos y tendencias en la industria tecnológica.
Exploring the Hidden Attack Surface of OEM Routers
Descubre vulnerabilidades críticas en routers OEM y sus implicaciones para la seguridad. Análisis detallado de un caso de estudio que revela fallos en la cadena de suministro y prácticas de seguridad deficientes.
Achieving the Web Isolation Nirvana - How Far Along Are We?
Explore browser isolation mechanisms, their effectiveness, and future directions for enhancing web application security against untrusted code and third-party attacks.
Buying Security - A Client's Guide
Comprehensive guide for effective security program implementation, focusing on vendor selection, value optimization, and marketplace insights from both client and vendor perspectives.
So You Think You Can Patch - The Game Show that Questions Your Security Assumptions
Explore the complexities of security patching through a game show format. Experts discuss challenges, policies, and solutions for effective patch management in modern enterprises.
Rise of Coinminers
Exploring the rise of coinminers: their impact, technical aspects, detection methods, and defensive strategies. Insights into tracking campaigns, profits, and future predictions for this emerging cybersecurity threat.
Simple - Open - Mobile - A Look at the Future of Strong Authentication
Explore the future of strong authentication with FIDO U2F and FIDO 2 standards, offering simplicity and security for online users while addressing the limitations of traditional hardware tokens.
The Tales of a Bug Bounty Hunter
Explore advanced mobile security techniques and real-world vulnerabilities in Instagram, with insights on bug bounty hunting, responsible disclosure, and prevention strategies in the software development lifecycle.
In the Crosshairs - The Trend Towards Targeted Attacks
Explore the rise of targeted cyber attacks, their effectiveness, and economic advantages. Learn about real-world examples and strategies to counter this growing threat.
Access Control in 2016 - Deep Dive
Deep dive into advanced access control approaches, exploring complexities, limitations of traditional methods, and new strategies for effective implementation in modern IT environments.
Advanced Techniques for Real Time Detection of Polymorphic Malware
Explore advanced techniques for detecting polymorphic malware in real-time, including approximation matching algorithms and bloom filters. Compare efficiency and performance of various methods for fast identification and classification.
Elements of a Successful Security Strategy - A Comprehensive Approach
Expert panel discusses key components of effective cybersecurity strategies, offering insights on comprehensive approaches to protect organizations from evolving threats and vulnerabilities.
Changing the Colors of Your Keyboard Might Lead to Privilege Escalation
Uncover how gaming keyboard software can lead to kernel vulnerabilities, exploring real-world exploits and discussing future implications for Linux kernel security.
Chop Suey - An Exceptional Dish With A Side Of Buffer Overflows
Explore buffer overflow vulnerabilities in exception handling, uncovering a new exploitation technique and its real-world implications for software security.
Securing the Road to Autonomy
Expert panel discusses challenges and strategies for securing autonomous vehicles, addressing cybersecurity risks and safety concerns in the evolving automotive industry.
In-Secure Remote Operations - What Sucks, Rocks, and a Super-CLI
Explore secure remote operations, analyzing pros and cons of jump server architectures, role-based shells, and PowerShell limitations. Includes new research on full token hijacking from network logon sessions without hashes or TGTs.
Why I Write My Own Security Tooling and Why You Should Too
Discover the benefits of creating custom security tools for research. Learn how this approach enhances understanding, improves vulnerability detection, and ultimately makes you a more effective security researcher.
Dirty Stream Attack - Turning Android Share Targets To Attack Vectors
Explore Android's vulnerability to Dirty Stream Attacks, where malicious apps exploit file-sharing intents to compromise target applications. Learn detection methods and security measures.
The Road to Side-Channel Regression Testing in CI Development
Explore integrating side-channel regression testing into CI development, with practical demonstrations and insights on implementing countermeasures for sample attacks.
Server Side Prototype Pollution - Blackbox Detection Without The DoS
Innovative techniques for detecting server-side prototype pollution without causing DoS, including a Burp extension for blackbox testing and identifying JavaScript engines through crafted requests.