The Not Fake News Hour
Humorous tech policy update in "SNL Weekend Update" style, covering security, privacy, and current events. Delivered by Stanford researcher at USENIX Enigma conference.
Understanding Trust and Security Processes in the Open Source Software Ecosystem
Explores security challenges in open source software, including code review, dependency management, and trust issues. Shares insights from interviews and offers practical advice for improving supply chain security.
Building an Automated Machine for Discovering Privacy Violations at Scale
Exploring static analysis techniques for detecting and fixing privacy leaks in large codebases, addressing challenges in building privacy-focused tools for developers and privacy engineers.
The Slippery Slope of Cybersecurity Analogies
Explores the use and misuse of analogies in cybersecurity, examining their impact on understanding, development, and policies while providing tips to avoid pitfalls in their application.
Spotting the Differences - Quirks of Machine Learning in Security
Explore challenges in applying machine learning to cybersecurity, including dataset issues, adversarial tactics, and evaluation problems. Learn about potential solutions and future directions in this field.
Levelling Up Security at Riot Games
Explore Riot Games' innovative approach to cybersecurity, focusing on scalable solutions, threat modeling, and fostering a security-conscious culture within the gaming industry.
One Packer to Rule Them All
Explore advanced packing techniques to evade antivirus detection, including new methods for x86 and x64 malware, and learn about the stages of malware detection processes.
Cyber Necromancy - Resurrecting the Dead
Explore reverse engineering of game servers and network protocols to revive Metal Gear Online. Learn techniques from packet logs to client code disassembly in this cybersecurity deep dive.
Data Transforming Your Sewage into Signatures
Transforming honeypot data into valuable security insights through innovative data analysis techniques. Learn to extract meaningful patterns and create effective signatures from seemingly useless information.
Geolocation of GSM Mobile Devices
Explore techniques for geolocating GSM mobile devices, including methods, tools, and potential applications in security and forensics.
Paint by Numbers vs. Monet
Explore the contrast between rigid, formulaic approaches and creative, intuitive methods in cybersecurity through an engaging analogy to art styles.
CobraDroid
Explore CobraDroid, an advanced Android malware analysis framework, and learn techniques for reverse engineering mobile threats in this security conference presentation.
Taking the BDSM Out of PCI-DSS Through Open-Source Solutions
Explore open-source solutions to simplify PCI-DSS compliance, reducing complexity and costs while maintaining security standards for payment card data protection.
Amelia Andersdotter's Keynote
Insightful keynote address exploring cybersecurity challenges, policy implications, and future trends in the digital landscape. Delivered by former European Parliament member Amelia Andersdotter at BruCON security conference.
HTTP Time Bandit
Explore HTTP-based Denial of Service attacks, focusing on a novel method using time-based techniques. Learn about attack classification, mitigation strategies, and tools for identifying vulnerabilities in web applications.
Cyberwar - Not What We Were Expecting
Explores the reality of cyberwar, challenging common misconceptions and examining its personal, ideological nature. Discusses historical context, current conflicts, and future implications for individuals and society.
We Have You by the Gadgets
Explore Windows gadget platform vulnerabilities, attack vectors, and the creation of malicious gadgets. Learn about security risks in this embedded application system.
pMap - The Silent Killer
Discover network vulnerabilities with pMap, a tool that silently extracts information from auto-configuration protocols to identify hosts, perform port scans, and fingerprint systems without sending packets.
How I Met Your Pointer - Hijacking Client Software for Fuzz and Profit
Explore binary instrumentation techniques to manipulate client software for efficient vulnerability discovery in closed-source systems with proprietary protocols.
Moar Anti-Forensics for the Louise
Explore advanced anti-forensics techniques and unconventional methods to challenge digital investigators, offering insights into potential blind spots in forensic analysis.
Shotgun Parsers in the Cross-Hairs
Explore secure input handling techniques to prevent vulnerabilities in network protocols. Learn to implement robust recognizers using parsing libraries for safer data processing.