Evading Microsoft ATA for Active Directory Domination
Explore techniques for evading Microsoft ATA in Active Directory environments, including threat detection bypasses, attack chain modifications, and strategies for maintaining domain dominance.
Open Source Security Orchestration
Explore open-source security orchestration using Adaptive Network Protocol (ANP) for efficient threat response, automated network defense, and improved visibility across multiple systems and clouds.
Virtual Terminals, POS Security and Becoming a Merchant
Explore virtual terminals, POS security, and payment fraud techniques. Learn about transaction vulnerabilities, card exploitation, and merchant-side risks in electronic payment systems.
Scraping Leaky Browsers for Fun and Passwords
Explore techniques for extracting sensitive data from browser memory dumps, including passwords and session tokens, with insights on potential solutions and vendor responses.
Security Through Design
Explore security through design principles, examining real-world examples and innovative approaches to create safer digital environments and user interactions.
Inventing Defense
Explore the evolution and challenges of cybersecurity defense through historical analogies, myths, and modern-day realities in this thought-provoking keynote address.
What Does the Perfect Door or Padlock Look Like?
Explore physical security vulnerabilities in doors and padlocks, covering various components, attack methods, and protective measures for enhanced security awareness.
Building a Successful Internal Adversarial Simulation Team
Strategies for building and operating an effective internal adversarial simulation team, covering threat analysis, offensive techniques, and defensive metrics to enhance cybersecurity posture.
Creating REAL Threat Intelligence with Evernote
Explore threat intelligence creation using Evernote, covering data-driven feeds, task management, and open-source intelligence gathering for effective organizational security strategies.
Looking Forward - Finding the Right Balance for INFOSEC
Exploring the future of cybersecurity, balancing technology and talent, and addressing challenges in the industry through automation, red teaming, and strategic focus.
The .11 Veil, Camouflage & Covert! Invisible WiFi, Revealed
Unveiling hidden WiFi communication techniques, exploring covert methods, and analyzing security implications of invisible wireless networks.
Stealing a Mobile Using Wormholes
Explore mobile network vulnerabilities, SIM card access techniques, and baseband firmware analysis. Learn about "wormholes" in smartphones and their potential for identity theft and unauthorized authentication.
Biting into the Forbidden Fruit
Exploring JavaScript cryptography's vulnerabilities, debunking myths, and analyzing real-world implementations to provide an updated perspective on its security challenges and potential solutions.
Thunderbolts and Lightning - Snare
Explore Thunderbolt DMA attacks beyond FireWire adapters, discussing novel approaches and potential vulnerabilities in current hardware systems with Thunderbolt ports.
Security Model Bedfellows
Explore how integrating security, legal, and procurement can enhance software security from the start, reducing vulnerabilities and improving vendor accountability in the development process.
Investigating PowerShell Attacks
Explore PowerShell attack techniques, forensic artifacts, and investigation methods for detecting and mitigating threats in Windows environments.
Realtime Analysis and Visualization of the Zeus Botnet
Explore real-time analysis and visualization techniques for cybersecurity, covering data collection, processing, and reporting using advanced technologies like MongoDB, Redis, and API integration.
Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol
Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.
HTML5 - A Whole New Attack Vector
Explore HTML5's new features from an attacker's perspective, uncovering potential security vulnerabilities and innovative attack vectors in modern web browsers.
Introducing the Smartphone Penetration Testing Framework
Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.
Adventures in Authentication and Authorization
Explore Netflix's journey in implementing authentication and authorization for microservices, discussing technology choices, challenges, and innovative solutions for a robust zero-trust ecosystem.