Un-F*#$ing Cloud Storage Encryption
Explore secure key rotation for cloud storage encryption, addressing current vulnerabilities and introducing new schemes with improved security and performance trade-offs.
iPhone Surgery for the Practically Paranoid
Explore iPhone component removal to enhance privacy, balancing functionality loss. Learn about device resilience, sensor impacts, and practical steps for those seeking stronger data collection protection.
Social Network Analysis - A Scary Primer
Explore unconventional data fusion techniques to analyze social networks, revealing insights from digital footprints and real-world sensors. Learn about graph theory and its applications in personal data analysis.
Kinder Garten Security - Teaching the Pre-college Crowd
Explore cybersecurity topics and careers in an after-school program for high school students. Earn college credit while engaging in hands-on activities and learning from experienced professors.
Demystifying IMSI Catchers
Uncover the mysteries of IMSI catchers, their functionality, detection methods, and legal implications. Gain insights into cellular network fundamentals and cutting-edge research on unauthorized cell sites.
24-7 CTI - Operationalizing Cyber Threat Intelligence
Operationalizing 24/7 cyber threat intelligence: techniques, training methodologies, and lessons learned for leveraging SOC Analysts, implementing with existing tools, budget, and experience.
Firemen vs Safety Matches - How the Current Skills Pipeline Is Wrong
Exploring innovative strategies to address the cybersecurity skills shortage by leveraging diverse talents and creating a sustainable workforce pipeline, inspired by first responder models.
High Confidence Malware Attribution Using the Rich Header
Explore advanced malware attribution techniques using the Rich Header, including its generation, fingerprinting capabilities, and a novel metadata hash for large-scale sample detection.
Behind Enemy Lines - Inside the Operations of a Nation State's Cyber Program
Explore the development of a nation-state's cyber surveillance program, including vendor interactions, in-house development, and operational insights for desktop and mobile platforms.
BECs and Beyond - Investigating and Defending Office 365
Explore Office 365 security through real-world attack case studies. Learn investigation techniques, log analysis, and defense strategies to protect cloud-based enterprise environments.
Looking for Malicious Hardware Implants with Minimal Equipment
Explore hardware security threats, detection methods, and threat modeling with minimal equipment. Learn to identify unexpected features and understand the challenges of hardware implants and interdiction.
That's No Moonshot
Exploring cybersecurity challenges in emerging technologies and the need for proactive measures to safeguard our interconnected future, emphasizing collective knowledge and action over grand initiatives.
When CAN CANT
Explore CAN bus vulnerabilities and CANT software for automotive security research. Learn error handling, selective attacks, and advanced techniques for vehicle hacking and defense.
Time Signature Based Matching for Data Fusion and Coordination Detection in Cyber Relevant Logs
Methodology for detecting automated behavior in cyber logs using temporal pattern matching, scalable through locality sensitive hashing. Applications include anomaly detection and data fusion.
Pseudo-Doppler Redux
Explore modern pseudo-Doppler direction finding using SDR for locating radio devices. Learn about innovative techniques, challenges, and future developments in wireless security research.
Skill Building by Revisiting Past CVEs
Explore CVE-2013-5576 to enhance vulnerability hunting and exploit creation skills. Learn strategies for critical thinking and pattern recognition in cybersecurity.
Securing Bare Metal Hardware at Scale
Explore advanced techniques for securing firmware in large-scale hardware deployments, addressing challenges and future trends in protecting against persistent backdoors and exploits.
Opening Closed Systems With GlitchKit
Explore GlitchKit, an open-source solution for fault injection in closed systems. Learn techniques to bypass firmware protection and extract secrets through hardware hacking and reverse engineering.
Embedded Device Vulnerability Analysis Case Study Using Trommel
Comprehensive methodology for embedded device vulnerability analysis, covering firmware, web app, mobile app, and hardware. Includes case study and TROMMEL tool introduction.
Defending Against Robot Attacks
Explore physical and social robot attacks through live demos, learning practical defenses for your workspace and home against potential robotic threats.
ROP is Still Dangerous - Breaking Modern Defenses
Explores advanced Return Oriented Programming attacks, demonstrating vulnerabilities in modern defense mechanisms and proposing strategies to overcome security measures like kBouncer and ROPecker.