Vendor Security - Where Our Data Goes We Follow
Explore vendor security challenges and solutions with experts from diverse companies. Learn about assessment methods, influencing vendors, scaling programs, and predicting security maturity in partner organizations.
How to Kill an AWS Access Key
Learn to eliminate static AWS Access Keys using Security Token Service, SAML, and Identity Providers for enhanced cloud security and short-lived credentials.
Visualizing Security
Explore data analysis and visualization techniques for security through real-world examples, covering various chart types and data transformation methods to enhance security insights.
Phishy Little Liars - Pretexts That Kill
Discover advanced techniques for creating specialized, custom pretexts in penetration testing, using target-specific data to enhance effectiveness and avoid detection.
Security Learns to Sprint - DevSecOps
Explore strategies for integrating security into DevOps, focusing on the "Three Ways" and providing actionable steps for immediate implementation in your organization.
Securing Coinbase's Edge Payments Infrastructure
Explore secure payment networks, KYC/AML practices, and fraud prevention in cryptocurrency exchanges. Learn about Coinbase's strategies for protecting transactions and ensuring regulatory compliance.
When GDPR and CCPA Strike - Silver Lining for Security Teams in Data Protection Clouds
Explore how data protection laws like GDPR and CCPA can benefit security teams, informing risk modeling, securing buy-in, and reducing liability exposure for organizations.
East vs West - How The Coasts Approach Information Security Differently
Explore the contrasting approaches to information security between Wall Street and Silicon Valley, uncovering valuable insights for professionals across various security roles.
Bootstrapping Security
Practical strategies for implementing effective cybersecurity on limited budgets, covering tools, techniques, and cost-saving approaches for organizations with financial constraints.
The Voight-Kampff Test for Discovering Web Application Vulnerabilities
Explore techniques to differentiate between human-discovered and machine-detected web app vulnerabilities, with insights on manual setup, chain exploits, and real-world case studies.
Security, Politics, Neutrality, and Protecting Users
Explore the intersection of security, politics, and tech neutrality, examining how these factors impact user protection and the evolving role of technology companies in society.
Break Crypto like a Pro
Explore common cryptographic vulnerabilities and learn practical exploitation techniques in this engaging talk on breaking crypto systems effectively.
Non-Political Security Learnings from the Mueller Report
Explore forensic evidence from the Mueller Report to understand network compromises, access methods, and defensive strategies for organizations.
RIS-ky Business - Exploiting Medical Information Systems
Explore medical device security, protocols, and system architecture. Learn how attackers can exploit vulnerabilities to access patient information in healthcare settings.
Serverless Osquery Backend and Big Data Exploration
Explore serverless osquery backend deployment, scalability challenges, and large-scale data processing for enhanced intrusion detection and endpoint management.
Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
Learn to combat vulnerability fatigue using data analytics principles from the US Tsunami Warning Center for real-time, high-impact security alerts.
Purple is the New Black - Modern Approaches to Application Security
Explore modern application security approaches combining defense, offense, automation, and continuous learning for various app types, including zero trust, supply chain, and microservices.
Formally Verifying Everybody's Cryptography
Explore formal verification in cryptography: its application, challenges, and impact on securing real-world systems through mathematical reasoning and advanced techniques.
Prevent Phishing & Impersonation
Explore innovative approaches to prevent phishing and impersonation attacks in digital systems. Learn about trust-based identity models and a prototype address book that enhances security without compromising usability.
Redback - Advanced Static Binary Injection
Explore advanced static binary injection techniques to insert external code into executables, modifying run-time behavior. Learn from experts about this powerful yet underutilized method.
Store-to-Leak Forwarding - There and Back Again
Explore store-to-leak forwarding attacks, their evolution since Meltdown, and implications for data security in modern processors. Learn about new vulnerabilities and mitigation strategies.