Understanding HL7 2.X Standards - Pen Testing - and Defending HL7 2.X Messages
Explore HL7 2.X standards in healthcare, learn pen testing techniques for medical systems, and discover strategies to secure HL7 2.X messages against potential vulnerabilities and attacks.
Analysis of the Attack Surface of Windows 10 Virtualization-Based Security
Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.
Cunning With CNG - Soliciting Secrets From Schannel
Explore Schannel's internal security, CNG key caching, and forensic implications. Learn to extract and leverage TLS/SSL connection data for decryption and analysis of ephemeral key exchanges.
The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
Explore Android's evolving security landscape, examining threats, vulnerabilities, and defensive measures. Learn how the Android Security Team addresses challenges and implements new features to protect users.
Advanced CAN Injection Techniques for Vehicle Networks
Explore advanced techniques for injecting CAN messages into vehicle networks, bypassing restrictions on physical control systems like brakes, steering, and acceleration.
TCP Injection Attacks in the Wild - A Large Scale Study
Comprehensive survey of TCP injection attacks, revealing commercial and non-commercial false content injections on the web. Explores detection methods, identifies injectors, and proposes client-side mitigation techniques.
The Remote Malicious Butler Did It!
Explore remote exploitation of unattended computers using rogue Domain Controllers. Learn technical details, attack vectors, and prevention methods for enterprise security.
Ouroboros - Tearing Xen Hypervisor With the Snake
Explore a critical verification bypass bug in Xen hypervisor, allowing malicious PV guest OS to control the hypervisor and other guest operating systems. Learn about exploitation vectors and payloads.
Defense at Hyperscale - Technologies and Policies for a Defensible Cyberspace
Explore strategies for achieving defensible cyberspace through innovative technologies, operational improvements, and public policies that provide cost-effective security at scale.
What's the DFIRence for ICS?
Explore digital forensics for industrial control systems, focusing on embedded devices in critical infrastructure. Learn data collection and analysis techniques for RTUs in electric substations.
Pindemonium - A DBI-Based Generic Unpacker for Windows Executable
Explore a generic unpacking algorithm for Windows executables using Dynamic Binary Instrumentation. Learn to detect and defeat popular packing techniques, reconstruct working PEs, and handle IAT obfuscation.
Keystone Engine - Next Generation Assembler Framework
Explore Keystone, a multi-architecture assembler engine with clean API, native support for various platforms, and bindings for multiple programming languages. Ideal for reverse engineering and security research.
Dungeons Dragons and Security
Innovative security training using role-playing game to teach basic principles through building attack/defense scenarios. Engages neophytes by drawing parallels between game and real-world security challenges.
Dark Side of the DNS Force
Explore the evolution of DNS-based attacks, including random subdomain techniques, and learn about detection and mitigation strategies for protecting against these sophisticated cyber threats.
Watching Commodity Malware Get Sold to a Targeted Actor
Explore how commodity malware breaches are reclassified and upgraded for targeted attacks, and learn detection techniques to prevent threat escalation in organizational networks.
Blunting the Phisher's Spear - A Risk-Based Approach
Explore a risk-based approach to combat spear phishing, introducing the Cyber Risk Index for personalized training and access management to enhance organizational cybersecurity.
BadTunnel - How Do I Get Big Brother Power?
Discover a critical Windows flaw affecting multiple systems and applications. Learn about its wide-ranging impact and how to defend against this pervasive threat, even on unsupported systems.
Next-Generation of Exploit Kit Detection by Building Simulated Obfuscators
Learn techniques for detecting next-gen exploit kits by simulating obfuscators. Explore implementation, evaluation, and evolution of obfuscators for 6 notorious exploit kit families to enhance cybersecurity protection.
Investigating DDOS - Architecture, Actors, and Attribution
Explore DDOS attacks, their evolution, and novel techniques for measuring, studying, and attributing them. Learn about honeypots, attack testing, and the individuals behind these cyber threats.
Language Properties of Phone Scammers - Cyberdefense at the Level of the Human
Explore forensic linguistics in cybersecurity, analyzing language patterns of phone scammers to enhance human-level defense against social engineering attacks.
The Tao of Hardware - The Te of Implants
Explore cheap hardware attacks on embedded devices and industrial control systems, including privilege escalation, kernel patching, and wireless control of PLCs. Learn about design decisions to reduce vulnerabilities.