NLP for Security Log Analysis - Learning to Crawl Before You Run
Explore the application of NLP in security analysis, focusing on embeddings for insider threat detection and the impact of large language models on the field.
Disrupting Malicious Traffic with Egress Proxies
Learn to detect and disrupt malicious network traffic using egress proxies. Discover techniques to ensure trusted outbound connections and protect against external threats and data exfiltration.
Hiring and Interviewing as Security Engineers
Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.
Community Cyber Defense - How to be a Local Cyber Hero
Discover how to protect local organizations from cyber threats through volunteer efforts and become a community cyber hero.
StarryNet - Empowering Researchers to Evaluate Futuristic Integrated Space and Terrestrial Networks
Explore futuristic integrated space-terrestrial networks with StarryNet, a framework enabling realistic and flexible experiments to evaluate global satellite dynamics and network behaviors.
FLASH - Towards a High-performance Hardware Acceleration Architecture for Cross-silo Federated Learning
Innovative hardware acceleration architecture for cross-silo federated learning, enhancing performance and resource utilization of cryptographic operations while preserving data privacy.
CellDAM - User-Space, Rootless Detection and Mitigation for 5G Data Plane
Innovative solution for detecting and mitigating data plane attacks in 5G networks without infrastructure changes. Utilizes state-dependent model checking to verify data signaling correctness at the device level.
LOCA - A Location-Oblivious Cellular Architecture
Innovative cellular architecture design protecting user location privacy while maintaining identity-based services. Explores MVNO-based systems, offering provable privacy guarantees and scalability for real-world deployment.
Shall We Play a Game? 30 Years of the CFAA
Explore the 30-year history and impact of the Computer Fraud and Abuse Act (CFAA) with legal experts, examining its evolution, controversies, and implications for cybersecurity and digital rights.
Are You a PenTexter? - Open-Sourcing Pentest Reporting and Automation
Open-source penetration testing reporting and automation techniques to streamline security assessments and improve efficiency in identifying vulnerabilities and communicating findings.
Deep Adversarial Architectures for Detecting and Generating Maliciousness
Explore deep learning's role in cybersecurity, focusing on adversarial architectures for malware detection and generation. Learn about vulnerabilities, red team modeling, and defensive strategies.
Intro to Storage Security, Looking Past the Server
Explore storage security beyond servers, focusing on protecting data at rest and in transit. Learn key concepts and best practices for safeguarding critical information assets.
Calling All Hacker Heroes - Go Above and Beyond
Inspiring talk on ethical hacking's potential to drive positive change in cybersecurity, encouraging hackers to become heroes by going beyond traditional boundaries and making a meaningful impact.
Toward Better Password Requirements
Explore modern password security practices, including composition rules, storage methods, and authentication alternatives, to enhance digital identity protection.
Managing Security with the OWASP Assimilation Project
Explore continuous discovery, scalability, and human monitoring in cybersecurity with the OWASP Assimilation Project. Learn about architecture, attack surface analysis, and practical demonstrations.
Network Access Control - The Company-Wide Team Building Exercise That Only You Know About
Learn to implement Network Access Control effectively, involving various teams and overcoming challenges. Gain insights on recruiting allies, achieving quick wins, and troubleshooting common issues.
Go Reverse-Engineering Workshop
Develop specialized skills for reverse-engineering Go binaries, focusing on offensive security tooling. Learn methodologies and disassembler plugins to tackle this challenging language.
Tokens, Everywhere!
Hands-on deep-dive into Azure AD's OAuth implementation, covering JWT, token types, and attack scenarios. Learn to secure environments and detect token abuse.
Upgrading Rollback Agnostic Replay Attacks
Explore car hacking techniques, focusing on radio frequencies and BLE. Learn about Rolling Codes analysis and practical steps to conduct research on vehicle security vulnerabilities.
Gitdigger - Creating Useful Wordlists From Public GitHub Repositories
Learn to create valuable wordlists from GitHub repositories using Gitdigger. Explore techniques for data extraction, processing, and generating outputs for various security applications.
Measuring the IQ of Your Threat Intelligence Feeds
Explore methods to evaluate and enhance threat intelligence feeds, focusing on IP addresses, metrics, and statistical tests for improved cybersecurity decision-making.