Fake President Fraud Defrauded
Explores psychology behind fake president scams, analyzes recent cases, and proposes prevention and mitigation strategies for organizations to protect against financial fraud through impersonation.
Hardware Side Channels in Virtualized Environments
Explore hardware side channel vulnerabilities in virtualized environments, focusing on cloud-based attacks. Learn about attack surfaces, demonstrations, and potential mitigations for these security risks.
CANsee - An Automobile Intrusion Detection System
Introducing CANsee: A machine learning-based intrusion detection system for automobiles. Detects abnormal CANBUS traffic using a low-cost device to capture and transmit data wirelessly. Open-source project with potential for enhancing vehicle security.
Beyond FBI vs Apple - What's Next for the Crypto Wars
Exploring the ongoing crypto wars between technologists and law enforcement, focusing on privacy vs. security debates and strategies for protecting user data in the digital age.
Inspeckage - Android Package Inspector
Inspeckage: A tool for dynamic analysis of Android apps. Simplifies runtime behavior observation through a web interface, intercepting library calls and allowing interaction with app components.
Where Malware Meets Murphy
Exploring worst-case scenarios in ransomware incidents, this talk discusses security infrastructure failures, first responder mistakes, and unexpected challenges in malware recovery.
Exploiting GLIBC - Hacking Everything
Exploración detallada de la vulnerabilidad CVE-2015-7547 en glibc, demostrando técnicas de explotación remota y su impacto en diversos productos de software compilados con versiones antiguas.
Don't Feed The Hippos
Exploring common failures in security communication with developers, this talk offers insights on avoiding 'insecure hippos' and provides best practices for effective collaboration in software security.
Targeted Attacks in Asia
Evolution of politically motivated targeted malware attacks in Asia over five years. Analysis of attack campaigns against human rights groups, media, and political parties, revealing overlaps and shifts in tactics. Discussion on countermeasures and futur…
Analogue Network Security
Explore innovative approaches to network security through analogue thinking. Gain insights into unconventional defense strategies and attacker understanding, inspiring new perspectives on solving security challenges.
Security in a World Out of Our Control
Exploring evolving security challenges in a BYOD world, emphasizing the need for new models that address access, trust, and control in rapidly changing technological environments.
Extortion and Cooperation in the Zero-day Market
Análisis del mercado de vulnerabilidades zero-day desde la teoría de juegos, explorando estrategias de cooperación, extorsión y maximización de beneficios para compradores y vendedores.
Advanced SOHO Router Exploitation
Explore advanced techniques for exploiting SOHO routers, including firmware analysis, vulnerability discovery, and ARM/MIPS exploit development. Learn about 0-day vulnerabilities and post-exploitation concepts for household routers.
Implementing Your Own Generic Unpacker
Detailed guide on creating a stealthy, efficient generic unpacker for Windows, covering kernel mechanisms, memory management, and PE loading. Includes implementation details and results on real-world samples.
Treble or Trouble - Where Android's Latest Security Enhancements Help And Where They Fail
Explore Android's security enhancements, focusing on Project Treble's impact. Analyze SELinux, Stagefright, and MediaDrmServer vulnerabilities to understand where improvements succeed or fall short.
PG - I Club and So Can You
Learn to start and run an "I Club" for sharing knowledge and skills in computer security, with practical tips on logistics, advertising, and community building.
PG - I Club and So Can You
Learn to start and run an "I Club" for cybersecurity enthusiasts, fostering community learning and skill development through shared experiences and competitions.
Technical Tactics - Fear & Loathing in Building Management Systems
Explore vulnerabilities in Building Management Systems and their potential impact on safety and security. Learn about risks, attack vectors, and mitigation strategies in this eye-opening presentation.
SniffAir – An Open-Source Framework for Wireless Security Assessments
Explore SniffAir, an open-source framework for wireless security assessments. Learn its functionality, features, and applications in enhancing network security through practical demonstrations and expert insights.
IMSI Catchers and the Happy Yellow Helicopter - Security Challenges at Standing Rock
Explore security challenges at Standing Rock, including IMSI catchers and surveillance. Learn about indigenous-led movements, cyber warfare, and human rights in the context of media blackouts.
A System Dynamics Approach to CNO Modelling
Explore system dynamics for modeling cyber network operations, focusing on Operation Aurora and phishing. Learn about policy management, capabilities, and feedback loops in cybersecurity.