eEye BootRoot
Explore advanced rootkit techniques and boot-level system manipulation with eEye BootRoot, presented by security experts Derek Soeder and Ryan Permeh.
Attacking Web Services - Next Generation of Vulnerable Enterprise Apps
Explore vulnerabilities in enterprise web services and learn advanced techniques for identifying and exploiting security flaws in next-generation applications.
Economics, Physics, Psychology & Relation to Technical Aspects of Counter Intelligence
Explore economic, physical, and psychological aspects of counter-intelligence, examining authentication protocols, learned helplessness, and interactive risk in cybersecurity.
SQL Injection Detection - Joint Force Database Auditing & Anomaly Intrusion Detection
Explore advanced SQL injection detection techniques, combining database auditing and anomaly intrusion detection for enhanced cybersecurity measures.
The National ID Debate
Explore the complex issues surrounding national identification systems with expert panelists discussing privacy, security, and societal implications.
The Art of File Format Fuzzing
Explore advanced techniques for file format fuzzing, uncovering vulnerabilities in software applications through systematic input manipulation and analysis.
The Non-Cryptographic Ways of Losing Information
Explore non-cryptographic methods of information loss, examining vulnerabilities and risks in data protection beyond encryption techniques.
The Jericho Challenge - Finalist Architecture Presentations and Awards
Finalist presentations and awards for innovative network security architectures, challenging traditional perimeter-based approaches at Black Hat USA 2005.
Beyond EIP
Explore advanced exploitation techniques beyond EIP, including OP sled, return addresses, and encoders. Learn about payloads and stagers for enhanced post-exploitation capabilities.
Injection Flaws - Stop Validating Your Input
Explore injection flaws and learn why input validation alone is insufficient for security. Discover effective strategies to protect against these vulnerabilities in web applications.
Owning the C-suite - Corporate Warfare as a Social Engineering Problem
Explore social engineering tactics in corporate espionage, focusing on vulnerabilities in executive-level security and strategies for protecting high-value targets in organizations.
Flowers for Automated Malware Analysis
Explore advanced malware obfuscation techniques that bind execution to specific host environments, making automated analysis ineffective. Learn about the arms race between malware authors and security practitioners.
Legal Aspects of Computer Network Defense
Explore legal considerations in computer network defense, including legal frameworks, liability issues, and best practices for cybersecurity professionals.
CISO Q&A with Jeff Moss
Insightful CISO panel discussion exploring top security challenges, industry trends, and emerging threats in cybersecurity landscape. Covers certifications, zero-day research, and open source risks.
Dex Education - Practicing Safe Dex
Explore Android's dex file format, analyze vulnerabilities in dex analysis tools, and learn techniques to detect post-compilation modifications and protect against potential exploits.
Confessions of a WAF Developer - Protocol-Level Evasion of Web App Firewalls
Explores protocol-level evasion techniques for bypassing web application firewalls, focusing on vulnerabilities in virtual patches and demonstrating real-world examples and countermeasures.
De Mysteriis Dom Jobsivs - Mac EFI Rootkits
Explore EFI-based rootkits on Intel Macs, covering architecture, kernel injection techniques, persistence methods, and potential defenses against these sophisticated threats.
Intrusion Auditing Under Windows NT
Forensic techniques for auditing Windows NT systems post-intrusion, focusing on preserving evidence and using specialized tools to detect and analyze unauthorized access and system modifications.
Appliance Firewalls - A Detailed Review
Comprehensive review of network firewall appliances, examining features, vendor claims, and real-world test results of nearly two dozen devices. Uncovers truths behind marketing promises.
1000 Hackers in a Box - Failings of Security Scanners
Critique of commercial security scanners, exposing their shortcomings, false promises, and potential to encourage bad security practices. Challenges assumptions about their effectiveness in network protection.
Putting Intrusion Detection into Intrusion Detection Systems
Explore advanced intrusion detection techniques, focusing on proactive strategies and internal network monitoring to enhance cybersecurity beyond traditional perimeter defenses.