Security Issues with Implementing and Deploying the LDAP Directory System
Explore LDAP security vulnerabilities, common deployment errors, and intruder techniques. Learn to safeguard authentication services and protect sensitive data in directory systems.
Hope, Hype, Horrors - E-Commerce Explored
Explore e-commerce's growth, potential, and challenges. Analyze threats in emerging technologies and discuss the current state of online business transactions and security concerns.
Computer Security - Textbook View
Explore computer security challenges, from software design to system management, with insights on trust issues, complexity, and evolving threats in the digital landscape.
The Issues Surrounding the Hiring of Hackers
Explore ethical considerations and practical challenges of employing individuals with hacking backgrounds in cybersecurity roles.
Introduction to Cyber Forensic Analysis
Explore techniques for investigating network-based intrusions, focusing on evidence collection and preservation for legal purposes. Learn about back-tracing, forensic tools, and RMON2-based documentation.
HTExploit - Bypassing Htaccess Restrictions
Explore HTExploit, an open-source Python tool that bypasses htaccess authentication, allowing unauthorized directory listing and exposing web security vulnerabilities.
Next Generation Clickjacking
Explore advanced clickjacking techniques, including data injection and extraction, cross-browser vulnerabilities, and a new tool for creating multi-step attacks on web applications.
Changing Threats to Privacy - From TIA to Google
Explore evolving privacy threats and innovative solutions in the digital age, from centralized databases to subtle, pervasive data collection by tech giants and social media platforms.
Security the Facebook Way
Explore Facebook's security values, spam prevention strategies, and innovative approaches to safeguarding user data in this insightful keynote presentation.
Hiding in the Familiar - Steganography & Vulnerabilities in Pop Archives Formats
Explore vulnerabilities in common archive formats, revealing steganographic techniques and processing errors that impact security tools and forensic analysis. Includes demonstrations and new tool introduction.
Huawei - From China with Love
Exploring vulnerabilities in 3G/4G USB modems, focusing on Huawei devices. Discusses potential for widespread infection and botnet creation through software exploits.
Using D-Space to Open Doors
Explore vulnerabilities in proximity card access systems, from RFID tags to backend databases. Learn attack techniques through demonstrations on popular deployments.
Who's Really Attacking Your ICS Devices?
Explore the reality of ICS/SCADA system attacks, including attacker profiles and motivations, through insights from a custom-built honeynet mimicking industrial control devices.
Power Analysis Attacks for Cheapskates
Discover affordable power analysis attack techniques for cryptographic systems using open-source hardware and software. Learn to set up a budget-friendly lab and perform live demonstrations against AES implementations.
XML Out-of-Band Data Retrieval
Explore innovative XML out-of-band data retrieval techniques for accessing files and resources from victim's machines, even with normal output from vulnerable applications.
Practical Exploitation Using A Malicious Service Set Identifier - SSID
Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.
To Dock or Not to Dock - Using Laptop Docking Stations as Attack Platforms
Explore laptop docking stations as potential attack platforms, examining vulnerabilities, demonstrating covert hardware implants, and discussing detection and mitigation strategies for corporate environments.
The Sandbox Roulette - Are You Ready For The Gamble?
Explore application sandbox vulnerabilities and evasion techniques through a "Sandbox Roulette" demonstration, comparing various commercial solutions and their effectiveness against different exploit vectors.
OptiSig - Semantic Signature for Metamorphic Malware
Explore semantic signatures for detecting metamorphic malware, overcoming limitations of traditional pattern matching. Learn about OptiSig toolset for generating and evaluating signatures on Intel platforms.
Practical Attacks Against MDM Solutions
Explore novel proof-of-concept attack techniques on Android and iOS devices that bypass traditional mobile malware detection and circumvent common Mobile Device Management features.
The M2M Risk Assessment Guide - A Cyber Fast Track Project
Comprehensive guide for assessing and mitigating security risks in Machine-to-Machine (M2M) technologies across industries, focusing on vulnerabilities and design strategies.