Enterprise Class Vulnerability Management Like a Boss
Learn enterprise-level vulnerability management strategies, challenges, and goals. Explore security architecture, application verification, and metrics for effective risk mitigation in complex environments.
Actionable Threat Intelligence - ISIS and the SuperBall
Explore actionable threat intelligence strategies, from building threat models to implementing preemptive and reactive measures, enhancing cybersecurity through practical insights and methodologies.
Rethinking the Trust Chain - Auditing OpenSSL and Beyond
Explore software security, trust chains, and OpenSSL auditing. Learn about emerging threats and gain insights into network transport integrity and certificate deployment challenges.
Simulating Cyber Operations - Do You Want to Play a Game
Explore cyber operations simulation techniques and strategies for enhancing security preparedness in this engaging talk by Bryan Fite.
Departmentalizing Your SecOps
Explore strategies for optimizing SecOps through departmentalization, enhancing communication, and leveraging opportunities across IT, monitoring, and security teams.
User Awareness - We're Doing It Wrong
Discover innovative approaches to cybersecurity awareness training that challenge traditional methods and engage users effectively for better organizational security outcomes.
Configure Your Assets Save Your Butt
Learn essential asset configuration techniques to enhance security and protect your systems from potential threats and vulnerabilities.
Wireless Intrusion Detection System with Raspberry Pi
Learn to build a wireless intrusion detection system using Raspberry Pi. Explore setup, configuration, and implementation techniques for enhanced network security.
Digital Supply Chain Security - The Exposed Flank
Explore digital supply chain vulnerabilities, legal complexities, and security strategies. Learn to identify risks, implement robust processes, and go beyond compliance for effective protection.
Operationalizing Yara
Learn to effectively implement and utilize Yara rules for enhanced threat detection and malware analysis in operational environments.
Surfing the Sea and Drowning in Tabs - An Introduction to Cross Site Request Forgery
Explore Cross-Site Request Forgery (CSRF) attacks, their impact on web security, and effective prevention strategies in this comprehensive introduction.
Shooting Phish in a Barrel and Other Terrible Fish Related Puns
Explore phishing attack techniques and defense strategies through humorous fish-related puns. Learn practical cybersecurity insights to protect against email-based threats.
Data Loss Prevention - Where Do I Start
Learn essential concepts of Data Loss Prevention (DLP), including system types, data identification, and implementation strategies to protect confidential information effectively.
ZitMo NoM Clientless Android Malware Control
Explore clientless Android malware control techniques, focusing on ZitMo NoM, and learn about potential threats and defense strategies in mobile security.
Lessons Learned from Implementing Software Security Programs
Insights on implementing software security programs, covering challenges, training, threat modeling, design reviews, testing, vendor management, and metrics for effective cybersecurity strategies.
Findings to Date
Explore recent cybersecurity findings and their implications with expert Cameron Maerz in this insightful conference talk from Circle City Con 2015.
Stupid Pentester Tricks OR Great Sysadmin Tips Done in Style of Rocky and Bullwinkle
Discover 208 clever pentesting techniques and sysadmin tips presented with a humorous Rocky and Bullwinkle twist, offering unique insights for both security professionals and system administrators.
Running Away from Security - Web App Vulnerabilities and OSINT Collide
Explore the intersection of web app vulnerabilities and OSINT techniques, uncovering potential security risks and learning effective mitigation strategies.
From Blue to Red - What Matters and What Really Doesn't
Explore the transition from blue team to red team in cybersecurity, focusing on crucial aspects and common misconceptions in penetration testing and defensive strategies.
Using Evernote as a Threat Intelligence Management Platform - Part 2
Explore using Evernote for threat intelligence management, covering requirements, sources, automation, sharing, and case tracking in cybersecurity operations.
Surfing the Sea and Drowning in Tabs - An Introduction to Cross Site Request Forgery
Explore Cross Site Request Forgery: its mechanisms, prevention strategies, and real-world implications. Learn about same-origin policy, viewstate, headers, and encrypted token patterns.