Poacher Turned Gamekeeper - Lessons Learned from Eight Years of Breaking Hypervisors
Explore hypervisor vulnerabilities, attack surfaces, and security design flaws through real-world examples. Learn key lessons for improving hypervisor security and hardening techniques.
The Big Chill - Legal Landmines that Stifle Security Research and How to Disarm Them
Legal challenges and risks in security research: exploring laws, cases, and potential solutions to protect researchers while promoting cybersecurity advancements.
Reflected File Download - A New Web Attack Vector
Explore a new web attack vector that allows attackers to download malicious files from trusted domains without uploading them, potentially bypassing security measures and spreading across social networks.
Exploiting Linux and Pax ASLR's Weaknesses on 32-Bit and 64-Bit Systems
Uncover vulnerabilities in Linux and PaX ASLR implementations, exploring low entropy, distribution issues, and object correlations. Learn to bypass Full ASLR and discover ASLR-NG, a new design addressing current weaknesses.
Lessons From Defending The Indefensible
Optimizing infrastructure to defend against DDoS attacks: techniques, experiences, and lessons learned from protecting HTTP/S and DNS services at scale.
Cybercrime in the Deep Web
Explore automated detection of cybercrime in anonymous networks beyond TOR, including I2P and FreeNET. Learn about DeWA system for identifying emerging threats in the Deep Web.
DSCompromised - A Windows DSC Attack Framework
Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.
Numchecker - A System Approach for Kernel Rootkit Detection
Explore NumChecker, a VMM-based framework for detecting kernel rootkits using Hardware Performance Counters. Learn about its implementation, effectiveness, and security analysis.
Slime - Automated Anti-Sandboxing Disarmament System
Automated system to disarm malware with anti-sandbox techniques, focusing on host-fingerprinting and general anti-sandboxing. Analyzes exit reasons and suggests suitable environments for dynamic analysis of evasive malware.
National Information Assurance Partnership
Explore the National Information Assurance Partnership and its impact on cybersecurity standards and practices in this insightful presentation from Black Hat USA 2000.
Defending Your Network with Active Directory Services
Explore advanced network defense strategies using Active Directory Services, focusing on cutting-edge techniques to enhance security and protect against evolving threats.
Managing Election Data - The California Recall
Explore the challenges and complexities of managing election data, focusing on the California Recall case study. Gain insights into data integrity and security in electoral processes.
Building the Server-side Swift Ecosystem
Explore the progress of server-side Swift development, including new libraries, improvements, and the introduction of Appsody for cloud-native Swift applications.
101 Pow Pow Pow Powershell
Learn essential PowerShell techniques for system administration and automation. Discover powerful cmdlets, scripting basics, and practical applications to enhance your IT skills.
Adding Simulated Users to Your Pentesting Lab with PowerShell
Learn to enhance your pentesting lab by creating realistic simulated users using PowerShell, improving the authenticity and effectiveness of your security testing environment.
Never Again Without a Contract - Dry-Validation
Explore dry-validation in Ruby for robust input validation, clear contracts, and efficient error handling, enhancing system reliability and code quality.
Who Are You? Delegation, Federation, Assertions and Claims
Explore protocols for delegating identity management, including SAML, OAuth, and OpenID Connect. Learn about single sign-on, authentication issues, and considerations for implementing these solutions.
Virtual Machines and Service Mesh in the Enterprise - 5 Things You Need to Know
Explore key challenges and solutions for integrating non-Kubernetes workloads into service mesh, focusing on VM onboarding, multi-cloud setups, and certificate preservation for enterprise environments.
Virtual Machines as First Class Citizens in Service Mesh
Explore integrating virtual machines into service mesh, addressing challenges in automation, multi-cluster deployment, and canary deployments between pods and VMs. Includes practical demo.
Take the Edge to the Cloud with OpenYurt and EdgeX Foundry
Explore integrating EdgeX Foundry with OpenYurt to manage diverse edge devices and extend Kubernetes to edge environments, enhancing IoT and edge computing capabilities.
Cloud Native Storage - a View of the Landscape, Projects and Technology
Explore cloud-native storage landscape, projects, and technologies. Learn about CNCF Storage SIG, ongoing initiatives, and future trends in the cloud-native ecosystem.