Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk
Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.
Hot Knives Through Butter - Bypassing Automated Analysis Systems
Explores advanced techniques used by malware to evade automated analysis systems, including extended sleep calls, mouse click triggers, and timed activation. Provides insights for security professionals on evolving threats.
Over the Router, Through the Firewall, to Grandma's House We Go
Cross-platform hack demonstration showcasing network penetration techniques, traversing routers and firewalls to access sensitive corporate data using multiple hosts and visual aids.
VPN Architectures - Looking at the Complete Picture
Comprehensive exploration of VPN architectures, addressing enterprise security concerns, integration with authorization systems, and deployment strategies for branch offices and remote users.
The Myth of Twelve More Bytes - Security on Post-Scarcity Internet
Exploring security implications of IPv6, DNSSEC, and new top-level domains on enterprise IT, fraud prevention, and network defense in the evolving Internet landscape.
Scaling Up Baseband Attacks - More Unexpected Attack Surface
Exploring unexpected attack vectors in baseband processors, revealing vulnerabilities in cellular network communication and GPS systems that can be exploited remotely over IP connections.
Building Trojan Hardware at Home
Learn to create and detect hardware-based trojans using everyday devices. Explore techniques for modifying hardware, embedding malicious code, and understanding countermeasures against these threats.
Comprehensive Virtual Appliance Detection
Explore techniques for detecting virtual appliances, including resolution analysis, HTML5 feature support, and 3D performance observations. Learn practical methods for identifying virtualized environments.
How to Use Experts - And When Not To
Explore the limitations of expert advice and learn to balance professional opinions with diverse perspectives for more informed decision-making.
Top 25 Overlooked Security Configurations on Your Switches and Routers
Comprehensive guide to enhancing network security by addressing often-overlooked configurations on switches and routers, covering encryption, filtering, logging, and protocol-specific settings.
Null Sessions, MSRPC, and Windows 2000
Explore Windows 2000 security vulnerabilities, focusing on Null Sessions and MSRPC. Learn about potential risks and effective mitigation strategies for system administrators and security professionals.
Defending Windows 2000 on the Internet
Explore strategies for securing Windows 2000 systems on the internet, covering architecture, configurations, and best practices to defend against common attacks and vulnerabilities.
Views on the Future Direction of Information Assurance
Explore future trends in information assurance with insights from NSA expert Richard George, covering emerging threats and strategies for cybersecurity.
IP Backbone Security
Explore IP backbone security strategies, threats, and best practices for safeguarding large-scale network infrastructures in this comprehensive presentation.
Defending the Information Web
Explore deception, secrets, and information warfare in the digital age. Learn strategies for defending against cyber threats and understanding the complexities of modern information systems.
A Stitch in Time Saves Nine - A Case of Multiple Operating System Vulnerability
Explore CPU vulnerabilities and their exploitation across multiple operating systems. Learn about the "sysret" instruction flaw, its impact, and mitigation strategies for system security.
Forensics With Linux 101
Learn essential Linux forensics techniques for digital investigations, covering evidence collection, analysis tools, and best practices for uncovering digital artifacts.
NT - 2K Incident Response & Mining for Hidden Data - PostMortem of Windows Box
Explore advanced techniques for Windows incident response and data mining, uncovering hidden information in NT/2K systems for effective forensic analysis.
Active Directory and Group Policy
Explore Active Directory and Group Policy fundamentals, best practices, and advanced techniques for efficient network management and security in Windows environments.
Enterprise Email Security Made Practical
Practical strategies for implementing robust enterprise email security, covering threat detection, encryption, and best practices for safeguarding corporate communications.
Variations in Exploit Methods Between Linux and Windows
Explore differences in exploit techniques between Linux and Windows systems, enhancing understanding of vulnerabilities and security measures across platforms.