ClickOnce Exploitation: One-Click Network Foothold - AppSec California 2016
Explore ClickOnce deployment vulnerabilities and learn a new methodology for establishing network footholds through minimal user interaction and phishing techniques.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
Implementing a User-Centric Datastore with Privacy-Aware Access Control for Cloud-Based Data Platforms
Explore user-centric data storage with privacy-aware access control for cloud platforms. Learn about implementation, components, and challenges in this informative talk on secure data management.
Medical Device Security: An Infectious Disease - Risks and Vulnerabilities
Explore vulnerabilities in medical devices and healthcare systems, examining potential risks to patient safety and discussing strategies for improving security in the healthcare landscape.
Making SSL Warnings Work - Improving Security and User Experience
Explore strategies to improve SSL warnings in Chrome, focusing on reducing false positives and enhancing user understanding of security threats through clear design and communication.
OWASP Reverse Engineering and Code Modification Prevention Project
Explore reverse engineering risks and prevention techniques for application security experts. Learn about code integrity, data validation, and architectural principles to protect software in untrusted environments.
PiOSoned POS - A Case Study in iOS-Based Mobile Point-of-Sale Security Flaws
Explore security vulnerabilities in iOS-based mobile point-of-sale systems, including coding mistakes, platform misunderstandings, and hardware weaknesses. Learn best practices for securing mobile POS applications.
Mobile Security Attacks - A Glimpse from the Trenches
Explore emerging mobile security threats, from physical to network and application levels, with real-world attack examples and insights from experts who uncovered iOS vulnerabilities.
Blended Web and Database Attacks on Real-time, In-Memory Platforms
Explore blended web and database attacks on real-time, in-memory platforms, focusing on SAP HANA. Learn about novel exploit techniques, vulnerabilities, and security considerations for these high-performance systems.
Building Your Application Security Data Hub - The Imperative for Structured Vulnerability Information
Learn how to create an integrated application security program by breaking down silos, enabling data flow between teams and tools, and implementing metrics to measure performance and improvement.
Privacy vs Security Intricacies - Balancing Expectations and Realities
Explore the complex relationship between privacy and security, examining their definitions, societal impacts, and technological implications in the digital age.
NIST Missions and Impacts on US Industry, Economy, and Citizens - Lecture
Explore NIST's mission, impact on US industry, and cybersecurity initiatives. Learn about current programs, projects, and R&D activities in this premier scientific institution.
A Leap in Automotive Security through Unikernel-based De-aggregation
Explore unikernel-based de-aggregation for enhanced automotive security, focusing on COQOS Hypervisor, Unikraft architecture, and TEE virtualization case study.
5G Dynamic Network Slicing via Open Source Projects
Explore 5G dynamic network slicing, its business opportunities, and deployment models. Learn about orchestration, automation, and open-source projects contributing to this innovative technology.
Block Me if You Can - Subverting IMA
Explore techniques to subvert Integrity Measurement Architecture (IMA) in Linux systems, examining attack vectors, security guarantees, and potential mitigations.
SSH and the Command Line
Master SSH and essential command-line skills for efficient server management, process monitoring, and file operations in Linux environments.
Building Embedded Debian and Ubuntu Systems with ELBE
Learn to create custom embedded Debian/Ubuntu systems using ELBE. Explore system integration, build processes, image customization, package management, and efficient development techniques.
Rust-VMM: A Security Journey
Explore rust-vmm's security journey, covering components, audits, development practices, and fuzzing techniques for virtualization and Virtio components.
Building a Security Onion Virtual Machine for so-import-pcap
Learn to build a Security Onion virtual machine and use so-import-pcap to analyze network traffic. Gain hands-on experience with this powerful open-source security tool for network monitoring and threat detection.
Detecting Suspicious Activity on Linux Endpoints Using Security Onion
Learn to identify and analyze suspicious activities on Linux systems using Security Onion's powerful tools and techniques for enhanced endpoint security.
How to Build and Deploy a Custom JWT Auth System - Ktor, MongoDB, Android
Comprehensive guide to building a JWT authentication system using Ktor, MongoDB, and Android, covering backend development, app integration, and server deployment on Ubuntu.