Gotham City- SSH from Zero to Trust - Lucas Calisi - Ekoparty Security Conference - 2021
Explora prácticas de seguridad SSH en DevSecOps, desde autenticación hasta Zero Trust, con enfoque en entornos Cloud y ciclo de vida de aplicaciones.
Knockin' on IPv6's Doors - Fernando Gont - Hack in Paris - 2018
Exploring IPv6 security policies and their mismatches with IPv4, revealing real-world implications for dual-stacked sites through a wide-scale evaluation project.
802.1x Network Access Control and Bypass Techniques - Valerian Legrand - Hack in Paris - 2017
Explore 802.1x network access control, its vulnerabilities, and bypass techniques. Learn why it's not a perfect solution for critical asset protection and how attackers can exploit it.
Fuzzing the Phone in the iPhone
Explore iPhone baseband security through fuzzing, revealing vulnerabilities in iOS-baseband interface. Discover unexpected effects on device identity, SMS handling, and location services.
Enter the Matrix - Install Your Own Matrix Server on Arch Linux - Arch Conf 2020
Learn to install and configure your own Matrix server on Arch Linux, joining a federated network for secure, decentralized real-time communication. Explore Synapse setup, ecosystem, and key features.
Proactive Network Security Through Vulnerability Management - Gary Miliefsky - Hack in Paris
Gain insider knowledge on network vulnerabilities, learn about CVEs, and discover proactive techniques to protect against cyber threats using free tools and heuristic systems.
What Are the Means for Cybercriminals to Bypass and Evade Your Defenses - Klaus Majewski - Hack in Paris
Explore advanced evasion techniques used by cybercriminals to bypass network security, their impact on corporate networks, and the challenges they pose to current security solutions.
Inside "MOAR TLS" - How We Think about Encouraging External - Emily Schechter - USENIX Enigma Conference - 2017
Exploring Google's "MOAR TLS" project to promote HTTPS adoption, addressing challenges, sharing strategies, and discussing the future of web security.
Security in the Wild for Low-Profile Activists - Zeynep Tufekci - USENIX Enigma Conference - 2017
Insights into digital security challenges faced by low-profile activists, exploring their unique needs, behaviors, and concerns in various global contexts.
PKI at Scale Using Short-Lived Certificates - USENIX Enigma 2016
Explore PKI deployment challenges at scale, focusing on short-lived certificates for cloud microservices. Learn about operational hurdles, scaling certificate authorities, and maintaining instance trustworthiness.
Radio Experimentation - Dispositivos Inteligentes, ¿Decisiones Inteligentes? - Luis Lubeck - Ekoparty Security Conference - 2020
Explora los riesgos de seguridad en dispositivos inteligentes, analizando su código fuente, tráfico de red y configuraciones inseguras para tomar decisiones informadas sobre su uso.
Security Vulnerabilities in DVB-C Networks - Rahul Sasi - Ekoparty Security Conference - 2014
Explore security vulnerabilities in DVB-C networks, including middleware server attacks, protocol bugs, and MPEG stream fuzzing. Learn to hijack TV streams and manipulate cable broadcasting systems.
Startup Security - Making Everyone Happy
Automating security for startups using open-source tools to integrate dependency, code, and infrastructure protection without impeding progress or increasing developer workload.
Pwning Intranet with HTML 5
Explore HTML5's potential for intranet exploitation using BeEF framework. Learn footprinting, network discovery, port scanning, and inter-protocol exploitation techniques.
Micro-services Challenges - Istio to the Rescue
Explore Istio's solutions for micro-services challenges, including traffic management, policy enforcement, and security, to enhance scalability and operational efficiency.
New Age Cloud Security - How to Build Secure Multi-Cloud Applications and Still Sleep Well
Learn to build secure multi-cloud applications with modern techniques. Explore industry trends, development phases, and essential components like TLS, DNS, user management, and data encryption for robust cloud security.
Securing a Raspberry Pi Home Monitoring System
Explore securing a Raspberry Pi home monitoring system, covering project considerations, GPIO layout, software installation, connectivity, settings, firewall, and service status.
IoT and the Security of That Mobile App - Mark Loveless
Explore IoT security vulnerabilities in mobile apps, focusing on common mistakes, attack vectors, and research techniques. Learn to identify and exploit weaknesses in device-to-cloud communication.
Demystifying the Ransomware and IoT Threat
Explore ransomware attacks, IoT-based DDoS threats, and their potential combination. Learn analysis techniques, attack stages, and future cybersecurity challenges in this comprehensive overview.
Big Data, Little Security - Practical Steps for Securing Big Data
Practical steps for securing big data installations, addressing challenges and vulnerabilities in velocity, variety, and volume. Explores security measures, authentication, and threat modeling.
Million Browser Botnet
Explore how online advertising networks can be exploited to create massive browser botnets, enabling DDoS attacks, spam campaigns, and password cracking without leaving traces. Learn about the scalability and potential risks of this attack scenario.