What Do Infosec Practitioners Actually Do
Explore the daily realities of information security professionals, debunking myths and highlighting key skills like writing, problem-solving, and effective communication in various cybersecurity roles.
What Is a Security Analyst and What Job Role Will They Perform
Explore the role of a security analyst, their responsibilities, and key cybersecurity concepts. Learn about attack chains, compliance, and the security investigation process.
ICS SCADA Defense
Explore ICS SCADA defense strategies, including vulnerability mitigation, robust configurations, network segmentation, and employee awareness. Learn practical tips for securing critical infrastructure systems.
Practical Foxhunting
Learn practical foxhunting techniques, from antenna types to signal displays and strategies. Gain hands-on skills for wireless signal tracking in this comprehensive guide from Defcon Wireless Village.
OpenAppID Open Source Next Gen Firewall with Snort - Adam Hogan
Learn about OpenAppID, an open-source next-generation firewall technology using Snort. Explore application control, custom detectors, and file inspection in network security.
Deploying PAWs as Part of a Strategy to Limit Credential Theft and Lateral Movement
Explore strategies to limit credential theft and lateral movement using Privileged Access Workstations (PAWs), including deployment models, Active Directory setup, and network segmentation.
Of Data Dropboxes and Data Gloveboxes
Exploring data security through nuclear isolation techniques, this talk presents innovative approaches to protect sensitive information and ensure controlled data manipulation in modern data science.
Are DDoS Attacks a Threat to the Decentralised Internet?
Explore DDoS attacks, IP spoofing, and mitigation techniques with CloudFlare's expert. Learn about L3 attacks, tracing methods, and potential solutions for a safer decentralized internet.
The Eight Fallacies of Distributed Computing
Explore eight common misconceptions in distributed computing, their implications, and real-world examples to help developers design more robust and scalable server architectures.
OAuth 2.1 and Beyond
Explore modern OAuth techniques for enhanced security, including strong client authentication, proof-of-possession tokens, and hardened authorization requests.
Deep Learning for Realtime Malware Detection
Explore an ensemble deep learning model for real-time malware detection, combining CNN, LSTM, and NLP techniques to analyze domain names and identify potential threats with high accuracy.
CertGraph - A Tool to Crawl the Graph of SSL Certificate Alternate Names Using Certificate Transparency
Explore SSL certificate security, Certificate Transparency, and CertGraph tool for domain enumeration. Learn to protect your organization and uncover hidden information in SSL certificates.
Hyperscan - A Fast Multi-pattern Regex Matcher for Modern CPUs
Efficient regular expression matching for network security using graph decomposition and SIMD acceleration, improving performance of applications like Snort by 8.7x on real traffic.
Spectrum - High-bandwidth Anonymous Broadcast
High-bandwidth anonymous file broadcasting system optimizing for few broadcasters and many subscribers. Offers improved throughput, malicious client prevention, and broadcaster deanonymization protection.
Demystifying IMSI Catchers
Uncover the mysteries of IMSI catchers, their functionality, detection methods, and legal implications. Gain insights into cellular network fundamentals and cutting-edge research on unauthorized cell sites.
ICARUS - Attacking Low Earth Orbit Satellite Networks
Explores vulnerabilities in low Earth orbit satellite networks, introducing ICARUS attacks that exploit global accessibility, low-latency constraints, and network predictability to disrupt communications over large areas.
Addra - Metadata-Private Voice Communication Over Fully Untrusted Infrastructure
Innovative system for metadata-private voice communication, scaling to 32K users with low latency. Utilizes untrusted infrastructure and novel mailbox assignment, improving on existing solutions for secure communication.
5G Protocol Vulnerabilities and Exploits
Explore 5G protocol vulnerabilities and exploits, analyzing real traffic captures to uncover potential security issues in pre-authentication messages and discuss implications for mobile network security.
IPv666 - Address of the Beast
Explore IPv6 security implications, including enumeration techniques, statistical models for host discovery, and honeypotting methods. Learn about IPv6 exposure compared to IPv4 and access open-source scanning software.
Counter-RAPTOR - Safeguarding Tor Against Active Routing Attacks
Explore techniques to protect Tor against active routing attacks, including a new guard relay selection algorithm and a real-time BGP monitoring system for detecting routing anomalies.
An Extensive Formal Security Analysis of the OpenID Financial Grade API
Comprehensive formal security analysis of OpenID Financial-grade API, uncovering vulnerabilities and proposing mitigations for this high-stakes OAuth 2.0 profile designed for Open Banking scenarios.