Attacks on Wireless Coexistence
Explore wireless coexistence vulnerabilities, enhanced interfaces, and RAM sharing in this technical presentation on potential attacks and security implications for wireless systems.
K-Fingerprinting - A Robust Scalable Website Fingerprinting Technique
Explores k-fingerprinting, a robust website fingerprinting technique using random decision forests, demonstrating high accuracy in identifying visited web pages through encrypted connections.
Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms
Exploring security vulnerabilities in smart home platforms through reverse engineering and phantom device testing, revealing unexpected state transitions and potential attacks.
Anatomy of a DDoS
Explore DDoS attacks: structure, evolution, and countermeasures. Learn about botnet creation, recent high-profile incidents, and ongoing efforts to combat this cybersecurity threat.
Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities
Innovative TLS vulnerability scanning methodology reveals widespread CBC padding oracle vulnerabilities, challenging assumptions about their exploitability and highlighting significant security risks in web infrastructure.
Zanzibar - Google’s Consistent, Global Authorization System
Explore Google's Zanzibar, a global authorization system for storing and evaluating access control lists, offering scalability, consistency, and high performance across various services.
BASTION - A Security Enforcement Network Stack for Container Networks
Innovative security enforcement network stack for containers, enhancing visibility and isolation while improving performance. Mitigates attacks and optimizes inter-container communication.
Achieving Mutual TLS - Secure Pod-to-Pod Communication Without the Hassle
Explore secure pod-to-pod communication using Mutual TLS, focusing on certificate management, implementation in Golang and Java applications, and integration with Kubernetes for streamlined security.
The Remote Working Security Conundrum - What Is Reasonably Secure Anyway?
Explore challenges and solutions for securing remote work environments, from physical security to application layer, with focus on novel technologies and practical approaches.
Attacks From a New Front Door in 4G & 5G Mobile Networks
Unveils critical API vulnerabilities in 4G/5G networks, exposing risks for AI, MEC, and IoT applications. Explores attack vectors, security misconfigurations, and potential exploits in commercial providers' systems.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover critical Azure Cosmos DB vulnerability allowing unauthorized admin access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
BadMesher - New Attack Surfaces of Wi-Fi Mesh Network
Explore new attack surfaces in Wi-Fi Mesh networks, focusing on EasyMesh vulnerabilities. Learn about network build and control attacks, and discover MeshFuzzer for identifying security flaws.
5G IMSI Catchers Mirage
Investigates 5G security mechanisms against IMSI catchers, exploring vulnerabilities and protection techniques through practical experiments with commercial devices.
FragAttacks - Breaking Wi-Fi through Fragmentation and Aggregation
Explore Wi-Fi vulnerabilities, including design and implementation flaws, and learn how attackers can exploit them for packet injection and data exfiltration in networks.
Timeless Timing Attacks
Explore novel timing attacks resilient to network jitter, uncovering vulnerabilities in cryptosystems and applications. Learn about cross-site and Wi-Fi password brute-forcing techniques.
The Weakest Element of Acquiring Bank Infrastructure
Exploring vulnerabilities in Terminal Management Systems for card payments, revealing potential security risks in acquiring bank infrastructure and POS terminals.
LoRaWAN Auditing
Comprehensive guide to LoRaWAN security auditing, covering vulnerabilities, testing methods, and new tools. Provides practical insights for securing IoT deployments in smart cities and industries.
NTLM Relay Is Dead, Long Live NTLM Relay
Explore NTLM relay attacks, their evolution, and modern exploitation techniques. Learn about vulnerabilities in Windows protocols and browsers, with insights on defense strategies.
IPv666 - Address of the Beast
Explore IPv6 security implications, addressing schemes, and potential vulnerabilities. Learn about honeypot servers, machine learning applications, and techniques for identifying aliased networks in IPv6 environments.
Exploiting Automation in LTE Mobile Networks
Exploración de vulnerabilidades en la automatización de redes LTE, demostrando métodos de ataque y discutiendo contramedidas para operadores y usuarios finales.
Cognitive Automation With Machine Learning In Cybersecurity
Explore cognitive automation and machine learning in cybersecurity, covering risk analytics, threat detection, and incident management. Learn how ML enhances fraud detection and security operations.