Beyond the MCSE - Active Directory for the Security Professional
Comprehensive exploration of Active Directory's critical components, security features, and vulnerabilities, empowering security professionals to better defend enterprise resources against sophisticated attacks.
Nonce-Disrespecting Adversaries - Practical Forgery Attacks on GCM in TLS
Explore nonce-reuse vulnerabilities in GCM encryption for TLS, including Internet-wide scans, proof-of-concept attacks, and implications for HTTPS security.
Drone Attacks on Industrial Wireless - A New Front in Cyber Security
Explore emerging drone threats to industrial wireless systems, electronic warfare concepts, and defensive strategies for protecting critical infrastructure from cyber-physical attacks.
CANSPY - A Platform for Auditing CAN Devices
Explore CANSPY, a platform for auditing CAN devices in vehicles. Learn to intercept, modify, and analyze CAN frames for security testing of automotive systems and connected devices.
Dark Side of the DNS Force
Explore the evolution of DNS-based attacks, including random subdomain techniques, and learn about detection and mitigation strategies for protecting against these sophisticated cyber threats.
Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
Uncovers critical security flaws in Apple's ZeroConf frameworks, demonstrating vulnerabilities in Multipeer Connectivity, Bonjour, and services like AirDrop, allowing impersonation and man-in-the-middle attacks.
An AI Approach to Malware Similarity Analysis - Mapping the Malware Genome With a Deep Neural Network
Explore AI-driven malware similarity analysis using deep neural networks for improved accuracy and adaptability in threat detection and classification.
Using an Expanded Cyber Kill Chain Model to Increase Attack Resiliency
Explore an expanded Cyber Kill Chain model to enhance attack resiliency. Learn about internal and target manipulation kill chains, and implement controls to frustrate adversaries at each stage.
PLC-Blaster - A Worm Living Solely in the PLC
Demonstration of a self-contained worm targeting Siemens Simatic S7-1200 PLCs, showcasing its ability to scan, compromise, and remotely control devices without external support, while evading detection and analysis.
Recover a RSA Private Key From a TLS Session With Perfect Forward Secrecy
Explore RSA private key recovery from TLS sessions with Perfect Forward Secrecy, focusing on faulty digital signatures and hardware vulnerabilities in network devices.
Cyber War in Perspective - Analysis From the Crisis in Ukraine
Explore the reality of cyber warfare through the lens of the Russia-Ukraine conflict. Gain insights into the strategic impacts, limitations, and implications of digital operations in modern geopolitical crises.
Secure Penetration Testing Operations - Demonstrated Weaknesses in Learning Material and Tools
Explores vulnerabilities in penetration testing practices, demonstrating weaknesses in learning materials and tools. Provides guidance on securing testing procedures and includes a live demonstration of hijacking techniques.
Unleash the Infection Monkey - A Modern Alternative to Pen-Tests
Explore a new open-source tool for testing network security resilience. Learn how the Infection Monkey simulates attacks, uncovers vulnerabilities, and provides a cost-effective alternative to traditional penetration testing methods.
RHINE - Robust and High-performance Internet Naming with E2E Authenticity
Explores RHINE, a secure Internet naming system offering end-to-end authentication, robust trust model, and improved performance over DNSSEC. Addresses DNS vulnerabilities with novel approaches.
A Tale of Building a Real Full Speed Anti-Censorship Router
Comprehensive guide to building a high-speed anti-censorship router, covering GFW history, bypass methods, protocols, deployment strategies, and practical implementation for unrestricted internet access.
SOHO Hacking at Pwn2Own
Exploring vulnerabilities in home routers and small business devices, detailing methodologies for finding and exploiting security flaws, and demonstrating real-world attack scenarios in SOHO networks.
Disrupting Malicious Traffic with Egress Proxies
Learn to detect and disrupt malicious network traffic using egress proxies. Discover techniques to ensure trusted outbound connections and protect against external threats and data exfiltration.
StarryNet - Empowering Researchers to Evaluate Futuristic Integrated Space and Terrestrial Networks
Explore futuristic integrated space-terrestrial networks with StarryNet, a framework enabling realistic and flexible experiments to evaluate global satellite dynamics and network behaviors.
CellDAM - User-Space, Rootless Detection and Mitigation for 5G Data Plane
Innovative solution for detecting and mitigating data plane attacks in 5G networks without infrastructure changes. Utilizes state-dependent model checking to verify data signaling correctness at the device level.
LOCA - A Location-Oblivious Cellular Architecture
Innovative cellular architecture design protecting user location privacy while maintaining identity-based services. Explores MVNO-based systems, offering provable privacy guarantees and scalability for real-world deployment.
Network Access Control - The Company-Wide Team Building Exercise That Only You Know About
Learn to implement Network Access Control effectively, involving various teams and overcoming challenges. Gain insights on recruiting allies, achieving quick wins, and troubleshooting common issues.