Misbehaving Networks
Explore network misbehavior and its impact on security with insights from Daniel Gregory's analysis of real-world scenarios and potential mitigation strategies.
Why is the Internet Still Working
Explore TCP/IP, IPv6, routing, and internet architecture. Learn about BGP, ISPs, and internet exchanges to understand how the global network remains functional.
Everything Is Not Awesome - How to Overcome Barriers to Proper Network Segmentation
Overcome network segmentation challenges with strategies for effective implementation, barrier identification, and communication to enhance cybersecurity and organizational resilience.
Why the NTP Security Problem Is Worse than You Think
Explore NTP security vulnerabilities, their historical context, and real-world impacts on systems like Snapchat and Linux routers in this eye-opening talk.
Server Tailgating - A Chosen-Plaintext Attack on RDP
Uncover a chosen-plaintext attack on Windows authentication, exploiting a vulnerability in common protocols. Learn about the attack's mechanics, implications for network security, and mitigation strategies.
3G - 4G Intranet Scanning and Its Application on the WormHole Vulnerability
Explore large-scale 3G/4G intranet scanning techniques and their application in detecting the WormHole vulnerability across millions of mobile devices in China's major ISPs.
Free-Fall - Hacking Tesla from Wireless to CAN Bus
Detailed exploration of Tesla's security vulnerabilities, from wireless attacks to CAN bus access, including Tesla's response and new mitigation strategies.
Badger - The Networked Security State Estimation Toolkit
Toolkit for estimating network security state using CPTL framework. Imports monitoring data, provides configurable scoring, and offers graphical view of security elements.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.
802.1x and Beyond
Dissecting IEEE 802.1x and related protocols, exploring vulnerabilities in popular systems, and demonstrating remote code execution over 802.11 wireless using WPA Enterprise.
Leviathan - Command and Control Communications on Planet Earth
Explore global malicious command and control infrastructure, its impact on cybersecurity, and techniques used by hackers to hide communications within web traffic.
VoIP Wars - Attack of the Cisco Phones
Explore vulnerabilities in Cisco hosted VoIP systems, including signaling attacks, authentication bypasses, and client compromises. Learn practical penetration testing techniques using the Viproy toolkit.
Multipath TCP - Breaking Today's Networks with Tomorrow's Protocols
Explore how MultiPath TCP challenges network security by enabling multiple endpoints and paths, changing addresses mid-connection, and evading controls. Learn tools and strategies for risk mitigation.
Catching Malware En Masse - DNS and IP Style
Innovative strategies to detect and mitigate malware at DNS and IP levels, including botnet tracking, AS graph analysis, and IP range investigation. Includes a 3D visualization engine for effective threat intelligence.
What Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels
Explore techniques for exploiting vulnerabilities in botnet command and control panels, including detection methods, reverse attacks, and automated tools for gathering intelligence.
The New Scourge of Ransomware - A Study of CryptoLocker and Its Friends
Explore the evolution of ransomware, focusing on CryptoLocker and its impact. Learn about threat intelligence responses, infrastructure tracking, and lessons for managing emerging cyber threats.
Hacking the Wireless World with Software Defined Radio - 2.0
Explore wireless hacking using software-defined radio. Learn to analyze, reverse engineer, and exploit RF signals in various systems, from pagers to satellites, using open-source tools and affordable hardware.
The Devil Does Not Exist - The Role of Deception in Cyber
Explore deception in cybersecurity: how attackers deceive, how to recognize it, and how defenders can use deception against attackers. Learn from traditional and emerging research on deception and game theories.
Learn How to Control Every Room at a Luxury Hotel Remotely
Descubre cómo controlar remotamente todos los dispositivos de un hotel de lujo, explorando vulnerabilidades en sistemas de automatización y sus implicaciones para la seguridad hotelera y de los huéspedes.
Probabilistic Spying on Encrypted Tunnels
Explore probabilistic algorithms for analyzing encrypted network tunnels, identifying application protocols, and extracting side channel information to determine content types and usage patterns.
Control-Alt-Hack - White Hat Hacking for Fun & Profit
Explore ethical hacking through a card game that simulates security audits and consulting. Learn about diverse hacking skills, mission challenges, and cybersecurity concepts in an engaging, entertaining format.