Secure DNS Solutions
Explore DNS security vulnerabilities and recent IETF standards addressing these issues. Learn about potential attacks and solutions to protect this critical Internet infrastructure.
Security Issues with Configuring and Maintaining an IIS 4 Server
Explore critical security considerations for configuring and maintaining IIS 4 servers, essential for IT professionals and system administrators.
Hacking Appliances - Ironic Exploitation of Security Products
Explore common vulnerabilities in security appliances and learn about attack vectors that external hackers can exploit to gain control over gateways, firewalls, and other network solutions.
DropSmack - How Cloud Sync Services Render Your Corporate Firewall Worthless
Explore cloud sync services' security risks, including malware delivery, command and control channels, and data exfiltration. Learn detection strategies and see live demonstrations of potential vulnerabilities.
Preventing Child Neglect in DNSSEC-bis Using Lookaside Validation
Explore DNSSEC-bis and Lookaside Validation techniques to enhance DNS security and prevent child neglect in domain name systems.
The Myth of Twelve More Bytes - Security on Post-Scarcity Internet
Exploring security implications of IPv6, DNSSEC, and new top-level domains on enterprise IT, fraud prevention, and network defense in the evolving Internet landscape.
Scaling Up Baseband Attacks - More Unexpected Attack Surface
Exploring unexpected attack vectors in baseband processors, revealing vulnerabilities in cellular network communication and GPS systems that can be exploited remotely over IP connections.
Smashing the Future for Fun and Profit
Visionary security experts discuss emerging threats, technological shifts, and societal impacts on cybersecurity over the next 15 years, offering insights into future challenges and opportunities in the field.
Probing Mobile Operator Networks
Explore techniques for probing cellular networks, uncovering diverse connected devices, and discussing security implications of findings from network investigations.
Hookin Ain't Easy - BeEF Injection with MITM
Explore browser exploitation techniques using MITM attacks and the BeEF Framework. Learn to hook browsers without social engineering or XSS, and maintain connections for advanced penetration testing.
Mission mPOSsible
Explore vulnerabilities in mobile payment systems, including code execution through various input vectors. Live demonstrations showcase attack methods, emphasizing security weaknesses in current mPOS solutions.
Exploiting DNS Servers Changes
Explore techniques for exploiting DNS server vulnerabilities and recent changes, focusing on offensive security strategies and potential attack vectors.
Abusing the Internet of Things - Blackouts, Freakouts, and Stakeouts
Explore IoT vulnerabilities in smart devices like Hue lights, baby monitors, and Tesla cars. Learn about potential security risks and future malware threats in connected technologies.
Scan All the Things - Project Sonar
Explore Project Sonar's large-scale internet scanning techniques for security research, vulnerability detection, and network analysis. Learn about data collection, processing, and practical applications.
Keynote by Dr. Steve Crocker
Dr. Steve Crocker explores Internet history, security challenges, and governance issues. He discusses early developments, current security technologies, and policy concerns, concluding with a challenge to the cybersecurity community.
Spy-Jacking the Booters
Exposé on "booter" DDoS-for-hire services: their operations, vulnerabilities, and impact. Insights into defending against attacks and the criminal ecosystem behind these illicit services.
Fully Arbitrary 802.3 Packet Injection - Maximizing the Ethernet Attack Surface
Explore novel Ethernet attack techniques using affordable hardware and custom firmware. Learn about frame manipulations, SFD parsing anomalies, and Ethernet Packet-In-Packet injection for enhanced network security testing.
Lessons from Surviving a 300Gbps Denial of Service Attack
Insights from a record-breaking DDoS attack: strategies, vulnerabilities, and defensive measures for safeguarding networks against evolving cyber threats.
New Trends in FastFlux Networks
Explores new trends in fast-flux networks, including slower change rates, shared resources, multi-level structures, and similarities with benign applications. Proposes novel detection approaches based on these findings.
Routing in the Dark - Scalable Searches in Dark P2P Networks
Explore scalable search techniques in dark peer-to-peer networks, focusing on navigable small world networks and practical applications for secure, decentralized communication.
Blended Threats and JavaScript - A Plan for Permanent Network Compromise
Explore advanced browser-based attacks using JavaScript and HTML5, focusing on exploiting network devices and achieving persistent compromise of intranet systems.