
Innovative container security architecture using a trusted monitor to protect data confidentiality and integrity from untrusted operating systems, with minimal performance impact.

Explores a novel framework for detecting host OS kernel versions from within guest operating systems, leveraging hypervisor features and bugs to enable virtual machine extrospection.

Explore methodologies for quantifying software security risks, predicting vulnerabilities, and evaluating consumer products using the Digital Standard developed by Consumer Reports and CITL.

Explore techniques to detect and counter bootkits using BIOS emulation, low-level anti-rootkit methods, and heuristic detection logic for enhanced system security and intruder defense.

Exploring the impact of Linux Kernel Hardening Project on vulnerability reduction, exploit difficulty, and development challenges. Analyzes subtle security benefits and associated costs.

Explore kernel hardening techniques for Secure Boot, focusing on preventing privileged code execution and securing kernel entry points to maintain a trusted boot process.

Explore proactive OS defenses against CPU side channel attacks, including Intel's strategies and community input on prioritizing Linux kernel protection measures.

Explore Yocto-based distribution security, CVE management, and kernel hardening techniques using AllScenariosOS as a case study. Gain practical insights for enhancing embedded Linux security.

Explore Intel Wi-Fi chip vulnerabilities through reverse-engineering, uncovering firmware exploits and code execution risks in complex features like Wake-on-WLAN and TDLS.

Explore advanced OS security through TBOOT and Secure Boot coexistence, enhancing system protection and launch integrity for a more robust computing environment.

Unveils a novel exploitation technique surpassing Dirty Pipe, enabling arbitrary file overwriting and privilege escalation through double-free vulnerabilities, applicable across affected kernel versions.

Delve into advanced MacOS security exploitation, exploring System Integrity Protection bypass techniques, undeletable malware creation, and essential detection strategies for security teams.

Comprehensive practice session for CompTIA Security+ exam, covering social engineering, cryptography, authentication, cloud security, and device vulnerabilities with detailed explanations and strategies.

Black Hat USA 2025

Black Hat Asia 2024

Black Hat Europe 2023

Black Hat Asia 2025

Black Hat Europe 2024