SSL Future Authenticity
Exploring SSL's history, current authenticity issues, recent infrastructure attacks, and potential solutions, with a focus on fixing trust relationships in this fundamental protocol.
Floating Car Data from Smartphones
Exploring smartphone-based traffic data: privacy implications, location tracking, and potential vulnerabilities in navigation systems. Presents a protocol to enhance security and protect user privacy.
Harnessing GPUs - Building Better Browser Based Botnets
Explore browser-based botnets using GPUs for powerful computations. Learn about XSS, HTML5, and WebGL techniques to create efficient, cross-platform botnets capable of breaking strong encryption and impacting cybersecurity.
Web Application Brute Forcing 101
Learn techniques for web application brute forcing, exploring vulnerabilities and security measures to protect against unauthorized access attempts.
Security Aspects in Java Bytecode Engineering
Explore security vulnerabilities in Java bytecode and learn techniques for bytecode engineering to enhance application security.
With BIGDATA Comes BIG Responsibility - Practical Exploiting of MDX Injections
Explore OLAP technology vulnerabilities in Business Intelligence systems, focusing on MDX-related attacks, code injection, and data retrieval vectors. Learn practical exploitation techniques for critical corporate data.
How to Grow a TREE from CBASS
Innovative binary analysis toolset for cross-platform programs. Integrates with IDA Pro, enabling interactive visualization and on-demand analysis for efficient reverse engineering and vulnerability detection.
BlackBerryOS 10 from a Security Perspective
Comprehensive analysis of BlackBerryOS 10's security architecture, exploring attack surfaces, privilege escalation, remote entry points, rootkit persistence, and the effectiveness of BlackBerry Balance.
Using Online Activity as Digital Fingerprints to Create a Better Spear Phisher
Explore data mining and NLP techniques to profile online activity, creating digital fingerprints for enhanced social engineering. Learn to analyze user interactions, vocabulary, and communication patterns.
CMX - IEEE Clean File Metadata Exchange
Explore IEEE's CMX system for efficient software whitelisting, reducing false positives in security through metadata exchange without copyright concerns.
Javascript Static Security Analysis Made Easy with JSPrime
Explore JSPrime, a user-friendly tool for JavaScript static security analysis. Learn about its features, including library-aware scanning, variable tracing, and minimal false positives, to enhance your code security.
Burglar Alarms and Booby Traps
Discover innovative network defense strategies using insider knowledge. Learn fun tricks to build effective intrusion detection systems for networks, websites, and firewalls.
Dude, Where's My Laptop?
Analysis of laptop and mobile device security solutions, exploring their effectiveness against theft and data protection claims. Reveals vulnerabilities and challenges common anti-theft measures.
Announcing OWASP Guide to Securing Web Applications & Services 2.0
Comprehensive guide to securing web applications and services, covering best practices, vulnerabilities, and mitigation strategies for developers and security professionals.
Advanced SQL Injection in Oracle Databases
Explore advanced SQL injection techniques in Oracle databases, focusing on vulnerabilities, exploitation methods, and defensive strategies for database security professionals.
ModSecurity as Universal Cross-Platform Web Protection Tool
Explore ModSecurity's evolution into a cross-platform WAF, its early attack detection capabilities, and its use of OWASP Core Rule Set for protecting Apache, IIS, and nginx servers.
Hacking with WebSockets
Explore WebSocket vulnerabilities, privacy implications, and security risks. Learn to deploy WebSockets securely and use them in hacking frameworks. Gain insights into HTML5 security challenges.
HTML5 Top 10 Threats - Stealth Attacks & Silent Exploits
Explores top 10 HTML5 security threats, including CORS attacks, clickjacking, XSS, web storage vulnerabilities, and more. Demonstrates real-life examples and discusses defense strategies against emerging attack vectors.
The Info Leak Era on Software Exploitation
Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.
When Security Gets in the Way - Pen Testing Apps That Use Certificate Pinning
Explore tools and techniques for defeating certificate pinning in mobile apps during black-box testing, enabling interception of SSL traffic on both iOS and Android platforms.
Smashing the Future for Fun and Profit
Visionary security experts discuss emerging threats, technological shifts, and societal impacts on cybersecurity over the next 15 years, offering insights into future challenges and opportunities in the field.