Custom Robust AWS Monitoring for Cents a Day Using EQL
Learn to implement cost-effective, robust AWS monitoring using EQL. Discover techniques for customizing and optimizing your cloud infrastructure security.
Event Injections - Sending Evil to the Cloud
Explore cloud security vulnerabilities and event injection attacks with expert insights on protecting serverless applications from malicious exploits.
Rethinking Privileged Access Management for Agile Clouds Data Center Environments
Explore innovative approaches to privileged access management in agile cloud and data center environments, addressing modern security challenges and evolving infrastructure needs.
Extensible DevSecOps Pipelines with Jenkins, Docker, Terraform, and a Kitchen Sink Full of Scanners
Learn to build robust DevSecOps pipelines using Jenkins, Docker, Terraform, and various scanning tools for enhanced security and efficiency in software development.
Building Castles in the Cloud - AWS Security and Self-Assessment
Learn AWS security best practices, including access management, monitoring, and self-auditing tools. Gain insights on preparing for incident response and leveraging Amazon's security services.
Zoom Zero Day - How Not to Handle a Vulnerability Report
Explore the mishandling of a Zoom vulnerability report, examining the consequences and lessons learned for improved cybersecurity practices and responsible disclosure.
Common Observations from a Security Assessor
Insights from a security assessor on common vulnerabilities, cloud security best practices, and strategies to enhance organizational cybersecurity posture.
Keeping Your Head in the Clouds But Your Feet on the Ground
Explore emerging technologies like blockchain and AI while maintaining practical cybersecurity practices. Learn to balance innovation with grounded security principles.
Offensive Python for Pentesters
Learn offensive Python techniques for penetration testing, including tools and strategies to enhance your cybersecurity skills and conduct effective security assessments.
HTTP Covert Channel Using Only HTMLCSS
Explore covert HTTP channels using HTML/CSS, including demonstrations, JavaScript functions, and Python scripts for data transmission and reception.
Practical Crypto Review for Developers
Comprehensive review of practical cryptography for developers, covering essential concepts and implementation techniques for secure software development.
Lessons Learned Implementing SDLC and How To Do It Better
Insights on implementing SDLC effectively, covering management buy-in, security awareness, threat modeling, code review, and testing for better software development practices.
I Got 99 Problems but a WAF Ain't One
Explore web application firewall (WAF) challenges and solutions in this talk by Micah Brown, covering common issues and effective strategies for implementation and management.
Code Hedgehogs - Changing the S in SDLC to Secure
Explore secure software development through a gamified approach, learning about vulnerabilities, threat modeling, and building secure coding skills with a unique hedgehog-themed perspective.
Chats, Cheats and Cracks - Abuse of Collaboration Platforms in Malware Campaigns
Explores abuse of collaboration platforms like Discord and Slack in malware campaigns, covering distribution methods, command and control, and protective measures.
Engineering Code Obfuscation
Explore techniques for engineering code obfuscation to protect software from reverse engineering and tampering. Learn strategies to enhance program security and intellectual property protection.
Differential Computation Analysis - Hiding Your White Box Designs Is Not Enough
Explore differential computation analysis for white-box cryptography, covering attack models, implementations, code lifting, and visualization techniques to enhance security measures.
Software Implementation of Koblitz Curves Over Quadratic Fields
Explore efficient software implementation of Koblitz curves over quadratic fields, covering storage techniques and interleaving for enhanced performance.
Patchable Indistinguishability Obfuscation iO for Evolving Software
Explore indistinguishability obfuscation for evolving software, focusing on patchable techniques, multi-program applications, and cryptographic implications in this advanced cryptography presentation.
How Fast Can Higher Order Masking Be in Software
Explore efficient higher-order masking techniques in software implementations for enhanced cryptographic security against side-channel attacks.
Conditional Disclosure of Secrets - Amplification, Closure, Amortization, Lower Bounds, and Separation
Explore advanced cryptography concepts like conditional disclosure, amplification, and amortization. Delve into lower bounds, separation, and privacy errors in this theoretical research presentation.