Federated Login CSRF
Explore federated login CSRF vulnerabilities in OpenID Connect and OAuth 2.0, examining attack scenarios, risks, and mitigation strategies for secure identity linking in web applications.
Rapid Risk Assessment
Learn rapid risk assessment techniques for effective cybersecurity governance. Explore risk definitions, analysis methods, and real-world case studies to enhance your organization's security posture.
Lluvia de riesgos y amenazas ▪ Paola Rodrigues & Janice Ricco ▪ Ekoparty 2021: BlueSpace
Exploración de componentes y enfoques de análisis de riesgos en seguridad informática desde la perspectiva de Mercado Libre, presentada por dos líderes de equipo.
Keynote - Historical Lessons for Improving Cyber Security
Historical lessons for improving cybersecurity: outsiders' role in cryptography advances, attention to seemingly foolish ideas, and applying risk analysis from nuclear deterrence to cryptography.
The Cost of Fairness in Binary Classification
Explore the cost of fairness in binary classification, analyzing risk, optimal classifiers, and fairness frontiers with implications for stereotypes and decision-making.
Designing Effective Security UX - If It’s Not Usable, It’s Not Secure
Explore user-centric approaches to security design, balancing usability and protection. Learn key strategies for creating intuitive, effective security systems that empower users to control their data.
Cultivating Production Excellence
Explore practices for managing complex distributed systems, including collaborative observability, Service Level Objectives, and risk analysis to enhance production excellence.
Securing Cyber-Physical Systems - Moving Beyond Fear
Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.
I'm Not a Human - Breaking the Google reCAPTCHA
Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.
Detection At Scale
Explore strategies for implementing large-scale threat detection systems, focusing on efficiency, scalability, and effectiveness in modern cybersecurity environments.
What Finance Can Learn From Dating Sites
Explore how finance can leverage data-driven techniques from dating sites for improved matching, risk analysis, and fraud detection using graph databases and sophisticated algorithms.
Pre-empting Attacks - Relevance of Red Teaming in Enterprises
Explore the critical role of red teaming in enterprise security, focusing on proactive strategies to anticipate and prevent potential attacks through expert insights and practical approaches.
Privacy and Security in the Genomic Era
Explore privacy and security challenges in genomics with experts Erman Ayday and Jean-Pierre Hubaux, addressing crucial issues in the era of widespread genetic data use and sharing.
Meaningful Measurement - It’s About Time We Got This Right
Explores flaws in current cybercrime metrics, advocating for standardized, business-focused measurements to improve threat intelligence and risk analysis across all enterprise sizes.
How Bad Is It Really? Nuclear Technology - Facts and Feelings
Physicist Sunniva Rose challenges media misconceptions about nuclear energy, presenting facts and addressing concerns to provide a balanced perspective on its risks and potential benefits.
How CVSS is DOSsing Your Patching Policy - and Wasting Your Money
Explore the effectiveness of CVSS as a vulnerability risk metric, analyzing its impact on patching policies and resource allocation through real-world attack data and statistical analysis.
Threats from Organized Crime & Terrorists
Explore potential cybersecurity threats from organized crime and terrorist groups, examining their tactics and implications for global security.
The Law of 'Sploits
Explore legal implications of vulnerability research and disclosure, examining ethical hacking, reverse engineering, and intellectual property rights in cybersecurity.
Cultivating Production Excellence
Explore strategies for taming complex distributed systems through collaborative practices, observability, service level objectives, and risk analysis to achieve production excellence.
What Healthcare Can Learn from the Banking Industry
Exploring how healthcare can enhance security by adopting banking industry practices, covering wireless security, authentication, log management, and risk assessment.
Cultivating Production Excellence
Explore practices for production excellence: stakeholder involvement, observability collaboration, Service Level Objectives, and risk-based improvement prioritization in complex distributed systems.