Opensource SPI Flash Emulation
Explore open-source SPI flash emulation techniques with Trammell Hudson, enhancing hardware security testing and firmware development for embedded systems.
Practical and Affordable Side-Channel Attacks
Explore affordable side-channel attacks with practical demonstrations, learning techniques to exploit vulnerabilities in cryptographic implementations and secure systems.
A Practical Method of Finding Vulnerabilities in IoT Devices
Practical methodology for identifying IoT vulnerabilities and intrusion artifacts, focusing on data collection procedures to improve acquisition methods for general IoT devices.
Security Onion Essentials 2.4 - Threat Hunting
Explore threat hunting techniques in Security Onion 2.4, covering workflow essentials and practical strategies for proactive cybersecurity defense and network monitoring.
The Print Spooler Bug that Wasn't in the Print Spooler
Explore a unique Windows vulnerability discovery, from initial bug report to full exploit chain, with insights on Microsoft's patch process and security implications.
GUAC 101 - Introduction to Graph for Understanding Artifact Composition
Explore GUAC, a tool for generating software bills of materials (SBOMs) and vulnerability scanning in cloud-native environments, enhancing security and compliance.
From Theory to Practice - Navigating the Challenges of Vulnerability Research
Explore practical challenges and strategies in vulnerability research, enhancing your skills to identify and mitigate security weaknesses in software systems.
Blasting Past WebP - Exploring Image Format Vulnerabilities
Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.
AI for DevSecOps Engineers - Enhancing Security Culture and Education
Explore AI technologies to enhance security testing, analysis, and education for DevSecOps engineers. Learn to automate processes, identify threats, and improve software quality in CI/CD environments.
Modelling Threats Out in the Open Source - SOOCon23 Security
Explore open-source threat modeling techniques to enhance software security and identify potential vulnerabilities in your projects.
SoK- Quantifying Cyber Risk
Explore methodologies for quantifying cyber risk, examining naive approaches, causal models, and challenges in data interpretation. Gain insights into effective risk assessment strategies.
Symmetric Key Cryptography
Explore symmetric key cryptography, focusing on Even Monsoon tweaking, nonlinear mixing, and tight security analysis for cryptographic schemes.
Security Observability 101 - Thinking Inside the Box
Explore runtime instrumentation for software security using Java Observability Toolkit. Learn to analyze defenses, identify vulnerabilities, create sandboxes, and enforce policies for harmonious Dev, Sec, and Ops collaboration.
Securing Endpoints with Defender and Microsoft Endpoint Manager - Ask the Experts
Expert insights on enhancing endpoint security using Microsoft Defender and Endpoint Manager. Learn monitoring, analysis, vulnerability detection, and real-time compliance strategies from product managers and engineers.
Relational Observability for Cloud-Native Security and Data Science
Explore SysFlow, a runtime observability framework for cloud-native security. Learn about its telemetry format, behavioral graphs, and tools for collecting and processing data in Kubernetes environments.
Preventing Déjà Vu - Vector Similarity Search for Security Alerts, with Expel and Pinecone
Explore vector similarity search techniques to combat alert fatigue in cybersecurity, enhancing operational efficiency and decision-making for security analysts.
Game of Hacks - The Mother of All Honeypots
Explore real-time hacker adaptations to web app security measures through an interactive honeypot experiment. Learn valuable insights for strengthening enterprise applications against evolving threats.
Maximizing Security with Threat Modeling in the Cloud
Explore cloud security threat modeling techniques and lessons learned from analyzing security issues in multiple projects, focusing on proactive mitigation strategies for infrastructure flaws.
Cloud Console Cartographer: Tapping Into Mapping - Slogging Through Logging
Explore an open-source framework for deciphering cloud console logs, enhancing threat detection and incident response in cloud environments. Learn to differentiate user actions from system-generated events.
Identifying Your Web Attack Surface - RAWR
Learn to identify and assess web application vulnerabilities using the RAWR methodology, enhancing your ability to secure online systems and protect against potential threats.
KubeHound - Identifying Attack Paths in Kubernetes Clusters at Scale
Discover how to efficiently identify and analyze attack paths in Kubernetes clusters using KubeHound, focusing on scalable security assessment and threat detection techniques.