Better SSH Management with Ephemeral Keys
Explore Netflix's Bless and Lyft's Blessclient for improved SSH security and user-managed keys, enhancing infrastructure protection and empowering engineers.
Witchcraft Compiler Collection - Towards Programs Self Awareness
Innovative reverse engineering approach: undoing linker work to produce relocatable files, enabling binary reflection, scripting, and automated API prototyping for enhanced code analysis and exploitation.
Opinionless Enforcement of Opinions on Operational Secrets
Explore a data-driven approach to managing operational secrets using Vault, addressing challenges in secret provisioning and extraction for UNIXish applications.
Dormant DOMination
Exploring JavaScript-based network scanning techniques to discover attack surfaces across different networks, including air-gapped systems, through dormant browser objects and existing web technologies.
AtomBombing - Injecting Code Using Windows’ Atoms
Explore AtomBombing, a stealthy code injection technique exploiting Windows atom tables and Async Procedure Calls, affecting all Windows versions and evading common security solutions.
Should I Pay or Should I Go? Game Theory and Ransomware
Explore game theory concepts applied to ransomware decision-making, analyzing incentives, payoffs, and rational choices to understand the complexities of cybersecurity responses.
Look Ma, No Hands! - Decentralizing Security for Scale
Explore decentralizing security operations for scalability, empowering developers with tools and practices to integrate security seamlessly into their workflow.
Securing Kubernetes
Explore Kubernetes security, covering authentication, authorization, and integration with Hashicorp Vault's PKI backend for enhanced transport security and access control.
Does DoD Level Security Work in the Real World?
Explore DoD-level security principles for private sector implementation, addressing common misconceptions and emphasizing foundational data protection concepts for effective cybersecurity strategies.
Access Control with Concierge - One Tool to Rule Them All
Discover Concierge, a comprehensive solution for managing access to multiple SaaS services and internal tools, streamlining onboarding, offboarding, and role changes for IT operations teams.
Keynote - A Declaration of the Independence of Cyberspace
John Perry Barlow reads his influential manifesto and engages in Q&A about digital rights, internet freedom, and the founding of the Electronic Frontier Foundation.
Who's Breaking into Your Garden? - iOS & OS X Malware You May Not Know
Comprehensive analysis of recent iOS and OS X malware, exploring attack techniques, characteristics, and trends. Insights for enhancing security measures against emerging threats on Apple platforms.
Understanding Human Behavior to Improve InfoSec
Explore how behavioral economics insights can enhance information security practices by understanding human decision-making patterns and cognitive biases in organizational contexts.
Abusing Security Products to Bypass Windows Protections
Unveiling critical vulnerabilities in security products that allow bypassing Windows protections. Explores impact, solutions, and provides a validation tool for system security.
Planning Effective Red Team Exercises
Learn best practices for planning and executing effective red team exercises, including scenario design, objective setting, and rules of engagement to simulate real adversaries and provide maximum value to clients.
Case Study in Using Bad Malware Design Against Attackers
Explore how poor design choices in malware can be exploited by defenders, featuring case studies like AlienSpy/JSocket. Learn strategies to disable malware globally by leveraging vulnerabilities in their implementation.
APT Reports and OPSEC Evolution
Explore how advanced threat actors adapt to security innovations and APT reports, and discover strategies for improving cybersecurity defenses.
IoT on Easy Mode - Reversing Embedded Devices
Discover the ease of embedded device hacking in IoT, exploring techniques beyond x86/x64 architectures. Learn essential tools and justifications for specialized equipment in this insightful security talk.
Sharing is Caring - Understanding & Measuring TI Sharing Effectiveness
Explore threat intelligence sharing effectiveness through data analysis, open-source projects, and proposed metrics for improving sharing communities and platforms.
The Ransomware Threat - Tracking the Digital Footprints
Explore ransomware's evolution, prevention strategies, and digital footprint tracking techniques to enhance cybersecurity and protect businesses from evolving threats.
Mobile App Corporate Espionage
Explore real-world corporate espionage techniques using hidden behaviors in mobile apps, focusing on data risk threats and out-of-band communications for leaking sensitive information.