The Cavalry Isn't Coming - Starting The Revolution To Fsck It All
Explore cybersecurity challenges and solutions in this thought-provoking talk on initiating change, fostering innovation, and addressing critical issues in the digital landscape.
Calling All Researchers - A Discussion on Building a Security Research Framework
Explore strategies for developing a robust security research framework, enhancing methodologies and fostering collaboration within the cybersecurity community.
Securing the Internet of Things - IoT Through Security Research and Vulnerability Analysis
Explore IoT security through research and vulnerability analysis, covering topics like medical devices, telepresence robots, and smart home systems. Learn testing methodologies and hacking techniques.
Researching Android Device Security with the Help of a Droid Army
Explore Android device security using a diverse cluster to tackle fragmentation, enhance auditing, and improve exploit development techniques.
BinaryPig - Scalable Malware Analytics in Hadoop
Scalable malware analytics framework using Hadoop for processing large volumes of malware samples. Enables efficient feature extraction, machine learning, and data exploration for security researchers.
What's on the Wire? Physical Layer Tapping with Project Daisho
Explore physical layer tapping for network security research with Project Daisho, an open-source tool for monitoring and modifying wired protocols like Ethernet, HDMI, and USB 3.0.
CVE Behind the Scenes - The Complexity of Being Simple
Explore the intricacies of vulnerability classification and management in cybersecurity, focusing on the Common Vulnerabilities and Exposures (CVE) system and its impact on enterprise security.
Advanced Heap Manipulation in Windows 8
Explore advanced heap manipulation techniques in Windows 8, focusing on deterministic heap state prediction, overcoming exploit mitigations, and crafting reliable exploits for kernel pool and user heap vulnerabilities.
Uncursing the ncurses
Explore memory corruption vulnerabilities in ncurses, their impact on system security, and the journey of discovery from environment variable to potential privilege escalation.
Ask the EFF
Explore digital civil liberties with EFF experts, covering surveillance, intellectual property, privacy, and security research. Gain insights on law and technology issues through Q&A.
Lessons Learned from Building and Running MHN, the World's Largest Crowd-sourced Honeynet
Explore insights from building the world's largest crowdsourced honeynet. Learn about deploying diverse honeypots globally, analyzing security data, and creating a distributed sensor network for tracking threats.
Security Training and Research Cloud - STRC
Explore the Security Training And Research Cloud (STRC) for advanced cybersecurity learning and experimentation in a controlled environment.
Bypassing Control Flow Guard in Windows 10
Explore advanced Windows 10 security bypassing techniques, focusing on Control Flow Guard. Learn about memory corruption, relaxed control flow, and innovative bypass methods.
Bootstrapping a Security Research Project
Learn to bootstrap security research projects, from defining questions to presenting findings, with practical tips on equipment, workflows, and responsible disclosure.
My Cousin Viinny - Ethics and Experience in Security Research
Explore ethical considerations and real-world experiences in security research, drawing insights from the film "My Cousin Vinny" to illustrate key concepts and challenges.
Bootstrapping a Security Research Project
Learn to bootstrap a security research project, from idea generation to presentation, with practical tips on methodology, equipment, and responsible disclosure.
I Can Be Apple and So Can You
Learn how to impersonate Apple's code signing process, exploring techniques to bypass security measures and gain insights into digital certificate manipulation.
Related-Key Attacks Against Full Hummingbird-2
Explore cryptographic vulnerabilities in Hummingbird-2 through related-key attacks, as presented by Markku-Juhani Olavi Saarinen at FSE 2013.
Curious Case of Rowhammer - Flipping Secret Exponent Bits Using Timing Analysis
Explore the Rowhammer vulnerability and its impact on cryptographic systems through timing analysis, revealing potential security risks in modern hardware.
Flush, Gauss, and Reload - A Cache Attack on the BLISS Lattice-Based Signature Scheme
Explore a cache attack on the BLISS lattice-based signature scheme, examining vulnerabilities and potential security implications for post-quantum cryptography.
A Subfield Lattice Attack on Overstretched NTRU Assumptions - Cryptanalysis of Some FHE and Graded Encryption Schemes
Explore cryptanalysis techniques for overstretched NTRU assumptions, focusing on subfield lattice attacks and their implications for FHE and Graded Encoding schemes.