Lessons from Mirai and the Current State of IoT Security
Explore the Mirai Botnet's evolution and its impact on IoT security. Analyze the 2016 cyberattack that disrupted major websites and learn about current challenges in securing internet-connected devices.
Data Security with Generative AI and Large Language Models
Explore data security in generative AI and LLMs. Learn to select secure AI providers, address concerns, and implement safeguards for sensitive information. Empower your organization to harness AI's potential safely.
Android Penetration Testing
Explore advanced Android security techniques including reverse engineering, SSL unpinning, and vulnerability detection in this hands-on penetration testing session.
Picking Round Body Padlocks
Comprehensive guide to picking various round body padlocks, covering techniques, vulnerabilities, and competition insights for lock picking enthusiasts.
Nix zu verstecken! Erstellung und Veröffentlichung von CVEs für Open Source Software
Erfahrungsbericht zur Erstellung und Veröffentlichung von CVEs für Open-Source-Software. Praktische Einblicke in den Prozess, Vorteile und Herausforderungen als CVE Numbering Authority.
Formal Modelling and Proof in the CHERI Design and Implementation Process
Explore rigorous engineering methods for developing secure processor architecture, focusing on CHERI's hardware capabilities for fine-grained memory protection and secure compartmentalization.
A Messy State of the Union - Taming the Composite State Machines of TLS
Explore critical security vulnerabilities in TLS implementations, including the FREAK flaw, and learn about a verified composite state machine for OpenSSL that addresses these issues.
High System-Code Security with Low Overhead
Maximize system code security within specified overhead budgets. Automatically instrument programs to balance security and performance, focusing on critical, low-cost checks for effective protection.
Browser Exploitation for Fun and Profit - Dhiraj Mishra, Bugcrowd's LevelUp 2017
Explore browser vulnerabilities, their root causes, and exploitation techniques. Learn about interesting security flaws discovered during research and gain insights into browser exploitation.
Compromising OSX - Root Access Exploitation Techniques
Explore techniques for compromising macOS systems, uncovering vulnerabilities, and gaining root access in this advanced cybersecurity presentation.
Leveraging Social Engineering in Physical Security Assessment - 2017
Explore techniques for leveraging social engineering in physical security assessments, enhancing your ability to identify vulnerabilities and strengthen organizational defenses.
Abusability Testing: Considering the Ways Your Technology Might Be Used
Explore abusability testing to anticipate potential misuse of technology, enhancing product safety and ethical design considerations.
Ethics and Computer Security
Explore ethical considerations in computer security, including disclosure processes, bug bounties, and legal implications, with real-world examples from electronic car locks to medical devices.
Surviving the CVE Firehose: Strategies for Open Source Product Security
Strategies for managing and improving product security amidst constant vulnerability threats. Learn to track, prioritize, and address security issues effectively in open source projects.
How to Review Code for Vulnerabilities - OWASP Standard Classification
Learn effective strategies for identifying vulnerabilities through source code review, including key concepts, starting points, and automation techniques. Practice reviewing code samples to enhance your application security skills.
(In)Security is Eating the World - Speed and Autonomy for Defense
Explore the future of cybersecurity with Michael Coates as he discusses the need for automation, scale, and speed in addressing critical security failures in our technology-driven world.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
Shameful Secrets of Proprietary Network Protocols
Reverse engineering proprietary protocols: case studies revealing security flaws in financial software, home automation, and embedded systems. Techniques for uncovering hidden vulnerabilities in undocumented binary protocols.
New Frameworks, Old Problems: Web Security Challenges in Modern Development
Exploring security challenges in modern web frameworks like Play! and Node.js, comparing solutions from established frameworks, and offering practical code examples to address common vulnerabilities.
Unveiling the Hidden - Discovering RDP Vulnerabilities Using PDF Files
Innovative OSINT techniques reveal critical RDP vulnerabilities, including remote code execution and security bypasses, without conventional reverse engineering tools. Explore unconventional research methodologies and vulnerability analysis.
Building Secure Hybrid Mobile Applications - A Security Professional's Guide
Learn to assess and secure hybrid mobile apps by understanding threat models and vetting external libraries, enhancing your ability to build robust applications.