VUDDY - A Scalable Approach for Vulnerable Code Clone Discovery
Scalable approach for detecting vulnerable code clones in open-source software, enhancing security by identifying and managing potential vulnerabilities efficiently and accurately.
SyzScope: Revealing High-Risk Security Impacts of Fuzzer-Exposed Bugs
Explore SyzScope, a tool revealing high-risk security impacts of fuzzer-exposed bugs. Learn about its workflow, fuzzing techniques, and symbolic execution for effective vulnerability assessment.
Security and Insecurity of HTTP Headers
Explore HTTP header security and vulnerabilities with Dirk Wetter. Learn about potential risks and best practices for implementing secure headers in web applications.
Standardization and Security - Improving Cloud Security Posture Through Standardization
Explore how Northwestern Mutual enhanced cloud security through standardization, addressing the paradox of choice in development tools and patterns to improve efficiency and reduce vulnerabilities.
Taming the Incoherent Cache Issue in Confidential VMs
Explores cache coherency challenges in confidential VMs, discussing AMD's SME_COHERENT feature, security vulnerabilities, and potential solutions to improve performance without compromising security.
Leverage Open-Source Code with Confidence - JetBrains Dependency Checker Plugin
Discover how to safely use open-source code with the JetBrains Dependency Checker plugin. Learn about vulnerability detection, detailed information, and suggested fixes for secure development.
How to Hack OAuth: Real-World Attacks and Prevention Strategies
Explore real-world OAuth hacks affecting major providers, learn attack details and prevention strategies. Gain insights into technical flaws and human vulnerabilities in modern online security.
Why Safe Programming Matters and Why Rust is the Way Forward
Explore Rust's potential as a secure, high-performance language for general-purpose programming, addressing memory safety issues and offering unique features for developers.
Attacking Debug Modules in the Android Ecosystem
Explore security vulnerabilities in Android debug modules, focusing on vendor-specific implementations. Learn about attack surfaces, real-world cases, and mitigation strategies for Android ecosystem security.
All You Need Is Guest - Securing EntraID Guest Accounts
Explore how EntraID guest accounts can pose security risks, bypass limitations, and gain unauthorized access to corporate resources. Learn steps to harden configurations and prevent attacks.
Your Smartcard is Dumb: A Brief History of Hacking Access Control Systems
Explore the vulnerabilities of modern access control systems through live demonstrations, understanding fundamental design flaws and historical attacks on card-based security mechanisms.
Azure B2C Zero-Day Exploit Chain - From Public Keys to Microsoft Bug Bounty
Uncover a complete exploit chain vulnerability in Azure B2C, from cryptographic misuse to full account compromise, including novel attack methods for crypto key recovery and its impact on Microsoft's bug bounty system.
Tools for Side-Channel Analysis and Cryptanalysis
Explore advanced tools and techniques for Side-Channel Analysis (SCA) and cryptanalysis, enhancing your understanding of hardware security and cryptographic vulnerabilities.
Smart Contract Series - Launching Your First Smart Contract, Token and NFT
Learn to create and deploy smart contracts, tokens, and NFTs on blockchain platforms. Explore vulnerabilities and gain practical insights into Web3 development and security.
10 Years of Linux Security - A Report Card
Comprehensive analysis of Linux security advancements and challenges over the past decade, highlighting key developments and future directions in open-source protection.
Optimize Your Kubernetes Clusters on Azure with Built-in Best Practices
Learn to optimize Kubernetes clusters on Azure using built-in tools for diagnostics, security, and efficiency. Discover best practices for managing containerized applications and solving common issues.
Timing Attacks in Cryptographic Libraries - Developers' Perspectives
Explore cryptographic library developers' perspectives on timing attacks and their mitigation strategies in this insightful conference session.
Exploiting PKI for Fun and Profit - The Next Yellow Padlock Icon
Explore PKI vulnerabilities and exploitation techniques for enhanced cybersecurity awareness. Learn about potential threats to secure communication systems and strategies for mitigation.
Algebraic and Integral Attacks in Cryptography - Session 2
Explore advanced cryptanalysis techniques focusing on algebraic and integral attacks, enhancing understanding of modern cryptographic system vulnerabilities.
Overflowing the Kernel Stack with BPF - Security Implications and Mitigations
Exploring vulnerabilities in eBPF's kernel stack usage, demonstrating overflow scenarios through program attachment and nesting, and discussing mitigation strategies for runtime environment assumptions.
Quality Assurance for Embargoed Kernel Patches
Exploring strategies to improve testing and quality assurance for embargoed kernel patches, addressing challenges in the current process and proposing solutions for enhanced security.