Dissecting Rotten Apples - macOS Malware Analysis
Comprehensive exploration of macOS malware analysis, covering system architecture, common malware behaviors, and real-world sample demonstrations. Ideal for security researchers and IT professionals.
Sleeping with the Enemy Compiler - Software Vulnerabilities Caused by Optimizations
Técnicas de optimización del compilador pueden introducir vulnerabilidades en software de seguridad. Se presentan ejemplos, demostraciones en vivo y soluciones para evitar estos problemas causados por optimizaciones.
¿Cómo iniciar como bug bounty hunter?
Descubre cómo iniciar tu carrera como cazador de recompensas por errores con Omar Espino, experto en seguridad reconocido por grandes empresas tecnológicas. Aprende estrategias y consejos para tener éxito en este campo.
Kernel Pwning with eBPF - A Love Story
Explore eBPF technology, its impact on Linux kernel capabilities, and potential security vulnerabilities. Learn about verifier exploits and achieving code execution in the kernel.
How to Make Error Handling Less Error-Prone
Explore innovative approaches to error handling, focusing on automatic state recovery and the 'Ken' protocol for distributed systems to enhance program reliability and security.
The Internet of Deadly Things
Explore the potential dangers and security risks associated with interconnected devices in the modern world.
Car Manufacturer Meets Security Community
Explore the intersection of automotive manufacturing and cybersecurity in this insightful talk, examining challenges and collaborative opportunities between industries.
Securing Your In-Ear Fitness Coach - Challenges in Hardening Next Generation Wearables
Explore challenges in securing next-generation wearables, focusing on in-ear fitness coaches. Learn about potential vulnerabilities and strategies for hardening these innovative IoT devices.
Clobbering the Cloud - Part 1
Explore cloud security vulnerabilities and attack techniques in this comprehensive presentation, focusing on potential risks and defensive strategies for cloud environments.
Security Evaluation of Dual-Stack Systems
Explore security vulnerabilities in dual-stack IPv4/IPv6 systems and learn effective evaluation techniques to enhance network protection.
Towards a LangSec Aware SDLC
Explore integrating Language-theoretic Security principles into the Software Development Life Cycle for enhanced system security and robustness.
eBPF ELFs JMPing Through the Windows
Análisis pionero de vulnerabilidades en eBPF para Windows, explorando su diseño, superficie de ataque y descubrimiento de fallos mediante fuzzing y ingeniería inversa automatizada.
Das nützlich-unbedenklich Spektrum
Diskussion über die Balance zwischen nützlicher und unbedenklicher Software. Analyse von Sicherheitsaspekten, Vertrauenswürdigkeit und möglichen Metriken zur Bewertung. Ziel: Entwicklung vertrauenswürdiger Software-Infrastrukturen ohne Einschränkungen.
Meltdown and Spectre for Normal People
Understand Meltdown and Spectre security flaws: their hardware basis, widespread impact, and patching challenges. Includes insights on CPU architecture and security vulnerability management.
Uncover, Understand, Own - Regaining Control Over Your AMD CPU
Explore AMD's Platform Security Processor: firmware analysis, functionality insights, and security implications. Learn to extract, replace, and observe PSP components, gaining control over your AMD CPU.
Die 5G-Überwachungsstandards
Europol und nationale Polizeibehörden kämpfen gegen neue 5G-Überwachungsstandards. Telekom-Industrie und Strafverfolger streiten im ETSI über Netzarchitektur und Sicherheitslücken für IMSI-Catcher.
Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt
Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.
Token Kidnapping's Revenge
Explore advanced Windows privilege escalation techniques and token manipulation vulnerabilities with security expert Cesar Cerrudo in this in-depth conference presentation.
Shims For The Win - Case Study and Investigative Techniques for Hijacked Application Compatibility Infrastructure
Explore hijacked Application Compatibility Infrastructure through a case study, learning investigative techniques for detecting and analyzing shim-based attacks in Windows systems.
An Introduction to OpenShift.io - An End-to-End OpenShift Development Platform in the Cloud
Explore OpenShift.io: a cloud-based development platform offering seamless integration, continuous delivery, and enhanced security for efficient software creation and deployment.
IBM - Trusteer Rapport - Does IBM Intentionally Backdoor Machines?
Investigates potential security concerns with IBM/Trusteer Rapport software, examining its code execution speed, system access, and implications for user privacy and system integrity.