Whispers Among the Stars - A Practical Look at Perpetrating Satellite Eavesdropping Attacks
Experimental exploration of satellite broadband vulnerabilities using affordable equipment. Demonstrates eavesdropping techniques across land, air, and sea communications with minimal detection risk.
Could a Few Lines of Code Mess It All Up
Explores risks of open source dependencies, revealing potential vulnerabilities in popular packages and discussing impacts on app security. Offers insights on mitigating risks in hybrid development.
IOT and AppSec
Explore the intersection of Internet of Things (IoT) and application security, examining potential vulnerabilities and strategies for safeguarding connected devices and systems.
Automated vs. Manual Security - You Can't Scan for The Stupid
Explore the limitations of automated security tools and the importance of manual testing in identifying vulnerabilities that scanners miss, particularly those caused by human error.
Big Game Hunting
Discover simple techniques for bug hunting on AIX and IBM products, building on "Breaking The Links" methodology and exploring new vulnerabilities.
House of Cards - How Not to Collapse When Bad Things Happen
Discover how to build resilient enterprise security by actively testing defenses, validating controls, and learning from simulated scenarios to prepare for real-world threats and challenges.
Reverse Engineering and Bug Hunting on KMDF Drivers
Explore reverse engineering and bug hunting techniques for KMDF drivers, focusing on entry points, IO queues, and implementation vulnerabilities. Gain practical skills for analyzing driver security.
Automating Myself Out of a Job - A Pentesters Guide to Left Shifting Security Testing
Explore techniques for integrating automated security testing into the development process, enabling faster releases while maintaining a strong understanding of application risks.
Reverse Engineering Windows Malware 101 Workshop
Hands-on workshop introducing reverse engineering fundamentals for Windows malware analysis. Learn to set analysis goals, use tools, and apply computer science concepts through practical exercises.
Software Security Austerity - Software Security Debt in Modern Software Development
Explore software security debt in modern development, its sources, management strategies, and consequences with expert insights on risk assessment and mitigation techniques.
Practical AppSec - Quick Wins for More Secure Software
Practical steps to enhance application security with minimal effort, including quick wins, finding attack surfaces, and engaging developers. Introduces a software security maturity model for measuring progress.
OpenStack API Security Testing Automation in Action
Automated security testing framework for OpenStack API, integrating with Agile and CI/CD. Demonstrates Rackspace's approach to detect vulnerabilities efficiently, improving consistency and auditability.
Mobile AppSec - Development and Alphabet Soup
Explore mobile app security challenges, vulnerabilities, and solutions. Learn effective strategies for protecting data and applications in the rapidly evolving mobile landscape.
Why Does Bad Software Happen to Good People
Explore the root causes of software failures and their impact on users in this insightful keynote, offering valuable perspectives on improving software quality and reliability.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.
Testing Modern Applications with Hackazon
Learn to test modern web applications using Hackazon, focusing on e-commerce functions, AJAX workflows, and RESTful APIs. Discover hidden vulnerabilities and systematic testing approaches.
The ThreadFix Ecosystem - Vendors, Volunteers, and Versions
Explore ThreadFix: an open-source system for managing app vulnerabilities, automating security tasks, and integrating tools. Learn about its components, ecosystem, and real-world case studies of platform improvements.
New Farming Methods for the Epistemological Wasteland of Application Security
Explore innovative approaches to application security, focusing on early-stage security testing and practical tools for immediate implementation in development processes and delivery pipelines.
Doing AppSec at Scale - DevOps + Agile + CI/CD == AppSec Pipelines
Scaling AppSec through DevOps, Agile, and CI/CD practices. Learn strategies to efficiently manage application security across large organizations using automation, orchestration, and ChatOps.
Your Last Manual Assessment
Automate security assessments using browser hooks and Selenium, transforming manual tests into robust scripts ready for continuous delivery integration.
Hunting For Bugs, Catching Dragons
Explore advanced techniques for identifying and exploiting software vulnerabilities, with insights from a renowned security researcher on discovering high-impact bugs.