Real World Security in a Clinical Healthcare Environment - Hacking a Hospital
Explore real-world healthcare security vulnerabilities, threat modeling, and IoT device risks. Learn practical strategies to protect hospital systems and patient data from cyber attacks.
How to Harden Your Electron App
Learn techniques to enhance security in Electron apps, focusing on threat modeling, separation of concerns, and best practices. Discover insights from building a secure password manager using this framework.
Look! There's a Threat Model in My DevSecOps
Discover a fast-paced, backlog-based approach to threat modeling in DevSecOps environments without slowing development or requiring additional tools. Learn to implement effective security practices efficiently.
Pentesting - Lessons from Star Wars
Explore threat modeling through Star Wars, gaining practical insights for effective offensive and defensive security strategies in software development.
The SOC Counter ATT&CK
Explore SOC counter-attack strategies using the MITRE ATT&CK framework. Learn threat detection, modeling, and hunting techniques to enhance your organization's security posture.
Rapid Threat Model Prototyping - Threat Modeling for Agile & DevOps
Learn rapid threat model prototyping for Agile and DevOps environments. Explore security architectural analysis and design techniques to enhance your secure software development lifecycle.
Clobbering the Cloud - Part 1
Explore cloud security vulnerabilities and attack techniques in this comprehensive presentation, focusing on potential risks and defensive strategies for cloud environments.
Building Systems on Shaky Grounds - 10 Tactics to Manage the Modern Supply Chain
Explore 10 tactics for managing modern software supply chains, balancing open-source benefits with security risks. Learn to assess vendors, conduct red team exercises, and implement effective incident response strategies.
A Systematic Evaluation of OpenBSD's Mitigations
Systematic evaluation of OpenBSD's security mitigations, analyzing effectiveness, performance impact, and potential bypasses. Provides rational assessment of the operating system's security claims.
Shall We Play a Game?
Develop effective security exercises using MITRE ATT&CK framework. Learn to create, run, and score drills that turn threat intelligence into practiced action for improved incident response.
Redefining Threat Modeling - Security Team Goes on Vacation
Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.
Lessons Learned from Black Hat’s Infrastructure - The Tweets Must Flow
Explore Black Hat's infrastructure, network challenges, and security measures. Learn about wired and wireless setups, threat modeling, and lessons for building robust conference networks.
SexyDefense - Maximizing the Home-Field Advantage
Maximizing home-field advantage in cybersecurity through proactive defense, intelligence gathering, and attacker modeling. Learn to adapt strategies, set traps, and take initiative for effective protection.
How to Respond to Cops Who Want Your Passwords
Learn strategies for protecting digital privacy when interacting with law enforcement, including legal rights, threat modeling, and best practices for device security at borders.
Lessons From the Front Lines - New York City Cyber Command
Insights from NYC Cyber Command's frontline experiences, covering operational design, governance, threat modeling, and future cybersecurity strategies for urban environments.
DYODE - Do Your Own Diode for Industrial Control Systems
Learn to build and implement data diodes for secure industrial control systems, covering hardware, software, workflows, and threat modeling.
Ghost DMA Attack & The SeDeFuS Conundrum
Explore Ghost DMA attacks, their mechanisms, and mitigations. Learn about the SeDeFuS conundrum and its implications for system security in this technical presentation.
Finding the Best TI Provider for a Specific Purpose
Explore methodologies for evaluating and selecting the most suitable Threat Intelligence provider, focusing on comparison metrics, data analysis, and key takeaways for various cybersecurity roles.
One Step Before Game Hackers - Instrumenting Android Emulators
Explore native hooking on Android emulators, understanding process start routines and emulation strategies. Learn why existing frameworks fail and how to create one that works for game cheating.
Threat Modeling for the Gaming Industry
Explore gaming industry security challenges, focusing on client-side logic, network protocols, account management, and untrusted platforms to enhance overall security and user experience.
Securing Robots at Scale
Explore robot security challenges, attack surfaces, and protection strategies for hardware, software, and user privacy in the era of widespread robotic adoption.