Reverse Engineering Compliance
Explore reverse engineering techniques applied to compliance standards, shifting from checkbox mentality to understanding the spirit of requirements for more effective security practices.
The B-MAD Approach to Threat Modeling
Discover the B-MAD approach to threat modeling, exploring its pitfalls and organizational impacts. Learn effective strategies for implementing threat modeling across your organization and improving overall security.
Bypassing NGAV for Fun and Profit
Explore methodologies to reverse engineer and bypass next-generation anti-virus (NGAV) models, focusing on adversary learning techniques and challenges in cybersecurity.
Applying Machine Learning to User Behavior Anomaly Analysis
Explore advanced machine learning techniques for user behavior anomaly detection in cybersecurity, covering feature selection, data quality, behavioral whitelisting, and neural network predictions.
Embracing the Uncertainty of Attacks with Big Data Analytics
Exploring big data analytics to combat advanced cyber threats, reduce uncertainty, and transform security programs through intelligence-driven detection approaches and innovative strategies.
How Threat Modeling Can Influence ICS Security Posture
Explore threat modeling's impact on ICS security, including benefits, timing, and cost-saving applications. Learn methodologies, tools, and advanced techniques for enhancing industrial cybersecurity.
Securing Coinbase's Edge Payments Infrastructure
Explore secure payment networks, KYC/AML practices, and fraud prevention in cryptocurrency exchanges. Learn about Coinbase's strategies for protecting transactions and ensuring regulatory compliance.
Hardware Security Module - Executing Unsigned Code in HSM TEE
Explore a novel attack on HSM digital signature verification, enabling execution of unsigned code in protected environments. Insights applicable to similar systems.
SDL That Won't Break the Bank
Learn cost-effective strategies for implementing a secure development lifecycle in smaller organizations, addressing unique challenges and leveraging available resources.
DOG of WAR - Attack Box Design
Explore attack box design strategies and techniques for penetration testing and security assessments in this comprehensive presentation by Scott Blake.
Enforcing Authorization with Cryptography
Cryptographic techniques for secure object referencing: balancing security and performance in authorization systems. Explores alternatives to common solutions, providing benchmarks and practical guidance for developers.
The Emerging Product Security Leader Discipline
Explore product security leadership, covering defense strategies, DevOps integration, threat modeling, and real-world examples. Learn to leverage risks, implement security practices, and adapt to emerging technologies.
Threat Modeling the Minecraft Way
Learn threat modeling through Minecraft analogies, exploring security concepts in a fun, accessible way to enhance your cybersecurity skills and understanding.
Hacking Democracy - On Securing an Election
Explore cybersecurity challenges in elections, including disinformation, voting machine vulnerabilities, and election manipulation. Experts discuss threats, solutions, and the role of hackers in building voter trust.
New Apps, Good Snacks - Effective Threat Modeling for New Territory
Explore effective threat modeling techniques for new features and devices, focusing on team education, security communication, and creating understandable models for diverse audiences.
FAIR STRIDE - Building Business Relevant Threat Models
Explore FAIR STRIDE, a method for creating application threat models to determine ROI on security controls and prioritize risk reduction efforts for scalable product security.
Classic Misdirection - Social Engineering to Counter Surveillance
Explore social engineering techniques to counter surveillance, including information denial, deception, and targeted leaks. Learn practical strategies for protecting privacy and evading digital tracking.
State of Automotive Cyber Safety
Explore automotive cybersecurity challenges, strategies, and future implications with insights on safety-by-design, threat modeling, and critical infrastructure protection.
Beyond the Checkbox - Breaking Out of Testing Frameworks
Explore mobile app security beyond standard testing frameworks, learning threat modeling and custom attack strategies for comprehensive vulnerability assessment.
Insecure Transit - Microservice Security Challenges and Solutions
Explore microservice security challenges and solutions, covering data breaches, risk assessment, credential management, and network communication. Learn practical strategies for building robust, secure architectures.
Introduction to Embedded Linux Security
Explore embedded Linux security concepts, threat modeling, secure boot, encryption, coding practices, access control, and network protection for robust system design.