EFL - A UI Toolkit Designed for the Embedded World
Explore EFL, a UI toolkit for embedded systems offering stable API, efficiency, and versatility. Learn its features, concepts, and applications in various devices and platforms.
Securing the Connected Car with RVI
Explore automotive network security, threat models for connected cars, and how GENIVI's Remote Vehicle Interaction project mitigates risks in this informative presentation by a Jaguar Land Rover expert.
Buildroot: What's New in Embedded Linux Build Systems
Explore recent advancements in Buildroot, a lightweight embedded Linux build system. Learn about new features, improvements, and their practical applications for developers and users.
WPE WebKit: HTML5 User Interfaces for Embedded Devices
Explore WPE WebKit, an optimized HTML5 UI solution for embedded devices. Learn its architecture, key features, and growing adoption in various industries.
I3C Bus Specification - Improvements Over I2C and SPI Protocols
Explore I3C bus protocol: improved data rate, power efficiency, and features over I2C/SPI. Learn about Linux implementation, future enhancements, and its impact on embedded systems.
MarkDoom: How I Hacked Every Major IDE in 2 Weeks
Explore how major IDEs were hacked through embedded browsers, revealing critical security vulnerabilities in desktop applications built with web technologies. Learn about the risks and safeguards in the "Desktop Web" era.
OWASP Top 10 - Application Security Risks
Explore the latest OWASP Top 10 web application security risks with expert Andrew van der Stock. Learn about critical vulnerabilities and effective mitigation strategies for safer software development.
Five Key Trends in Application Security
Explore five crucial application security trends: cloud migration, CDN diversity, API proliferation, compliance challenges, and expanding attack surfaces. Gain insights into cybercriminal tactics and industry recommendations.
Threat Modeling Stories from the Trenches - Security Design Flaws and Solutions
Explore real-world threat modeling scenarios, design flaws, and security controls. Learn to identify vulnerabilities, understand attack vectors, and implement effective countermeasures in various systems.
Mobile-First Websites Security Evaluation - Attacker-Friendly or User-Friendly?
Evaluate security vulnerabilities in mobile-first websites, exploring potential risks and attacker-friendly features. Learn to identify and mitigate threats in mobile web development.
Over 20 Years of SQL Injection Attacks - Refining Web Attack Detection Using Data Mining Techniques
Explore data mining techniques to refine SQL injection attack detection using CDN logs, NLP, and clustering for improved web security and emerging threat identification.
AppSec Challenges - Overcoming Framework Limitations and Building Robust Security
Exploring challenges in application security, analyzing framework limitations, and discussing robust approaches to improve security at scale while making it more manageable.
ReproNow - Saving Time in Reproducing and Triaging Security Bugs
Introducing ReproNow: an open-source tool for efficiently reproducing and triaging security vulnerabilities. This chrome/firefox extension captures researcher's walkthrough, including network requests, streamlining bug validation for security engineers.
Passive Fingerprinting of HTTP/2 Clients
Explore HTTP/2 protocol nuances for passive client fingerprinting. Learn about implementation differences, potential use cases, and observed attacks on Akamai's platform.
Increasing Web Security with the Power of HTTP Headers
Explore how HTTP headers can enhance web security, focusing on practical implementation strategies and best practices for developers and security professionals.
DNS Hijacking Using Cloud Providers: No Verification Needed - AppSec EU 2017
Explore advanced domain hijacking techniques, including undisclosed methods, to understand vulnerabilities in DNS providers and cloud services. Learn to identify and mitigate risks beyond common subdomain takeover scenarios.
OWASP Zap - Introduction and Usage Guide
Explore OWASP Zap's capabilities for web application security testing with David Scrobonia's comprehensive overview, highlighting key features and best practices for effective vulnerability detection.
Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD
Extensive analysis of malicious domain registrations in .eu TLD, revealing cybercriminal tactics and campaign patterns. Insights into automated processes and operational aspects of large-scale malicious activities.
The Evil Friend in Your Browser - Browser Extension Security Risks
Explore the hidden dangers of browser extensions, their security model limitations, and potential risks to user privacy. Learn about real-world analysis findings and discuss improved security measures.
Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines
Explore methods for calculating and tracking web application attack surface evolution, and learn to integrate security testing into CI/CD pipelines using metrics-based policies.
Securing C Code That Seems to Work Fine
Explore strategies for securing C codebases in high-performance environments, balancing best practices with startup culture. Learn from real-world successes and failures in implementing application security controls.