BruCON Talks & Presentations

BruCON Security Conference

Black Ops of TCP/IP 2011

Explore advanced TCP/IP techniques and vulnerabilities with renowned security expert Dan Kaminsky in this thought-provoking keynote address from BruCON 0x03.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Incident Response in the Cloud - Foggy with a Ray of Sunshine

Explore challenges and solutions for incident response in cloud environments, focusing on logging options, visibility issues, and automated response techniques for improved security operations.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

BruCON Security Conference

Atomic Threat Coverage - Being Threat Centric

Atomic Threat Coverage framework: Automatically generate actionable analytics to combat threats based on MITRE ATT&CK model, unifying detection, response, mitigation, and simulation for efficient security operations.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Weaknesses in WPA3's Dragonfly Handshake

Uncovers critical vulnerabilities in WPA3's Dragonfly handshake, demonstrating password partitioning attacks and discussing practical implications for Wi-Fi security. Explores countermeasures and assesses WPA3's effectiveness as a modern security protoco…

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

BruCON Security Conference

Defeating Bluetooth Low Energy 5 PRNG for Fun and Jamming

Uncover vulnerabilities in Bluetooth Low Energy 5's PRNG, enabling sniffing and jamming of BLE 5 connections. Learn to exploit weaknesses and use updated tools for IoT security testing.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Automated Adversary Emulation Using Caldera

Explore automated adversary emulation with MITRE Caldera 2.0, focusing on extending its capabilities, improving reporting, and overcoming security controls for enhanced ATT&CK coverage and adoption.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

BruCON Security Conference

Catching WMI Lateral Movement in an Enterprise Network

Detecting WMI lateral movement in enterprise networks: overview, challenges, and custom IDS fingerprints for improved security. Practical insights for SOC analysts to enhance threat detection capabilities.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Human Side-Channels and Their Implications for Security and Privacy

Exploring non-physical human identifiers in digital security: forensic linguistics, behavioral signatures, and cultural references. Implications for tracking threat actors and privacy protection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

A Hacker's View to the Upcoming ISO SAE 21434

Explore the ISO/SAE 21434 standard for automotive cybersecurity, focusing on technical mechanisms to protect modern vehicles from hacking and ensure safe driving experiences.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Why Isn't Infosec Working? Did You Turn It Off and Back On Again?

Explore effective infosec strategies with Rob Fuller as he shares insights from his diverse career, debunking myths and focusing on practical solutions for cybersecurity challenges.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

IoT RCE, a Study With Disney

Exploring IoT vulnerabilities using Disney Circle and Foscam devices as case studies, highlighting novel attack techniques and discussing the security implications of IoT in home networks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Outside the Box - Breakouts and Privilege Escalation in Container Environments

Explore real-world container escapes and privilege escalation techniques in popular solutions like Docker and Kubernetes. Learn methodologies for assessing containerized environments and implementing secure configurations.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Exploits in Wetware

Exploits in Wetware: Unveiling social engineering tactics, OSINT techniques, and strategies to protect organizations from human-based vulnerabilities in cybersecurity.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

5.256 Million Minutes in a Decade

Reflective keynote exploring a decade of cybersecurity challenges, assessing progress and persistent issues in the field since BruCon's inception.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Disrupting the Kill Chain

Comprehensive defense strategy for Windows environments, leveraging native Microsoft tools to disrupt cyber-attack kill chains. Covers detection, response, and automated remediation across various attack stages.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk