NorthSec Talks & Presentations

NorthSec

Hopping on the CAN Bus

Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

NorthSec

I Am Become Loadbalancer, Owner of Your Network

Explore load balancer architecture, deployment, and post-breach access. Learn to navigate systems, avoid detection, and exploit configurations across various platforms for enhanced network control.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

NorthSec

The Risks of RDP and How to Mitigate Them

Explore RDP security risks, attacks, and mitigation strategies. Learn to deploy secure RDP servers and detect potential threats in Windows remote environments.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

NorthSec

Authentication Challenges in SaaS Integration and Cloud Transformation

Explore authentication challenges in SaaS integration and cloud transformation, focusing on security pitfalls, unmanaged cloud identities, and the importance of cloud-based Identity Provider solutions.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

NorthSec

Building CANtact Pro - An Open Source CAN Bus Tool

Explore the process of designing, developing, and launching an open-source CAN bus tool. Learn about PCB design, driver development, and the challenges of bringing hardware products to market.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

NorthSec

Unmasking the Chameleons of the Criminal Underground

Unmasking cybercriminals' sophisticated techniques for account takeover attacks, focusing on machine fingerprint markets, their impact on Canadians, and strategies for protection against this growing threat.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NorthSec

Bypassing Advanced Device Profiling with DHCP Packet Manipulation

Explore advanced device profiling bypass techniques using DHCP packet manipulation for Network Access Control systems. Learn about implementation, mechanics, and risk mitigation strategies.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NorthSec

See Something, Say Something? - The State of Coordinated Vulnerability Disclosure in Canada’s Federal Government

Exploring coordinated vulnerability disclosure in Canada's federal government, highlighting gaps and recommending policy frameworks to enhance cybersecurity and protect security researchers.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NorthSec

Critical Vulnerabilities in Network Equipment - Past, Present, and Future

Explore critical vulnerabilities in network equipment, from routers to firewalls. Learn about common patterns, historical context, and future trends in cybersecurity for these essential devices.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

NorthSec

AMITT - Defensive Framework to Counter Disinformation

Explore AMITT framework updates for combating disinformation, including new countermeasures. Learn about recent events and practical applications in influence operations defense.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

NorthSec

Social Bots - Malicious Use of Social Media

Analyse de l'utilisation malveillante des médias sociaux pendant l'élection fédérale canadienne de 2019, examinant le rôle des bots sociaux dans la manipulation du discours politique et la désinformation.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NorthSec

Privacy Without Monopoly - Beyond Feudal Security

Exploring the tension between privacy and monopoly in tech, advocating for interoperability as a solution to enhance security without compromising user rights or enabling corporate dominance.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

NorthSec

Damn GraphQL - Attacking and Defending APIs

Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NorthSec

Repo Jacking - How Github Usernames Expose Projects to RCE

Explore 'repo jacking', a widespread supply chain vulnerability affecting 70,000+ open-source projects. Learn its causes, exploitation methods, and mitigation strategies to protect your GitHub-dependent projects.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NorthSec

Cryptography Do's and Don'ts in 2021

Explore cryptographic best practices, common pitfalls, and secure implementations for random number generation, encryption, hashing, and more. Essential knowledge for designing and auditing cryptographic systems.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk