NorthSec Talks & Presentations

NorthSec

How to Think - About Complex Adversarial Systems

Eleanor Saitta explores advanced security thinking, focusing on patterns, system-wide approaches, and human factors. She discusses key concepts like resource conflicts, intuition, vulnerabilities, and adaptive capacity for effective security practices.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

NorthSec

Ichthyology - Phishing as a Science

Explore the psychology of phishing, analyze real-world attacks, and learn evidence-based prevention techniques. Discover how to protect against credential theft and evaluate the effectiveness of phishing training.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NorthSec

Quick Retooling with .NET Payloads

Explore dynamic .NET implants for red teams, focusing on flexible retooling, OpSec, and overcoming static defenses using DLRium Managed Execution toolkit.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

NorthSec

Brain Implants and Mind Reading

Explore brain-computer interfaces, their current capabilities, and future implications. Delve into neurotechnology's potential, security concerns, and societal impact as we approach a cyberpunk reality.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NorthSec

Getting Ahead of the Elliptic Curve

Demystifying elliptic curve cryptography: explore its applications in HTTPS, Bitcoin, and beyond. Learn about point addition, ECDH, digital signatures, and post-quantum algorithms without deep mathematical knowledge.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

NorthSec

Exploits in Wetware

Exploits in wetware: social engineering techniques, OSINT strategies, and defensive measures against human vulnerabilities in cybersecurity, based on real-world experiences.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

NorthSec

One Step Before Game Hackers - Instrumenting Android Emulators

Explore native hooking on Android emulators, understanding process start routines and emulation strategies. Learn why existing frameworks fail and how to create one that works for game cheating.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

NorthSec

Data Breaches - Barbarians in the Throne Room

Analyze hundreds of data breach disclosures to understand common vulnerabilities, focusing on preventable issues like patching and configuration failures, and their impact on enterprises.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

NorthSec

Malware Morphology for Detection Engineers

Explore diverse malware implementations within techniques, analyze tool differences, and learn to build resilient detection rules by modeling procedures and evaluating similarities.

• YouTube
• 2 hours 47 minutes
• On-Demand
• Conference Talk

NorthSec

10 Things I Wish I Knew Before My First Incident

Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

NorthSec

Jumping the Air Gap - 15 Years of Nation-State Efforts

Explore nation-state techniques for breaching air-gapped networks, analyzing similarities across frameworks and providing practical advice to enhance security and detect potential attacks.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NorthSec

Introduction to Cryptographic Attacks

Hands-on workshop exploring real-world cryptographic vulnerabilities. Implement attacks using provided tools, gaining practical experience in identifying and understanding common cryptographic weaknesses.

• YouTube
• 2 hours 22 minutes
• On-Demand
• Conference Talk

NorthSec

Applying DevOps Principles for Better Malware Analysis

Leveraging DevOps principles to streamline malware analysis, automate lab setup, and enhance collaboration among security researchers for more efficient threat detection and response.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NorthSec

CANtact - An Open Tool for Automotive Exploitation

Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN traffic for reverse engineering and security testing of vehicle systems.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NorthSec

How Anonymous Narrowly Evaded the Cyberterrorism Rhetorical Machine

Explore the factors that prevented Anonymous from being labeled as cyberterrorists, despite their global political activism and masked identity. Gain insights into the complex dynamics of digital activism and cybersecurity rhetoric.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk