ShmooCon Talks & Presentations

0xdade

Firemen vs Safety Matches - How the Current Skills Pipeline Is Wrong

Exploring innovative strategies to address the cybersecurity skills shortage by leveraging diverse talents and creating a sustainable workforce pipeline, inspired by first responder models.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

0xdade

Encrypting the Web Isn't Enough - How EFF Plans to Encrypt the Entire Internet

EFF's mission to encrypt the entire Internet, focusing on STARTTLS Everywhere project for secure mailserver communication. Discusses progress, challenges, and future plans for comprehensive online privacy and security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

0xdade

High Confidence Malware Attribution Using the Rich Header

Explore advanced malware attribution techniques using the Rich Header, including its generation, fingerprinting capabilities, and a novel metadata hash for large-scale sample detection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

0xdade

Behind Enemy Lines - Inside the Operations of a Nation State's Cyber Program

Explore the development of a nation-state's cyber surveillance program, including vendor interactions, in-house development, and operational insights for desktop and mobile platforms.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

0xdade

BECs and Beyond - Investigating and Defending Office 365

Explore Office 365 security through real-world attack case studies. Learn investigation techniques, log analysis, and defense strategies to protect cloud-based enterprise environments.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Looking for Malicious Hardware Implants with Minimal Equipment

Explore hardware security threats, detection methods, and threat modeling with minimal equipment. Learn to identify unexpected features and understand the challenges of hardware implants and interdiction.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

0xdade

Mentoring the Intelligent Deviant - What the Special Operations and Infosec Communities Can Learn from Each Other

Exploring similarities between hacking and special operations communities, focusing on mentoring challenges, professional development, and lessons for mutual understanding in developing intelligent deviants.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

0xdade

Three Ways DuckDuckGo Protects User Privacy While Getting Things Done - And How You Can Too

Explore DuckDuckGo's innovative privacy-protecting techniques: NGiNX proxying, SSL connection upgrades, and anonymous A/B testing. Learn how to implement these strategies in your own projects.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

0xdade

That's No Moonshot

Exploring cybersecurity challenges in emerging technologies and the need for proactive measures to safeguard our interconnected future, emphasizing collective knowledge and action over grand initiatives.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

0xdade

When CAN CANT

Explore CAN bus vulnerabilities and CANT software for automotive security research. Learn error handling, selective attacks, and advanced techniques for vehicle hacking and defense.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

0xdade

Time Signature Based Matching for Data Fusion and Coordination Detection in Cyber Relevant Logs

Methodology for detecting automated behavior in cyber logs using temporal pattern matching, scalable through locality sensitive hashing. Applications include anomaly detection and data fusion.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

0xdade

Pseudo-Doppler Redux

Explore modern pseudo-Doppler direction finding using SDR for locating radio devices. Learn about innovative techniques, challenges, and future developments in wireless security research.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

0xdade

Someone Is Lying to You on the Internet - Using Analytics to Find Bot Submissions in the FCC Net Neutrality Submissions

Uncover bot-driven FCC net neutrality comments using open-source analytics. Learn how data analysis revealed stark differences between bulk API submissions and individual website comments, exposing potential manipulation of public opinion.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

0xdade

Skill Building by Revisiting Past CVEs

Explore CVE-2013-5576 to enhance vulnerability hunting and exploit creation skills. Learn strategies for critical thinking and pattern recognition in cybersecurity.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

0xdade

Securing Bare Metal Hardware at Scale

Explore advanced techniques for securing firmware in large-scale hardware deployments, addressing challenges and future trends in protecting against persistent backdoors and exploits.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk