Homeland Security Courses

Hack in Paris

Injecting Security into Web Apps

Explore innovative approaches to web application security beyond traditional WAFs, focusing on internal application monitoring and real-time threat detection to prevent zero-day attacks and data exfiltration.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Hack in Paris

How to Measure Your Security

Discover techniques to measure and compare the effectiveness of security tools, holding vendors accountable. Learn to evaluate IDS, IPS, A/V, and other detection systems for better cybersecurity decision-making.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Hack in Paris

The Forbidden Image - Security Impact of SVG on the WWW

Explore SVG's security implications, potential vulnerabilities, and protective measures. Learn about malicious SVG examples and a new filtering tool for safer SVG usage on the web.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Hack in Paris

Results of a Security Assessment of the Internet Protocol Version 6

Comprehensive security assessment of IPv6 protocol suite, highlighting vulnerabilities, implementation challenges, and best practices for secure deployment in modern networks.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Istio Service Mesh Security

Explora la seguridad en Istio Service Mesh con Diego Chavez. Aprende prácticas defensivas y ofensivas para aplicaciones en la nube, enfocadas en DevSecOps y microservicios.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Providing Reliability to GCP with Security Chaos Engineering

Explora cómo mejorar la confiabilidad en Google Cloud Platform mediante ingeniería del caos de seguridad, aplicando prácticas DevSecOps para fortalecer aplicaciones en la nube.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Demystifying Mobile Security with a COVID App - Mobile Hacking

Explore Android app components, hacking tools, and Mobile Top 10 through a COVID app analysis. Gain insights into Android app functionality and mobile security vulnerabilities.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Offensive Azure Security - Red Zone Space

Explore offensive security techniques for Azure, including bypassing authentication, extracting secrets, and gaining control over various Azure services with expert Sergey Chubarov.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Hack in Paris

How to Measure the Security of Your Network Protection Devices

Explore methods to quantify network security device performance, efficacy, and risk. Learn to assess defensive appliances for better security design and network protection strategies.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Blinding Endpoint Security Solutions - WMI Attack Vectors

Explore new WMI attack vectors that disable EDR/AV/SIEM solutions. Learn about WmiCheck, a tool for detecting OS attacks. Discuss WMI architecture weaknesses and reliable event collection methods.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip

Exploración de vulnerabilidades en el chip Titan M de Google, desde análisis estático hasta ejecución simbólica dinámica. Incluye demostración de explotación de CVE-2022-20233 para obtener ejecución de código.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Security Across Development Life Cycle in Cloud-Native

Explora buenas prácticas de seguridad en el ciclo de desarrollo de software cloud-native, abordando contenedores, Kubernetes, infraestructura como código y cargas de trabajo en la nube.

• YouTube
• 2 hours 11 minutes
• On-Demand
• Free Video

IEEE

Stack Overflow Considered Harmful - The Impact of Copy & Paste on Android Application Security

Explores the security implications of developers copying code from Stack Overflow into Android apps, revealing alarming rates of insecure snippet usage in popular applications.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

IEEE

Prepose - Privacy, Security, and Reliability for Gesture-Based Programming

Explore a novel language and system for secure, private gesture recognition in sensor-based interfaces, addressing privacy concerns and security threats while ensuring fast performance.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

IEEE

You Get Where You're Looking For - The Impact Of Information Sources On Code Security

Explores how developers' choice of information sources affects Android code security, comparing Stack Overflow, official documentation, and books. Highlights trade-offs between usability and security in programming resources.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk