NorthSec Courses

Data Science Tools and Techniques for the Blue Team

Explore data science tools and techniques for cybersecurity, including statistical analysis and machine learning, to enhance threat detection and defense capabilities in large-scale corporate environments.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

How Surveillance Law was Expanded in Canada - What the Media has Reported - What’s Next

Explore Canada's expanded surveillance laws, media coverage, court cases, and future implications for cybercrime investigations and individual privacy rights.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Practical Uses of Program Analysis - Automatic Exploit Generation

Explore automatic exploit generation through program analysis techniques, including instrumentation and symbolic execution, with practical demonstrations and tool insights.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core

Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Privacy, Surveillance & Oversight

Explore privacy, surveillance, and oversight in the digital age, examining historical context, legal frameworks, and democratic principles shaping modern data collection practices.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

NorthSec 2015 - Jean Francois Cloutier & Francois Gagnon - CHEKS

Explore the science and technology behind the Chaotic Encryption Key System (CHEKS), including its concept, implementation, and practical application in a basic chat demo.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Threat Modeling for the Gaming Industry

Explore gaming industry security challenges, focusing on client-side logic, network protocols, account management, and untrusted platforms to enhance overall security and user experience.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OO RE with HexraysCodeXplorer

Explore object-oriented reverse engineering techniques for modern malware analysis, focusing on C++ code reconstruction and tools like HexRaysCodeXplorer for tackling complex malware frameworks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hopping on the CAN Bus

Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Hook, Line and Sinker - Pillaging API Webhooks

Explore techniques for exploiting API webhooks, including SSRF attacks that can lead to cloud compromise, and learn about unique attack vectors in modern web services.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

I Thought Writing a Technical Book Was Supposed to Be Fun?

Explore the journey of writing and publishing a 400-page security book, from initial concept to final product, with insights into the realities of the process.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes

Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Privacy-Friendly QR Codes for Identity

Explore secure QR code frameworks for identity verification, focusing on privacy features that allow selective attribute disclosure. Learn about SMART Health Cards and a new open-source specification.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Public, Verifiable, and Unbiasable Randomness - Wassat?

Explore randomness types, their importance, and applications. Learn about drand, a distributed randomness software, and its role in providing public, verifiable randomness as a service.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Passive Recon & Intelligence Collection Using Cyber-Squatted Domains

Explore passive intelligence gathering through domain squatting, including low-cost techniques, data analysis, and defensive strategies against this cyber threat.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk