Security Courses

0xdade

The Ethics of Prosecuting an Offensive Security Campaign

Explore ethical considerations in offensive security campaigns, including impacts on company morale, deception tactics, and maintaining professional integrity. Learn best practices for conducting ethical red team engagements.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

0xdade

CryptoLocker Deep-Dive - Tracking Security Threats on the Bitcoin Public Ledger

Explore WhiteRabbit, an open-source tool for tracking ransomware payments on Bitcoin's public ledger. Learn to leverage blockchain data for threat intelligence and cybersecurity investigations.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

0xdade

User Focused Security at Netflix - Stethoscope

Netflix's user-focused security approach: Stethoscope tool empowers employees to manage device security, enhancing overall protection through personalized recommendations and user-friendly interfaces.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

USENIX

Practical Kubernetes Security Learning using Kubernetes Goat

Explore Kubernetes security vulnerabilities using Kubernetes Goat, a "vulnerable by design" environment. Learn to assess and improve cloud-native infrastructure security posture through hands-on practice.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

USENIX

More than Smart Speakers - Security and Privacy Perceptions of Smart Home Personal Assistants

Explores users' perceptions of security and privacy in smart home assistants, revealing incomplete mental models and limited understanding of data handling, leading to inadequate threat models and coping strategies.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

USENIX

Computer Security and Privacy in the Interactions Between Victim Service Providers and Human Trafficking Survivors

Exploring technology's role in victim service provider-survivor interactions, balancing trust-building and risk mitigation for human trafficking survivors' recovery and empowerment.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

USENIX

BlackBox - A Container Security Monitor for Protecting Containers on Untrusted Operating Systems

Innovative container security architecture using a trusted monitor to protect data confidentiality and integrity from untrusted operating systems, with minimal performance impact.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

IEEE

Security Foundations for Application-Based Covert Communication Channels

Explore covert communication channels in applications, focusing on security foundations, techniques, and potential implications for network security and privacy.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

IEEE

Flawed, but Like Democracy We Don't Have a Better System - The Experts' Insights on the Peer Review Process of Evaluating Security Papers

Experts discuss insights on the peer review process for security papers, exploring flaws and potential improvements in academic evaluation.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

IEEE

How Does Usable Security Not End Up in Software Products - Results From a Qualitative Interview Study

Explore findings from qualitative interviews on the challenges of implementing usable security in software products, revealing insights for developers and security professionals.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

IEEE

TASHAROK - Using Mechanism Design for Enhancing Security Resource Allocation in Interdependent Systems

Explore mechanism design for optimizing security resource allocation in interconnected systems, enhancing overall protection and addressing interdependencies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

IEEE

The Correctness-Security Gap in Compiler Optimization

Explores how compiler optimizations can preserve functionality but violate security guarantees, proposing research to identify and mitigate security errors introduced during optimization.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

IEEE

Micro-Policies - Formally Verified, Tag-Based Security Monitors

Explore formally verified tag-based security monitors for low-level policies. Learn about dynamic sealing, compartmentalization, control-flow integrity, and memory safety implementation.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

IEEE

Signing Me onto Your Accounts through Facebook and Google - A Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services

Explores security vulnerabilities in popular web-based single sign-on systems, uncovering critical flaws that allow unauthorized access to user accounts on major platforms.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

IEEE

Security Analysis of the MLS Key Derivation

Explore the security aspects of MLS key derivation, focusing on analysis techniques and potential vulnerabilities in this cryptographic process.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk