Security Courses

Association for Computing Machinery (ACM)

Investigating System Operators' Perspective on Security Misconfigurations

Explore system operators' views on security misconfigurations, their causes, and potential solutions in this insightful investigation of cybersecurity practices and incident prevention.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Association for Computing Machinery (ACM)

The Multi-User Security of GCM, Revisited - Tight Bounds for Nonce Randomization

Revisiting GCM's multi-user security with new concrete bounds, focusing on nonce re-use across users and re-keying impacts. Provides refined parameterization of adversarial resources for improved security analysis.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

nullcon

Pushing Security Left by Mutating Byte Code

Explore techniques for building secure software through bytecode mutation, including obfuscation, encryption, and cross-compilation to protect against reverse engineering and enhance product security.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

nullcon

macOS Security Features Bypasses by Example

Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

nullcon

An Azure Sphere Security Breakdown

Explore Azure Sphere IoT security features, vulnerabilities discovered during Microsoft's research challenge, and a privilege escalation chain for acquiring Azure Sphere Capabilities.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

nullcon

Telecom Security Challenges in 5G

Explore 5G telecom security challenges, improvements, and implementation issues. Learn about virtualization risks, DDOS threats, and industry initiatives like NESAS in this comprehensive overview.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

nullcon

Security Research and Disclosure - The Unauthorized Biography

Explore the evolution of security research and disclosure, from historical "unbreakable locks" to modern challenges in IoT, blockchain, and AI, with insights on ethical hacking and vulnerability reporting.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

nullcon

Enterprise Security Architecture - Is It Time for a Booster Shot?

Explore evolving enterprise security architecture beyond traditional layered defense, addressing modern challenges like advanced hacking, cloud adoption, and remote work to enhance organizational cybersecurity.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

nullcon

Insecurity of Smart Energy Meters - A Hardware Security Perspective

Explore hardware security vulnerabilities in smart energy meters, covering threat classifications, current trends, and testing methodologies for advanced metering infrastructure and grid security.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

nullcon

Security Compliance in the ICS Environment

Explore ICS/OT security compliance beyond vulnerability assessment. Learn to build a comprehensive security program integrating external and internal regulations for critical industrial environments.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

nullcon

Assessing the Security Posture of ICS Infrastructure Using ISA 62443 Standard

Explore industrial cybersecurity, ICS threats, and resilience strategies using ISA-62443. Learn to assess and protect critical infrastructure from cyber attacks in the Energy, Resources, and Industrials sector.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

nullcon

Crouching Hacker, Killer Robo? Removing Fear from Cyber-Physical Security

Exploring cyber-physical security beyond fear-mongering, this talk examines root causes of vulnerabilities and proposes better approaches to embed security analysis in system design.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

nullcon

Basic Security Analysis on Data and Information

Learn essential digital security techniques for analyzing data and information, focusing on threat identification, communication safety, and practical tools for journalists and civil society groups.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

nullcon

Injecting Security Into Web Apps With Runtime Patching And Context Learning

Explore advanced web application security techniques using Runtime Application Self Protection (RASP) to prevent code injections and other vulnerabilities through dynamic analysis and patching.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

nullcon

DevOpSec - Rapid Security in the AWS Cloud

Explore DevOpSec practices for rapid, secure AWS deployments. Learn collaborative strategies for development, operations, and security teams to achieve compliance in agile environments.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk