Security Courses

nullcon

Engineering Better Security at Facebook

Explore Facebook's approach to enhancing security through developer-focused tools and practices, addressing vulnerability prevention and detection in large-scale software development.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

nullcon

ICS SCADA Security Analysis of a Beckhoff CX5020 PLC

Análisis de seguridad de un PLC Beckhoff CX5020 utilizado en sistemas SCADA, revelando vulnerabilidades y demostrando formas de obtener control sobre el programa y el sistema operativo.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

nullcon

O'Dea Assertions Untwining the Security of the SAML Protocol

Explore SAML protocol security, including XML signature attacks, attribute implementation, and fuzzing techniques. Learn to identify and mitigate vulnerabilities in SSO systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

nullcon

The Security Challenge

Keynote explores rising security challenges, sophisticated threats, and future risks in the digital economy, emphasizing the need for unified security to protect data and infrastructure.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

nullcon

Bug Bounty Programs - Crowd Sourcing Security

Explore Mozilla's bug bounty program, its history, benefits, and challenges. Learn how to implement similar programs and their advantages over black market alternatives.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Answer to Life the Universe and Everything Offensive Security

Explore offensive security through machine learning, sandbox detection, and attack graph theory. Learn about simulation, Q-learning, and adversarial attacks in this comprehensive overview.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Intermediate Physical Security

Explore physical security vulnerabilities and bypass techniques for padlocks, doors, and access control systems. Learn about shims, overlifting, keyed alike systems, and more.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Enterprise Security Monitoring - Seeing Clearly with Security Onion - Wes Lambert

Learn to implement enterprise-level security monitoring using Security Onion, covering tools, data types, interfaces, and deployment strategies for effective threat detection and analysis.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

How to Influence Security Technology in Kiwi Underpants

Explore innovative security techniques for kiwi underpants, covering jailbreaks, Microsoft vulnerabilities, credential protection, and cryptography in this engaging and unconventional talk.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Infrastructure Based Security

Explore infrastructure-based security, covering cloud, IoT, hiring experts, historical perspectives, and modern challenges. Learn strategies to implement robust security measures in today's complex digital landscape.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

War Stories on Embedded Security Pentesting IoT Building Managers and How to Do Better

Explore embedded security vulnerabilities in IoT building managers, learn pentesting techniques, and discover best practices for improving IoT security in this insightful talk.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Not a Security Boundary - Bypassing User Account Control

Explore UAC bypass techniques, integrity levels, and security monitoring. Learn about registry manipulation, file operations, and PowerShell scripting for enhancing Windows security knowledge.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

An ACE in the Hole - Stealthy Host Persistence via Security Descriptors

Explore stealthy host persistence techniques using security descriptors, focusing on offensive implications, methodologies, and case studies for various Windows objects and services.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Subverting Trust in Windows - A Case Study of the How and Why of Engaging in Security Research

Explore Windows security research through a case study on subverting trust, covering dynamic analysis, code signatures, and PowerShell, with insights on validating trust and lessons learned.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Does DoD Level Security Work in the Real World

Exploring DoD-level security's real-world effectiveness, risk parameters, and building a culture of security through a comprehensive lifecycle approach.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk