NorthSec Courses

AMITT - Defensive Framework to Counter Disinformation

Explore AMITT framework updates for combating disinformation, including new countermeasures. Learn about recent events and practical applications in influence operations defense.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Social Bots - Malicious Use of Social Media

Analyse de l'utilisation malveillante des médias sociaux pendant l'élection fédérale canadienne de 2019, examinant le rôle des bots sociaux dans la manipulation du discours politique et la désinformation.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Privacy Without Monopoly - Beyond Feudal Security

Exploring the tension between privacy and monopoly in tech, advocating for interoperability as a solution to enhance security without compromising user rights or enabling corporate dominance.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Damn GraphQL - Attacking and Defending APIs

Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Repo Jacking - How Github Usernames Expose Projects to RCE

Explore 'repo jacking', a widespread supply chain vulnerability affecting 70,000+ open-source projects. Learn its causes, exploitation methods, and mitigation strategies to protect your GitHub-dependent projects.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Cryptography Do's and Don'ts in 2021

Explore cryptographic best practices, common pitfalls, and secure implementations for random number generation, encryption, hashing, and more. Essential knowledge for designing and auditing cryptographic systems.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

You're Not an Idiot

Explore imposter syndrome, self-doubt, and personal growth in tech. Learn to embrace uniqueness and overcome negative self-perceptions in this empowering talk.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

How Crypto Gets Broken - by You

Explore cryptography fundamentals, encryption methods, and attack techniques in this comprehensive workshop. Learn about hashing, ciphers, and practical approaches to breaking crypto systems.

• YouTube
• 3 hours 22 minutes
• Self-Paced
• Conference Talk

Unicode Vulnerabilities That Could Byte You

Explore Unicode vulnerabilities in web applications, including normalization, capitalization misuse, and encoding conversion risks. Learn about HostSplit, HostBond attacks, and Punycode exploitation.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Regions Are Types, Types Are Policy, and Other Ramblings

Explore innovative software hardening using typed region-based policies. Learn how to apply this approach to protect against vulnerabilities and enhance system security beyond traditional compiler techniques.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

IOMMU and DMA Attacks

Exploring IOMMU and DMA attacks, focusing on security implications, operating system integration, and techniques to bypass protections, particularly on macOS up to version 10.12.4.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

High Speed Fingerprint Cloning - Myth or Reality

Explore the impact of 3D printing on fingerprint cloning and its security implications for devices. Learn about real-world attack scenarios and the level of sophistication needed to bypass biometric authentication.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Stay Quantum Safe - Future-Proofing Encrypted Secrets

Explore quantum-safe cryptography's progress, standardization, and implementation in TLS, SSH, and VPN. Learn to future-proof encrypted data against potential quantum computer decryption.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

The Long Journey to a Multi-Architecture Disassembler

Explore multi-architecture disassembly techniques, from intuitive strategies to advanced concepts like non-returning calls, type libraries, and identifying library routines.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Post-Quantum Manifesto

Explore post-quantum cryptography, its impact on public key systems, and emerging hard problems in lattice-based, multivariate, and code-based cryptography for future security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk