BruCON Talks & Presentations

BruCON Security Conference

Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing

Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Browser Exploits - Grab Them by the Collar

Explore a novel browser exploit detection technique using Live Network Stream Code Injection, offering agentless protection against modern browser-based attacks without OS API hooking or code injection.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Detecting Malware Even When It Is Encrypted

Innovative machine learning approach for detecting malware in encrypted HTTPS traffic using Bro IDS logs, without decryption. Focuses on behavioral features and connection 4-tuples for improved accuracy.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

New Adventures in Active Defense, Offensive Countermeasures, and Cyber Deception

Explore innovative strategies in active defense and offensive cybersecurity with expert John Strand, uncovering cutting-edge techniques to protect and secure digital assets.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Unified DNS View to Track Threats

Explore innovative techniques for tracking cyber threats using a unified DNS view, enhancing network security and threat intelligence capabilities.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Shims For The Win - Case Study and Investigative Techniques for Hijacked Application Compatibility Infrastructure

Explore hijacked Application Compatibility Infrastructure through a case study, learning investigative techniques for detecting and analyzing shim-based attacks in Windows systems.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

CVE-Search

Explore CVE-Search, a free tool for collecting, searching, and analyzing software vulnerabilities. Learn how to enhance your cybersecurity practices with this powerful open-source solution.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

OSXCollector - Automated Forensic Evidence Collection & Analysis for OS X

Automated forensic evidence collection and analysis tool for OS X, streamlining incident response and threat hunting processes for security professionals.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Nightmares of a Pentester

Explore real-world challenges and unexpected scenarios faced by penetration testers, offering insights into the complexities of cybersecurity assessments and ethical hacking.

• YouTube
• 1 hour 10 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Brain Waves Surfing - Insecurity in EEG Technologies

Explore the vulnerabilities in EEG technologies and their potential impact on brain-computer interfaces, neurosecurity, and privacy in this eye-opening presentation by Alejandro Hernandez.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Levelling Up Security at Riot Games

Explore Riot Games' innovative approach to cybersecurity, focusing on scalable solutions, threat modeling, and fostering a security-conscious culture within the gaming industry.

• YouTube
• 1 hour 16 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Cyber Necromancy - Resurrecting the Dead

Explore reverse engineering of game servers and network protocols to revive Metal Gear Online. Learn techniques from packet logs to client code disassembly in this cybersecurity deep dive.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Cyberwar - Not What We Were Expecting

Explores the reality of cyberwar, challenging common misconceptions and examining its personal, ideological nature. Discusses historical context, current conflicts, and future implications for individuals and society.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

DNS as Critical Infrastructure - Do You Know Where Your Domain Is?

1 review

Explores DNS as critical infrastructure, examining its evolution, security measures, and operational challenges. Analyzes ccTLD operations, hosting risks, and adoption of security features like DNSSEC and CAA records.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Being a Cyberdefender - Behind the Curtains

Explore the realities of cyberdefense, including incident management, communication challenges, and maintaining work-life balance in this insightful talk by a seasoned professional.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk