Conference Talks

RSA Conference

The Five Most Dangerous New Attack Techniques

A briefing on the five most dangerous new attack techniques, emerging attack vectors, and how organizations can prepare for them.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

RSA Conference

Android Rootkits - Analysis from Userland and Kernelland

Analyzing Android rootkits with live memory forensics, dynamic binary instrumentation, and applied machine learning to generate actionable threat intelligence.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

My Phishing Kit Burnbook

A year of phishing kit research reveals the cybercrime groups behind SaaS-like kits and introduces PhishPond for detection and analysis.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

Analyzing Windows Malware on Linux - Getting Started Tips and Examples

Get started analyzing Windows malware with free Linux tools and the REMnux toolkit.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

CVSS Scores Are Dead - Let’s Explore 4 Alternatives

Explore limitations of CVSS and compare risk-based vulnerability scoring alternatives that account for exploits, patches, and deployment scale.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

A Case Study of the Capital One Data Breach

A technical case study of the 2019 Capital One data breach examines attack methods, NIST-based compliance requirements, and corporate culture’s effect on cybersecurity.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

What's New with the CIS Controls v8

A comparison of the major changes from CIS Controls v7.1 to v8 and how the rewrite reflects modern computing and infrastructure environments.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RSA Conference

SolarWinds - What Really Happened?

SolarWinds shares what happened in its major supply chain attack and the tradecraft lessons for preventing similar threats.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

RSA Conference

How to Tell the Right Cyber-Story to Executives and Board Members

Learn to use cybersecurity metrics and executive-focused storytelling to justify security strategies and initiatives to C-level leaders and boards.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

RSA Conference

What Really Happens When Hackers Attack Medical Devices

Examines how hackers exploit medical devices as entry points into healthcare networks, covering FDA regulation and a live attack demonstration with device security code.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

RSA Conference

Logging in the Cloud - From Zero to Incident Response Hero

Learn which AWS, Azure, and GCP logs to enable and configure for effective incident response.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

RSA Conference

Are Spoof-Proof Biometrics Really Possible?

Explore spoof attacks against face, iris, and fingerprint biometrics, and how testing, standards, and privacy practices support secure implementations.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

RSA Conference

Attacking Machine Learning - On the Security and Privacy of Neural Networks

Explore how adversarial examples fool neural network classifiers and how trained models can leak private training data.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

USENIX Enigma Conference

Why Is Usable Security Hard, and What Should We Do About It?

Chrome security UI case studies reveal why applying usable-security principles is difficult under real-world constraints.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

BruCON Security Conference

Defeating EDRs Using Dynamic Invocation in C#

A conference talk on bypassing endpoint detection and response through dynamic invocation techniques in C#.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk