Security Analysis Courses and Certifications

media.ccc.de

Hacking Apple's USB-C Controller: ACE3 Security Analysis and Exploitation

Delve into advanced hardware hacking techniques to explore Apple's ACE3 USB-C controller, uncovering vulnerabilities through side-channel analysis and electromagnetic fault-injection methods.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Low Level Learning

Cisco CVE Analysis - Critical Vulnerabilities and Network Security Implications

Discover critical Cisco CVEs and their network security implications through expert analysis of recent vulnerabilities and protection strategies.

• YouTube
• 11 minutes
• On-Demand
• Free Video

DEFCONConference

Defeating VPN Always-On: Security Control Analysis and Bypass Methods

Discover security vulnerabilities in VPN Always-On implementations, exploring bypass techniques and hardening strategies for better network protection and data leak prevention.

• YouTube
• 40 minutes
• On-Demand
• Free Video

John Hammond

Godot Game Engine Malware Analysis and Security Implications

Explore how malicious actors exploit the Godot game engine as a sophisticated malware delivery system, examining detection evasion techniques and security implications.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Cooper

Are Your VoLTE and VoWiFi Calls Secure - Security Analysis of Voice Protocols

Explore security vulnerabilities in VoLTE and VoWiFi, including sniffing attacks, key extraction, and SIP header injections. Learn about potential risks and mitigation strategies for modern voice communication technologies.

• YouTube
• 35 minutes
• On-Demand
• Free Video

NDC Conferences

Security Static Analysis - Avoiding an Angry Mob of Engineers

Practical insights on implementing security static analysis tools effectively, avoiding common pitfalls, and gaining engineer buy-in for improved code security without disrupting workflows.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

NahamSec

Bug Bounty Techniques: Recon, JavaScript Analysis, and Web Security Tools

Insightful discussion on bug bounty techniques, covering recon, JavaScript analysis, WAF bypassing, and utilizing the Wayback Machine for effective vulnerability discovery.

• YouTube
• 2 hours 10 minutes
• On-Demand
• Free Video

Black Hat

Analysis of the Attack Surface of Windows 10 Virtualization-Based Security

Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Security Onion

Introduction to Data Analysis with Security Onion and Other Open Source Tools

Learn data analysis techniques for cybersecurity using open-source tools like Security Onion and Python. Explore PANDAS, ElasticSearch, frequency analysis, and time series analysis for effective threat hunting.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Black Hat

Javascript Static Security Analysis Made Easy with JSPrime

Explore JSPrime, a user-friendly tool for JavaScript static security analysis. Learn about its features, including library-aware scanning, variable tracing, and minimal false positives, to enhance your code security.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

LASCON

Static Analysis Security Testing for Dummies and You

Demystifying Static Analysis Security Testing: Learn how SAST tools work, customize them for your needs, and integrate them into your development pipeline for improved application security.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Practical Static Analysis for Continuous Application Security

Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

Internet-Scale Analysis of AWS Cognito Security

Reveals findings from large-scale AWS Cognito security analysis, exposing vulnerabilities in identity pools granting access to thousands of S3 buckets, DynamoDB tables, and Lambda functions.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

IEEE

An Experimental Security Analysis of an Industrial Robot Controller

Experimental security analysis of industrial robot controllers, revealing vulnerabilities and potential attacks that can compromise precision, control logic, and safety in automated manufacturing environments.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Security Onion

Quick Malware Analysis with Security Onion - Malware-Traffic-Analysis.net PCAP from 2021-08-05

Analyze malware traffic using Security Onion, focusing on a pcap file from malware-traffic-analysis.net. Learn practical techniques for identifying and investigating malicious network activity.

• YouTube
• 16 minutes
• On-Demand
• Free Video