Homeland Security Courses

Black Hat

Security Industry Call-to-Action - We Need a Cloud Vulnerability Database

Examines why conventional CVE workflows fail for cloud vulnerabilities and proposes an open, cloud-friendly vulnerability identifier and database.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Hand in Your Pocket Without You Noticing - Current State of Mobile Wallet Security

A detective-story investigation reveals how flaws in Apple Pay, Google Pay, and Samsung Pay can enable contactless purchases from locked or stolen phones.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Black Hat

Bridging Security Infrastructure Between the Data Center and AWS Lambda

Learn how Square connected AWS Lambda with its data-center service mesh using SPIFFE workload identity and synchronized application secrets.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

Embedding a Human-Centric Approach Into a Global Cyber Security Program

A human-centric cybersecurity keynote that challenges the weakest-link myth and reframes training, systems design, and incident learning around how people behave.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Black Hat

How I Can Unlock Your Smart Door - Security Pitfalls in Cross-Vendor IoT Access Control

Exposes how cross-cloud delegation flaws in smart-home IoT access control can let attackers retain or expand access to locks and other devices.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Black Hat

Complexity Killed Security

An exploration of how growing hardware and software complexity creates security vulnerabilities through side-channel attacks, speculative execution, address translation, and voltage faults.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Black Hat

Healthscare – An Insider's Biopsy of Healthcare Application Security

A dissection of healthcare applications exposing design flaws, credential weaknesses, privilege escalation, and patient-data and privacy risks.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Black Hat

Engineering Empathy - Adapting Software Engineering Principles and Process to Security

A role reversal between security and runtime engineers shows how security teams can scale by adopting software engineering principles, planning, feedback, and DevOps culture.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Black Hat

Security Research on Mercedes-Benz - From Hardware to Car Control

A connected-car security research case study tracing Mercedes-Benz systems from hardware and firmware reverse engineering to cloud control and fleet response.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

Emulating Samsung's Baseband for Security Testing

Emulate Samsung’s Shannon baseband to make cellular security testing reproducible, scalable, and fuzzable.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking Through Another Side - Bypassing Firmware Security Boundaries from Embedded Controller

Reverse-engineering a Lenovo ThinkPad’s embedded controller reveals how EC update authentication can bypass Intel BIOS Guard firmware protections.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

Behind the Scenes of iOS and Mac Security

A technical look at Apple's hardware-backed security architecture, spanning Mac secure boot and DMA defenses, iOS kernel integrity, and privacy-preserving offline device finding.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking the Attack Graph - How to Leverage Graphs to Strengthen Security in a Domain Environment

Shows defenders how to use attack graphs to reduce attack paths, detect reconnaissance and lateral movement, and investigate compromises in domain environments.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Black Hat

CLKscrew - Exposing the Perils of Security-Oblivious Energy Management

Explore CLKSCREW, a software-based fault attack that manipulates energy management to corrupt trusted execution environments and bypass RSA signature verification without physical access.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

RSA Conference

Unraveling the Recipe for Resilient Enterprise Security Operations

A webcast on building resilient security operations, using risk indicators and active defense to guide decisions during ransomware incidents.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk