Security Courses

Bill Buchanan OBE

Intro to Security and Network Forensics - Encryption Basics

Comprehensive overview of encryption fundamentals, covering methods, key-based systems, cracking techniques, and practical applications like PGP. Ideal for cybersecurity beginners and professionals.

• YouTube
• 1 hour 1 minute
• On-Demand
• Free Video

Bill Buchanan OBE

Introduction to Security and Network Forensics - Intrusion Detection Systems

Explore intrusion detection systems, security agents, and network forensics techniques. Learn about policy definition, user profiling, and honeypots in this comprehensive security overview.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Bill Buchanan OBE

Introduction to Security and Network Forensics - Lecture 1

Comprehensive overview of security fundamentals, covering threats, defense strategies, and network models for a solid foundation in cybersecurity principles.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Hussein Nasser

Transport Layer Security - TLS 1.2 and 1.3 Explained by Example

Comprehensive overview of TLS protocol, covering HTTP, HTTPS, TLS 1.2 handshake, and TLS 1.3 improvements. Explains key concepts and encryption methods for secure client-server communication.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Black Hat

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip

Explore vulnerability research on Google's Titan M security chip, including fuzzing techniques, impact analysis, and mitigation strategies for modern device protection.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Cooper

How to Better Integrate Continuous Improvement into Security Monitoring

Learn strategies to enhance security monitoring through continuous improvement, focusing on reducing false positives and optimizing processes for better threat detection and response.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Cooper

IPC - The Broken Dream of Inherent Security

Explore vulnerabilities in inter-process communication (IPC) systems, including network sockets, Windows named pipes, and USB devices. Learn about potential attacks and mitigation strategies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Cooper

Trojans in SS7 - How They Bypass All Security Measures

Explore SS7 vulnerabilities and Trojan attacks that bypass security measures, focusing on signal messages, numbering plans, and location tracking in mobile networks.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Cooper

The Metabrik Platform - Rapid Development of Reusable Security Tools

Explore the Metabrik Platform for rapid security tool development. Learn to create reusable components, improve existing tools, and solve complex security challenges efficiently.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Cooper

Secrets in Soft Token - A Security Study of HID Global Soft Token

Unveiling vulnerabilities in HID Global Soft Token's Android app, exploring cryptographic weaknesses that could allow attackers to clone configurations and potentially discover user PINs through brute force.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Cooper

Handling of Security Requirements in Software Development Lifecycle

Explore handling security requirements throughout software development, covering scalability, use cases, and practical demonstrations with insights on data protection and integration.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

International PHP Conference

Why You Shouldn't Care About Security

Explore OAuth and OpenID Connect for simplified API security. Learn about claims, scopes, and integrating Auth0 with API platforms to streamline development and focus on core functionality.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

PHP UK Conference

Security Theatre

Explore web security threats, vulnerabilities, and best practices. Learn about encryption, authentication, and strategies to protect against hacks and social engineering in this comprehensive talk.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Black Hat

Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet

Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Black Hat

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk