Security Courses

Black Hat

ZEROing Trust - Do Zero Trust Approaches Deliver Real Security?

Analyze effectiveness of zero trust security across modern OS platforms, examining measurable properties to establish trust in various threat scenarios.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies

Exposing security vulnerabilities in electronic trading platforms, highlighting risks in mobile, desktop, and web applications for investors of all levels.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Subverting Sysmon - Application of a Formalized Security Product Evasion Methodology

Explore methodologies for subverting Sysmon, a security monitoring tool, through data collector strategies and configuration analysis to enhance adversarial techniques against enterprise defenses.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Two-Factor Authentication, Usable or Not? - A Two-Phase Usability Study of the FIDO U2F Security Key

Explore the usability of FIDO U2F Security Keys for two-factor authentication through a comprehensive two-phase study, evaluating effectiveness and user experience.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Black Hat

Legal Landmines - How Law and Policy are Rapidly Shaping Information Security

Explore how evolving laws and policies are reshaping information security in the digital age, examining key legal challenges and their impact on technology and data protection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Detecting Security Hazards in SEAndroid Vendor Customizations via Large-Scale Supervised ML

Explore VSPMiner, a tool using supervised ML to detect vulnerable SEAndroid policies. Learn about differential analysis, classification optimization, and real-world applications in vendor customizations.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

The Apple of Your EFI - An Updated Study of EFI Security

Comprehensive analysis of Apple's EFI security, examining updates across Mac models and OS versions. Explores EFI update mechanisms and controls, providing insights into Apple's security support practices.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Black Hat

Firmware is the New Black - Analyzing Past Three Years of BIOS - UEFI Security Vulnerabilities

Explore the rise of firmware vulnerabilities in recent years, their impact on system security, and the challenges in mitigating these threats in BIOS/UEFI environments.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Electronegativity - A Study of Electron Security

Comprehensive analysis of Electron's security model, isolation mechanisms, and vulnerabilities in Electron-based applications. Explores IPC messaging, preloading, and design weaknesses.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Lessons Learned in Influencing Security Stakeholders Inside and Outside Your Organization

Explore strategies for influencing security stakeholders through cyber wargaming, including technical architecture, business value, and lessons learned from real-world implementations.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

So You Want to Market Your Security Product

Explore FTC regulations on deceptive advertising in security product marketing. Learn to avoid violations and create compliant, ethical promotional strategies.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Comparing Security Curricula and Accreditations to Industry Needs

Análisis de currículos de seguridad y acreditaciones frente a las necesidades de la industria, examinando su desarrollo, fuerzas que los moldean y soluciones propuestas para acreditar programas.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

Betting Against the House - Security and Stability When the Odds are Against You

Insights on designing and securing enterprise networks under constraints, drawing from Black Hat's network experiences. Covers evolution, challenges, and future directions in network management.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Black Hat

Domo Arigato, Mr. Roboto - Security Robots a la Unit-Testing

Explore security unit testing for custom code, focusing on inoculating applications, identifying endpoints, and addressing common vulnerabilities through automated testing frameworks.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Black Hat

Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies

Uncover critical security vulnerabilities in trading technologies, including unencrypted data, DoS risks, and weak authentication. Learn about responsible disclosure and recommendations for safer trading practices.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk