Security Courses

DefCamp

White Hat Hacker Bounty Program to Improve Online Environment Security

Explore white hat hacker bounty programs and their role in enhancing online security. Learn about ethical hacking practices and their impact on improving digital environments.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

RSA Conference

Security in 2023 and Beyond - Automation, Analytics and Architecture

Explore how automation, analytics, and architecture are shaping cybersecurity and learn to apply these principles to protect your organization against evolving digital threats.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

media.ccc.de

IoT-Security nach ETSI/EN303645

Einblick in die ETSI-Norm EN 303 645 für IoT-Sicherheit: Aufbau, Inhalte und Best Practices zur Umsetzung eines ganzheitlichen Ansatzes für sichere Verbraucher-IoT-Geräte.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Rolling Your Own Security Team for Fun and No Profit at All

Explore the evolution, challenges, and lessons of the Arch Linux Security Team. Learn how to establish and contribute to a distro security team, gaining insights into efficient practices and future improvements.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

media.ccc.de

TrustZone-M - Breaking ARMv8-M's Security

Exploring hardware attacks on ARM Cortex-M processors, demonstrating vulnerabilities in security features like TrustZone-M. Includes open-source tools for fault-injection testing and real-world examples of bypassing chip security measures.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Security Nightmares 0x14

Jährlicher Rückblick und Ausblick auf IT-Sicherheitstrends, Buzzwords und absehbare Entwicklungen. Humorvolle Betrachtung von KI-Konflikten, Blockchain-Exorzismus und möglichen IT-Sicherheits-Wettervorhersagen.

• YouTube
• 1 hour 11 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Breaking Microsoft Edge Extensions Security Policies

Uncover vulnerabilities in Microsoft Edge extensions, exploring permission bypasses, data theft, and security policy breaches. Learn about browser extension security and its impact on user privacy.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Physical Unclonable Functions - The Future Technology for Physical Security Enclosures?

Explore the evolution of physical security enclosures for Hardware Security Modules, from traditional methods to innovative Physical Unclonable Functions (PUFs) technology, discussing challenges and future prospects.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Dissecting the AMD Platform Security Processor

Explore AMD's Platform Security Processor: its role in system startup, runtime services, and memory access. Gain insights into reverse-engineering efforts and potential security implications.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Blinding Endpoint Security Solutions - WMI Attack Vectors

Explore new WMI attack vectors that disable EDR/AV/SIEM solutions. Learn about WmiCheck, a tool for detecting OS attacks. Discuss WMI architecture weaknesses and reliable event collection methods.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip

Exploración de vulnerabilidades en el chip Titan M de Google, desde análisis estático hasta ejecución simbólica dinámica. Incluye demostración de explotación de CVE-2022-20233 para obtener ejecución de código.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Security Across Development Life Cycle in Cloud-Native

Explora buenas prácticas de seguridad en el ciclo de desarrollo de software cloud-native, abordando contenedores, Kubernetes, infraestructura como código y cargas de trabajo en la nube.

• YouTube
• 2 hours 11 minutes
• Self-Paced
• Free Video

Ekoparty Security Conference

Istio Service Mesh Security

Explora la seguridad en Istio Service Mesh con Diego Chavez. Aprende prácticas defensivas y ofensivas para aplicaciones en la nube, enfocadas en DevSecOps y microservicios.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Providing Reliability to GCP with Security Chaos Engineering

Explora cómo mejorar la confiabilidad en Google Cloud Platform mediante ingeniería del caos de seguridad, aplicando prácticas DevSecOps para fortalecer aplicaciones en la nube.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Ekoparty Security Conference

Demystifying Mobile Security with a COVID App - Mobile Hacking

Explore Android app components, hacking tools, and Mobile Top 10 through a COVID app analysis. Gain insights into Android app functionality and mobile security vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk