Security Courses

Black Hat

Quantum Security and Cryptography - You Are - Probably - Doing it Wrong

Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Black Hat

Stopping Snake Oil with Smaller Healthcare Providers - Addressing Security with Actionable Plans

Practical strategies for small healthcare providers to protect against cyber threats, focusing on actionable plans and cost-effective solutions to safeguard patient data and prevent ransomware attacks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Black Hat

The Dark Side of the Cloud - How a Lack of EMR Security Controls Helped Amplify the Opioid Crisis

Explores how manipulation of an Electronic Health Records system contributed to the opioid crisis, highlighting the role of inadequate security controls in amplifying prescription drug abuse.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Black Hat

When Lightning Strikes Thrice - Breaking Thunderbolt 3 Security

Explore Thunderspy attacks that compromise Thunderbolt security, revealing vulnerabilities in device authentication and DMA protection across Thunderbolt 1, 2, and 3 interfaces.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Black Hat

Room for Escape - Scribbling Outside the Lines of Template Security

Explore vulnerabilities in Content Management Systems, focusing on template security issues and potential exploits in collaboration platforms. Learn about safe mode attacks and object data validation.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds

Systematic study reveals vulnerabilities in IoT cloud platforms' MQTT integration, exposing risks of device control, DoS attacks, data theft, and status manipulation.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Black Hat

Infighting Among Russian Security Services in the Cyber Sphere

Explore the complex dynamics of Russian security agencies in cyberspace, examining conflicts, international campaigns, and their implications for global cybersecurity.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

Finding Our Path - How We're Trying to Improve Active Directory Security

Explore strategies to enhance Active Directory security, focusing on enumeration, risk assessment, and mitigation techniques for networks of all sizes.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Black Hat

Behind the Scenes of Intel Security and Manageability Engine

Deep dive into Intel's security architecture, exploring firmware environments, feedback fuzzing, and queue management techniques applicable to various systems and fuzzers.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Black Hat

Portable Automotive Security Testbed with Adaptability

Portable automotive security testbed for easy demonstration and evaluation of security techniques. Features adaptability, physical controller, ECU simulation, and instant demonstration capabilities.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Black Hat

Come Join the CAFSA - Continuous Automated Firmware Security Analysis

Processes and tools for continuous automated firmware security analysis in device development, integrating security into the development and release flow for effective results.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Black Hat

The Cost of Learning from the Best - How Prior Knowledge Weakens the Security of Deep Neural Networks

Explores how using pre-trained image classification models in object detection weakens security of deep neural networks, presenting alarming results from a measurement study.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Black Hat

I'm Unique, Just Like You - Human Side-Channels and Their Implications for Security and Privacy

Explore unintentional human-generated identifiers in digital security, their uses in attack and defense, and countermeasures. Gain insights into "human side-channels" and their privacy implications.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

I'm Unique, Just Like You - Human Side-Channels and Their Implications for Security and Privacy

Explore human side-channels: unintentional digital identifiers from human behaviors, their implications for security and privacy, and potential countermeasures.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

SDL at Scale - Growing Security Champions

Explore strategies for building a successful Security Champion program, including role value, team commitment, champion selection, and expected benefits for all stakeholders.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk