Security Courses

Black Hat

An Insider's Guide to Cyber-Insurance and Security Guarantees

Explore the rise of cyber-insurance and security guarantees in the InfoSec industry. Learn about their impact, implementation challenges, and potential benefits for businesses and security vendors.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Building a Product Security Incident Response Team - Learnings From the Hivemind

Building a Product Security Incident Response Team: Best practices, templates, and actionable recommendations for small to medium companies to establish effective PSIRT processes and respond to vulnerability reports.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Black Hat

Security Through Design - Making Security Better by Designing for People

Explore user-centered design methods to create more effective and user-friendly security processes, tools, and communication strategies, improving corporate productivity and security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Black Hat

Analysis of the Attack Surface of Windows 10 Virtualization-Based Security

Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android

Explore Android's evolving security landscape, examining threats, vulnerabilities, and defensive measures. Learn how the Android Security Team addresses challenges and implements new features to protect users.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Black Hat

Dungeons Dragons and Security

Innovative security training using role-playing game to teach basic principles through building attack/defense scenarios. Engages neophytes by drawing parallels between game and real-world security challenges.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Black Hat

Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf

Uncovers critical security flaws in Apple's ZeroConf frameworks, demonstrating vulnerabilities in Multipeer Connectivity, Bonjour, and services like AirDrop, allowing impersonation and man-in-the-middle attacks.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking Hardware-Enforced Security With Hypervisors

Explore how hypervisors can bypass Intel's Trusted Execution Environment and capture keys from AES-NI instructions, revealing vulnerabilities in hardware-enforced security mechanisms and offering insights on robust deployment strategies.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

OSS Security Maturity - Time to Put on Your Big Boy Pants

Explore open source software risks, evaluation strategies, and a maturity model for organizations. Learn to manage vulnerabilities, assess costs, and implement effective security practices in product development.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Attacking BYOD Enterprise Mobile Security Solutions

Exposé des failles de sécurité des solutions BYOD et EMS, avec démonstration d'attaques et présentation d'un nouvel outil, Swizzler, pour contourner les protections sur appareils jailbreakés ou non.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Black Hat

SGX Secure Enclaves in Practice - Security and Crypto Review

Explore Intel's SGX technology for secure remote computation, including its implementation, development environment, cryptographic aspects, and potential applications in secure storage and delegation.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

An Inconvenient Trust - User Attitudes Toward Security and Usability Tradeoffs

Exploring user perspectives on encryption methods, balancing security and usability in digital communications. Insights from a study on key-exchange vs. key-directory models for everyday messaging.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Black Hat

Security Content Metadata Model with an Efficient Search Methodology for Real Time Monitoring

Efficient metadata model for security content, enabling fast searches and real-time monitoring. Integrates SCAP components, supports NLP queries, and aids in vulnerability resolution and malware analysis.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

The Kitchen's Finally Burned Down - DLP Security Bakeoff

Explore flaws in Data Loss Prevention solutions, including administrative interfaces and inspection engines, to understand their capabilities and shortcomings in protecting sensitive information.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

The Security Wolf of Wall Street - Fighting Crime With High-Frequency Classification

Explore real-time threat detection using machine learning on massive DNS data. Learn about Avalanche stream processing and NLP-Rank for automated phishing detection at scale.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk