Security Courses

Black Hat

The Tactical Application Security Program - Getting Stuff Done

Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Black Hat

Behind the Scenes of iOS Security

Explore iOS security mechanisms including HomeKit, Auto Unlock, iCloud Keychain, Data Protection, and JIT hardening. Learn about Apple's innovative approaches to protect user data and enhance mobile security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

HTTP Cookie Hijacking in the Wild - Security and Privacy Implications

Explores security vulnerabilities in websites with partial HTTPS deployment, revealing how cookie hijacking can expose sensitive user data and functionality across major online platforms.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Bypassing Browser Security Policies for Fun and Profit

Explore mobile browser vulnerabilities and security policy bypasses, including Same Origin Policy and Content Security Policy. Learn testing methodologies and see real-world examples of Android browser exploits.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

In-Security of Backend-As-A-Service

Explore the vulnerabilities in Backend-as-a-Service solutions for mobile apps, revealing widespread security flaws and potential data breaches in cloud-based storage systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

AndroBugs Framework - An Android Application Security Vulnerability Scanner

Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

What You Need to Know About the Changing Regulatory Landscape in Information Security

Explore the evolving regulatory landscape in information security with experts discussing challenges, communication gaps, and strategies for navigating policy changes in Europe and beyond.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Black Hat

Taxonomic Modeling of Security Threats in Software Defined Networking

Comprehensive analysis of security threats in Software Defined Networking, exploring vulnerabilities, potential attack scenarios, and providing recommendations for effective countermeasures.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

These Are Not Your Grand Daddy's CPU Performance Counters - CPU Hardware Performance Counters For Security

Explore advanced CPU performance counters for enhanced platform security, including RowHammer defense and ROP mitigation. Learn practical techniques with real-world exploit demonstrations and performance impact analysis.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

The Tactical Application Security Program - Getting Stuff Done

Aprenda a implementar um programa de segurança tático e eficaz, focando em avaliações ágeis, resposta a incidentes e gerenciamento de bugs. Descubra por que abordagens táticas podem ser mais efetivas que estratégias de longo prazo.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

Why Security Data Science Matters and How It's Different

Explore security data science challenges and solutions, including machine learning for attack detection, threat intelligence, and malware analysis, with focus on overcoming unique security-specific obstacles.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Broadcasting Your Attack - Security Testing DAB Radio in Cars

Explore vulnerabilities in DAB radio systems in cars, potential security risks, and implications for automotive cybersecurity using Software Defined Radio and custom testing tools.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

How to Implement IT Security After a Cyber Meltdown

Implementing IT security post-cyber attack: strategies, challenges, and lessons learned from Saudi Aramco's 2012 incident and subsequent security unit establishment at Aramco Overseas Company.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Android Security State of the Union

Explore key factors driving Android security using data from millions of devices, establishing a baseline and identifying areas for community focus and research.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

Defeating Machine Learning - What Your Security Vendor Is Not Telling You

Explore attacker strategies to defeat machine learning-based security defenses, analyze industry issues enabling these vulnerabilities, and discover novel data sourcing solutions for improved protection.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk