Security Courses

Black Hat

Cloning 3G - 4G SIM Cards With A PC And An Oscilloscope - Lessons Learned In Physical Security

Reveals vulnerabilities in 3G/4G SIM cards, demonstrating how to clone them using differential power analysis. Discusses implications for mobile network security and showcases practical experiments.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Black Hat

Internet Plumbing for Security Professionals - The State of BGP Security

Explore BGP security, its vulnerabilities, and practical countermeasures to build trust in the Internet's foundation. Learn about routing leaks, hijacking risks, and implementation strategies for a more secure network infrastructure.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Scala Security - Examining the Play and LiftWeb Frameworks

Explore security aspects of Scala's Play and LiftWeb frameworks, including OWASP Top 10 vulnerabilities, exploitation mitigations, and a new Scala library for SSRF prevention.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

Hadoop Security - Seven Ways to Kill an Elephant

Explore Hadoop security challenges and solutions in Big Data environments. Learn seven key strategies to mitigate risks and protect sensitive information in Hadoop ecosystems.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Black Hat

Quantified Self - A Path to Self-Enlightenment or Just a Security Nightmare

Explore the security risks and privacy concerns of Quantified Self technology, including data leaks, tracking vulnerabilities, and best practices for protecting personal information.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Black Hat

Bypassing HTTP Strict Transport Security

Explore vulnerabilities in HTTP Strict Transport Security (HSTS) and learn how attackers can exploit inter-operation weaknesses to bypass this protection and launch SSLStrip attacks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Why Control System Cyber-Security Sucks

Explores challenges in industrial control system cybersecurity, critiquing current approaches and advocating for a paradigm shift towards standardized IT practices and people-centric solutions.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Black Hat

The Big Chill - Legal Landmines that Stifle Security Research and How to Disarm Them

Legal challenges and risks in security research: exploring laws, cases, and potential solutions to protect researchers while promoting cybersecurity advancements.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Badger - The Networked Security State Estimation Toolkit

Toolkit for estimating network security state using CPTL framework. Imports monitoring data, provides configurable scoring, and offers graphical view of security elements.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Black Hat

Researching Android Device Security with the Help of a Droid Army

Explore Android device security using a diverse cluster to tackle fragmentation, enhance auditing, and improve exploit development techniques.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Securing Sustainability - The Significance of Digital Security

Explore the critical link between digital security and sustainability, examining real-world cyber threats and proposing digital security as a key ESG pillar for long-term business success in the digital age.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Cyber Security by an Ethical Hacker

Explore cybersecurity risks, ethical hacking, and the future of digital security with insights on the deep web, cyberattacks, and the role of security researchers.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Preach It Don't Breach It - Cyber Security and Data Protection as Partner in Crime

Explore the synergy between cybersecurity and data protection in incident response. Learn to build robust security programs that safeguard personal data and comply with privacy laws.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Perimeter Security Is Dead, Get Over It

Explores why traditional perimeter security is outdated and dangerous, proposing alternative network architectures for modern information security in companies.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Open Data Science

Flawed Machine Learning Security - Alejandro Saucedo

Explore critical security flaws in ML lifecycle and learn prevention strategies. Gain insights on MLSecOps, challenges in production systems, and OWASP Top 10 for Machine Learning from an industry expert.

• YouTube
• 39 minutes
• Self-Paced
• Free Video