|
Haroon Meer and Marco Slaviero - Clobbering the Cloud - Video And Slides
-
www.defcon.org
-
16 years ago
-
eng
Clobbering the Cloud Haroon Meer Technical Director, SensePost Marco Slaviero Cyber Fighter, SensePost Nicholas Arvanitis Senior Security Analyst, SensePost Cloud Computing dominates the headlines these days but like most paradigm changes this introduces new risks and new opportunities for us to consider. Some deep technical research has gone into the underlying technologies (like Virtualization) but to some extent this serves on....
|
|
Haroon Meer and Marco Slaviero - Clobbering the Cloud - Slides
-
www.defcon.org
-
16 years ago
-
eng
Clobbering the Cloud Haroon Meer Technical Director, SensePost Marco Slaviero Cyber Fighter, SensePost Nicholas Arvanitis Senior Security Analyst, SensePost Cloud Computing dominates the headlines these days but like most paradigm changes this introduces new risks and new opportunities for us to consider. Some deep technical research has gone into the underlying technologies (like Virtualization) but to some extent this serves on....
|
|
Iftach Ian Amit - Down the Rabbit Hole Uncovering a Criminal Server
-
www.defcon.org
-
16 years ago
-
eng
Down the Rabbit Hole: Uncovering a Criminal Server Iftach Ian Amit Director, Security Research, Aladdin In this talk I'll cover the research efforts done when we managed to come across a criminally operated server running the latest Neosploit (and other goodies). During the research there have been several crucial points of interest such as the discovery of compromised credentials, getting into the applications used by the crimi....
|
|
Iftach Ian Amit - Down the Rabbit Hole Uncovering a Criminal Server - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Down the Rabbit Hole: Uncovering a Criminal Server Iftach Ian Amit Director, Security Research, Aladdin In this talk I'll cover the research efforts done when we managed to come across a criminally operated server running the latest Neosploit (and other goodies). During the research there have been several crucial points of interest such as the discovery of compromised credentials, getting into the applications used by the crimi....
|
|
Iftach Ian Amit - Down the Rabbit Hole Uncovering a Criminal Server - Slides
-
www.defcon.org
-
16 years ago
-
eng
Down the Rabbit Hole: Uncovering a Criminal Server Iftach Ian Amit Director, Security Research, Aladdin In this talk I'll cover the research efforts done when we managed to come across a criminally operated server running the latest Neosploit (and other goodies). During the research there have been several crucial points of interest such as the discovery of compromised credentials, getting into the applications used by the crimi....
|
|
The Day of the Updates Itzik Kotler Security Operation Center Team Leader, Radware Tomer Bitton Security Researcher, Radware Software updates apply patches or introduce new features to an application. In most cases, the update procedure is conducted in an insecure manner, exposing the updater to execution of malicious code or to manipulation of application data such as anti-virus signatures. This presentation will describe in ....
|
|
Itzik Kotler and Tomer Bitton - The Day of the Updates - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
The Day of the Updates Itzik Kotler Security Operation Center Team Leader, Radware Tomer Bitton Security Researcher, Radware Software updates apply patches or introduce new features to an application. In most cases, the update procedure is conducted in an insecure manner, exposing the updater to execution of malicious code or to manipulation of application data such as anti-virus signatures. This presentation will describe in ....
|
|
Itzik Kotler and Tomer Bitton - The Day of the Updates - Slides
-
www.defcon.org
-
16 years ago
-
eng
The Day of the Updates Itzik Kotler Security Operation Center Team Leader, Radware Tomer Bitton Security Researcher, Radware Software updates apply patches or introduce new features to an application. In most cases, the update procedure is conducted in an insecure manner, exposing the updater to execution of malicious code or to manipulation of application data such as anti-virus signatures. This presentation will describe in ....
|
|
James Myrcurial Arlen and Tiffany Rad - Your Mind Legal Status Rights and Securing Yourself
-
www.defcon.org
-
16 years ago
-
eng
Your Mind: Legal Status, Rights and Securing Yourself James "Myrcurial" Arlen Security Researcher Tiffany Rad President of ELCnetworks, LLC. and Adjunct Professor at University of Southern Maine's Computer Science Department As a participant in the information economy, you no longer exclusively own material originating from your organic brain; you leave a digital trail with your portable device's transmitted communications and when....
|
|
James Myrcurial Arlen and Tiffany Rad - Your Mind Legal Status Rights and Securing Yourself - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Your Mind: Legal Status, Rights and Securing Yourself James "Myrcurial" Arlen Security Researcher Tiffany Rad President of ELCnetworks, LLC. and Adjunct Professor at University of Southern Maine's Computer Science Department As a participant in the information economy, you no longer exclusively own material originating from your organic brain; you leave a digital trail with your portable device's transmitted communications and when....
|
|
James Myrcurial Arlen and Tiffany Rad - Your Mind Legal Status Rights and Securing Yourself - Slides
-
www.defcon.org
-
16 years ago
-
eng
Your Mind: Legal Status, Rights and Securing Yourself James "Myrcurial" Arlen Security Researcher Tiffany Rad President of ELCnetworks, LLC. and Adjunct Professor at University of Southern Maine's Computer Science Department As a participant in the information economy, you no longer exclusively own material originating from your organic brain; you leave a digital trail with your portable device's transmitted communications and when....
|
|
Jason Ostrom and Arjun Sambamoorthy - Advancing Video Application Attacks with Video Interception Recording and Replay
-
www.defcon.org
-
16 years ago
-
eng
Advancing Video Application Attacks with Video Interception, Recording, and Replay Jason Ostrom Director, VIPER Lab Sipera Systems, Inc. Arjun Sambamoorthy Research Engineer, Sipera Systems, Inc. New video applications promise many exciting cost-saving benefits, but they also bring with them a host of security challenges and vulnerabilities. This session applies existing techniques for VoIP eavesdropping towards next generation att....
|
|
Jason Ostrom and Arjun Sambamoorthy - Advancing Video Application Attacks with Video Interception Recording and Replay - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Advancing Video Application Attacks with Video Interception, Recording, and Replay Jason Ostrom Director, VIPER Lab Sipera Systems, Inc. Arjun Sambamoorthy Research Engineer, Sipera Systems, Inc. New video applications promise many exciting cost-saving benefits, but they also bring with them a host of security challenges and vulnerabilities. This session applies existing techniques for VoIP eavesdropping towards next generation att....
|
|
Jason Ostrom and Arjun Sambamoorthy - Advancing Video Application Attacks with Video Interception Recording and Replay - Slides
-
www.defcon.org
-
16 years ago
-
eng
Advancing Video Application Attacks with Video Interception, Recording, and Replay Jason Ostrom Director, VIPER Lab Sipera Systems, Inc. Arjun Sambamoorthy Research Engineer, Sipera Systems, Inc. New video applications promise many exciting cost-saving benefits, but they also bring with them a host of security challenges and vulnerabilities. This session applies existing techniques for VoIP eavesdropping towards next generation att....
|
|
Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..
|
|
Jason Schlesinger - Cloud Security in Map Reduce - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..
|
|
Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..
|
|
Jason Scott - That Awesome Time I Was Sued for Two Billion Dollars
-
www.defcon.org
-
16 years ago
-
eng
That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....
|
|
Jason Scott - That Awesome Time I Was Sued for Two Billion Dollars - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....
|
|
Jason Scott - That Awesome Time I Was Sued for Two Billion Dollars - Slides
-
www.defcon.org
-
16 years ago
-
eng
That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....
|
|
Jay Beale and Justin Searle - The Middler 2.0 Its Not Just for Web Apps Anymore
-
www.defcon.org
-
16 years ago
-
eng
The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....
|
|
Jay Beale and Justin Searle - The Middler 2.0 Its Not Just for Web Apps Anymore - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....
|
|
Jay Beale and Justin Searle - The Middler 2.0 Its Not Just for Web Apps Anymore - Slides
-
www.defcon.org
-
16 years ago
-
eng
The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....
|
|
Jayson E Street - Bag Full of Rock Dispelling the Myths and Discussing the Facts of Global Cyber Warfare
-
www.defcon.org
-
16 years ago
-
eng
I Am Walking Through a City Made of Glass and I Have a Bag Full of Rocks" (Dispelling the Myths and Discussing the Facts of Global Cyber-Warfare) Jayson E. Street CIO Stratagem 1 Solutions There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualti....
|
|
Jayson E Street - Bag Full of Rock Dispelling the Myths and Discussing the Facts of Global Cyber Warfare - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
I Am Walking Through a City Made of Glass and I Have a Bag Full of Rocks" (Dispelling the Myths and Discussing the Facts of Global Cyber-Warfare) Jayson E. Street CIO Stratagem 1 Solutions There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualti....
|
|
Jayson E Street - Bag Full of Rock Dispelling the Myths and Discussing the Facts of Global Cyber Warfare - Slides
-
www.defcon.org
-
16 years ago
-
eng
I Am Walking Through a City Made of Glass and I Have a Bag Full of Rocks" (Dispelling the Myths and Discussing the Facts of Global Cyber-Warfare) Jayson E. Street CIO Stratagem 1 Solutions There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualti....
|
|
Jeff Yestrumskas and Matt Flick - Cross Site Scripting Anonymous Browser 2.0
-
www.defcon.org
-
16 years ago
-
eng
Cross Site Scripting Anonymous Browser 2.0 Jeff Yestrumskas Security Researcher Matt Flick Principal at FYRM Associates Cross Site Scripting Anonymous Browser, Version 2.0 Earlier this year, the Cross-site Scripting Anonymous Browser ("XAB") was presented as a new perspective on how we could extend the functionality of browser technologies, form dynamic botnets for browsing, and create an unpronounceable acronym all at once. We con....
|
|
Jeff Yestrumskas and Matt Flick - Cross Site Scripting Anonymous Browser 2.0 - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Cross Site Scripting Anonymous Browser 2.0 Jeff Yestrumskas Security Researcher Matt Flick Principal at FYRM Associates Cross Site Scripting Anonymous Browser, Version 2.0 Earlier this year, the Cross-site Scripting Anonymous Browser ("XAB") was presented as a new perspective on how we could extend the functionality of browser technologies, form dynamic botnets for browsing, and create an unpronounceable acronym all at once. We con....
|
|
Jeff Yestrumskas and Matt Flick - Cross Site Scripting Anonymous Browser 2.0 - Slides
-
www.defcon.org
-
16 years ago
-
eng
Cross Site Scripting Anonymous Browser 2.0 Jeff Yestrumskas Security Researcher Matt Flick Principal at FYRM Associates Cross Site Scripting Anonymous Browser, Version 2.0 Earlier this year, the Cross-site Scripting Anonymous Browser ("XAB") was presented as a new perspective on how we could extend the functionality of browser technologies, form dynamic botnets for browsing, and create an unpronounceable acronym all at once. We con....
|
|
The Year In Computer Crime Cases Jennifer Granick Civil Liberties Director, EFF Its been a booming year for computer crime cases as cops and civil litigants have pushed the envelope to go after people using fake names on social networking sites (the MySpace suicide case), researchers giving talks at DEFCON (MBTA v. Anderson), and students sending email to other students (the Calixte/Boston College case). The Electronic Frontier Found....
|
|
Jennifer Granick - The year in Computer Crime Cases - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
The Year In Computer Crime Cases Jennifer Granick Civil Liberties Director, EFF Its been a booming year for computer crime cases as cops and civil litigants have pushed the envelope to go after people using fake names on social networking sites (the MySpace suicide case), researchers giving talks at DEFCON (MBTA v. Anderson), and students sending email to other students (the Calixte/Boston College case). The Electronic Frontier Found....
|
|
The Year In Computer Crime Cases Jennifer Granick Civil Liberties Director, EFF Its been a booming year for computer crime cases as cops and civil litigants have pushed the envelope to go after people using fake names on social networking sites (the MySpace suicide case), researchers giving talks at DEFCON (MBTA v. Anderson), and students sending email to other students (the Calixte/Boston College case). The Electronic Frontier Found....
|
|
Catching DNS Tunnels with AI - A Talk About Artificial Intelligence, Geometry and Malicious Network Traffic jhind Security Researcher The in-depth explanation, demonstration and release of a working adaptive solution for data mining DNS tunnels from network traffic. jhind has shared a passion for security inside government, academia and industry for well over a decade. He has countless hours of sleep-deprived research and teachi..
|
|
Catching DNS Tunnels with AI - A Talk About Artificial Intelligence, Geometry and Malicious Network Traffic jhind Security Researcher The in-depth explanation, demonstration and release of a working adaptive solution for data mining DNS tunnels from network traffic. jhind has shared a passion for security inside government, academia and industry for well over a decade. He has countless hours of sleep-deprived research and teachi..
|
|
Catching DNS Tunnels with AI - A Talk About Artificial Intelligence, Geometry and Malicious Network Traffic jhind Security Researcher The in-depth explanation, demonstration and release of a working adaptive solution for data mining DNS tunnels from network traffic. jhind has shared a passion for security inside government, academia and industry for well over a decade. He has countless hours of sleep-deprived research and teachi..
|
|
he Projects of "Prototype This!" Joe Grand (Kingpin) Zoz Designing and building projects is hard. Designing and building projects of things that have never been done before is harder. Designing and building projects of things that have never been done before with the financial and time constraints of TV is ridiculous. For 18 months, Joe Grand and Zoz were co-hosts of Prototype This! on Discovery Channel, an engineering enterta....
|
|
Joe Grand and Zoz - The Projects of Prototype This - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
he Projects of "Prototype This!" Joe Grand (Kingpin) Zoz Designing and building projects is hard. Designing and building projects of things that have never been done before is harder. Designing and building projects of things that have never been done before with the financial and time constraints of TV is ridiculous. For 18 months, Joe Grand and Zoz were co-hosts of Prototype This! on Discovery Channel, an engineering enterta....
|
|
he Projects of "Prototype This!" Joe Grand (Kingpin) Zoz Designing and building projects is hard. Designing and building projects of things that have never been done before is harder. Designing and building projects of things that have never been done before with the financial and time constraints of TV is ridiculous. For 18 months, Joe Grand and Zoz were co-hosts of Prototype This! on Discovery Channel, an engineering enterta....
|
|
Joe Grand Jake Appelbaum and Chris Tarnovsky - Smart Parking Meters
-
www.defcon.org
-
16 years ago
-
eng
Smart" Parking Meter Implementations, Globalism, and You (aka Meter Maids Eat Their Young) Joe "Kingpin" Grand Jake Appelbaum Chris Tarnovsky Throughout the United States, cities are deploying "smart" electronic fare collection infrastructures that have been commonplace in European countries for many years. In 2003, San Francisco launched a $35 million pilot program to replace approximately 23,000 mechanical parking meters with....
|
|
Joe Grand Jake Appelbaum and Chris Tarnovsky - Smart Parking Meters -Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Smart" Parking Meter Implementations, Globalism, and You (aka Meter Maids Eat Their Young) Joe "Kingpin" Grand Jake Appelbaum Chris Tarnovsky Throughout the United States, cities are deploying "smart" electronic fare collection infrastructures that have been commonplace in European countries for many years. In 2003, San Francisco launched a $35 million pilot program to replace approximately 23,000 mechanical parking meters with....
|
|
Joe Grand Jake Appelbaum and Chris Tarnovsky - Smart Parking Meters - Slides
-
www.defcon.org
-
16 years ago
-
eng
Smart" Parking Meter Implementations, Globalism, and You (aka Meter Maids Eat Their Young) Joe "Kingpin" Grand Jake Appelbaum Chris Tarnovsky Throughout the United States, cities are deploying "smart" electronic fare collection infrastructures that have been commonplace in European countries for many years. In 2003, San Francisco launched a $35 million pilot program to replace approximately 23,000 mechanical parking meters with....
|
|
Joey Calca and Ryan Anguiano - Hadoop Apaches Open Source Implementation of Googles MapReduce Framework- Audio
-
www.defcon.org
-
16 years ago
-
eng
Hadoop: Apache's Open Source Implementation of Google's MapReduce Framework Joey Calca Hacked Existence Team Ryan Anguiano Hacked Existence Team This presentation will begin with a brief overview of Google's Map/Reduce Framework. Map/Reduce is built to analyze extremely large datasets. We will first look at what a Mapper and Reducer are, the inputs they take and the outputs they generate. From there, we will look at the open source....
|
|
Joey Calca and Ryan Anguiano - Hadoop Apaches Open Source Implementation of Googles MapReduce Framework- Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Hadoop: Apache's Open Source Implementation of Google's MapReduce Framework Joey Calca Hacked Existence Team Ryan Anguiano Hacked Existence Team This presentation will begin with a brief overview of Google's Map/Reduce Framework. Map/Reduce is built to analyze extremely large datasets. We will first look at what a Mapper and Reducer are, the inputs they take and the outputs they generate. From there, we will look at the open source....
|
|
three point Oh. Johnny Long Co-Pilot, Hackers For Charity, Inc From scrubby C64 pirate to professional hacker to reluctant "Internet rockstar", the past five years of Johnny's journey have been interesting. The last few months, however, have been straight-up bizarre. While many strain to maintain and others scrape and scratch at the ladder, Johnny's jumped off the top rung. This is a story of what it takes to make it in thi..
|