SyScan360 Courses

SyScan360

SyScan'15 Singapore: The challenges of designing a secure encrypted hard drive

Syllabus: Intro Outline Presentation What are we talking about Vocabulary Security Ethical model The components The functionality Summary Tradeoff Standard design Encryption keys Challenges The attackers goal What does encryption mean The typical design…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'15 Singapore: HARES - Hardened Anti Reverse Engineering System

Syllabus: Intro What is HARES Off the Station Background TLB Splitting TLDB L2 Cache Program Verification Kernel Driver Windows Kernel TLB Split Test Cases Randomized Sort Software Compatibility Calculator Limitations Demonstration Engineering Challenges…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'15 Singapore: iOS 678 Security - A Study in Fail

Syllabus: Introduction Apple is rich on fail Jailbreak persistency Bug fixes New tricks Launch Demon New Chain Apples Mistake Pangu Mistake Apple Fixes Pangu Jailbreak Taiji Jailbreak Exploit Historical Perspective Patient Alpha What is incomplete code s…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'14 Singapore: How To Train Your Snapdragon Exploring Power Regulation Frameworks

Syllabus: Intro Whitepaper DARPA Open Source Outline Mentorship Trust and Respect Science is Hard Qualcomm Sony LG Nexus LG Nexus 4 How to buy a Snapdragon phone eBay wins Qualcomm bug Random phones Play with them Pink box Dev platform Power regulation Q…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'14 Singapore: Embracing The New Threat Towards Automatically Self diversifying Malware

Syllabus: Introduction The malware landscape is changing Malware distribution Defender limitations Automatic diversity Compilerbased diversification Outline Limitations Malware Diversification Compilers Similarity Matrix Questions

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'14 Singapore: Navigating A Sea Of Pwn Windows Phone 8 Appsec By Alex Plaskett And Nick Walker

Syllabus: Introduction Background Application Structure Application Security Models Application Security Restrictions Code Signing Encryption OEM Access Diagnostic Application Marketplace Application Side Notes DP API Desktop Second Pass Encryption TLS C…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'14 Singapore: Scientific Best Practices For Recurrent Problems In Computer Security R&d

Syllabus: Introduction Sidechannels What can we do Challenges Properties Detection Cyber Mission Planning Parabolic Signals Experiments Acid Target Matching Spectral Signature recommendations pro tip white paper computational security

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'14 Singapore: Linux Memory Forensics A Real life Case Study By Georg Wicherski

Syllabus: Intro Technical Details Section Headers Dynamic Linking PLT What I did Volatility Demo

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan360'16 Singapore: Remote code execution via Java native deserialization

Syllabus: Introduction Outline Java (de)serialization RCE - XML deserialization XMLDecoder XStream in Jenkins RCE - binary deserialization CVE-2011-2894: Spring commons-fileupload Restlet + DFI Dozer XML + Binary Mapper Dozer CVE-2014-9515 MBeanServerinv…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan360'16 Singapore: Memory Corruption Is For Wussies

Syllabus: Intro System Integrity Protection Dumb developers... OS X Architecture Introduction to Mach Mach messaging Execve and friends Supersonic os x exploitation Loading unsigned kexts Conclusions NEVER FORGET DAVE! Greetings

• YouTube
• 1-2 hours worth of material
• On-Demand
• Free Online Course

SyScan360

SyScan360'16 Singapore: Virtualization System Vulnerability Discovery Technology

Syllabus: Intro 360 Marvel Team Hypervisor Distinctions Attacking Processes in cloud computing The attack surface Basic Intro Compare to traditional targets Methods for testing hardware virtual components Fuzz framework structure Fuzz framework working f…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan360'16 Singapore: OSX El Capitan Sinking The Ship

Syllabus: Intro System Integrity Protection (SIP) System with and without SIP System Integrity Restriction System Integrity Protection Configuration Flags System Integrity Protection User Space Integration System Integrity Protection Sandbox Filters Prot…

• YouTube
• 1-2 hours worth of material
• On-Demand
• Free Online Course

SyScan360

SyScan360'16 Singapore: Key value injections here

Syllabus: Introduction Previous work Invalid keys Serialization React CouchDB Conclusion

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

SyScan360

SyScan'15 Singapore: How to own any windows network via group policy hijacking attacks

Syllabus: Introduction Outline What is Group Policy How does it work Configuration settings Prepatch scenario How can it be attacked Threat scenarios Domain controllers Domain members SP signing SP signing scenarios SP signing diagram Does it work How to…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course