| Date |
Type |
Title |
Author |
Event |
| February 25, 2012 |
Slides |
Passive Host Auditing
|
|
DEFCON 13 |
| January 23, 2012 |
Paper |
A Hypervisor IPS based on Hardware Assisted Virtualization Technology
|
Junichi Murakami
|
Black Hat Asia 2008 |
| January 23, 2012 |
Slides |
A Hypervisor IPS based on Hardware Assisted Virtualization Technology
|
Junichi Murakami
|
Black Hat Asia 2008 |
| January 17, 2012 |
Slides |
My IDS is better than yours. Or is it?
|
Stefano Zanero
|
Black Hat Federal 2006 |
| January 17, 2012 |
Slides |
Anomaly Detection Through System Call Argument Analysis
|
Stefano Zanero
|
Black Hat EU 2006 |
| January 13, 2012 |
Slides |
Host Based Anomaly Detection on System Call Arguments
|
Stefano Zanero
|
Black Hat USA 2006 |
| January 11, 2012 |
Slides |
NIDS: False Positive Reduction Through Anomaly Detection
|
Damiano Bolzoni
Emmanuelle Zambon
|
Black Hat USA 2006 |
| January 02, 2012 |
Slides |
IPS Shortcomings
|
Renaud Bidou
|
Black Hat USA 2006 |
| December 26, 2011 |
Slides |
Ozone HIPS: Unbreakable Windows
|
Eugene Tsyrklevich
|
Black Hat USA 2005 |
| December 07, 2011 |
Slides |
Detecting 0-days Attacks With Learning Intrusion Detection Systems
|
Stefano Zanero
|
Black Hat USA 2004 |
| December 06, 2011 |
Slides |
Attacking Host Intrusion Prevention Systems
|
Eugene Tsyrklevich
|
Black Hat USA 2004 |
| December 01, 2011 |
Slides |
Program Semantics-Aware Intrusion Detection
|
Tzi-cker Chiueh
|
Black Hat USA 2004 |
| December 01, 2011 |
Paper |
Program Semantics-Aware Intrusion Detection
|
Tzi-cker Chiueh
|
Black Hat USA 2004 |
| November 11, 2011 |
Slides |
Host Based Intrusion Detection Using W2K Auditing Features
|
Macy Bergoon
|
Black Hat Windows Security 2001 |
| November 09, 2011 |
Slides |
IDS Benchmarking
|
Marcus Ranum
|
Black Hat Asia 2001 |
| November 06, 2011 |
Slides |
Snort
|
Martin Roesch
|
Black Hat USA 2001 |
| November 05, 2011 |
Slides |
Polymorphism and Intrusion Detection Systems
|
Chad R. Skipper
|
Black Hat USA 2001 |
| October 30, 2011 |
Slides |
IDS Evasion Design Tricks for Buffer Overflow Exploits
|
Anders Ingeborn
|
Black Hat EU 2001 |
| October 29, 2011 |
Slides |
Intrusion Detection and Network Forensics
|
Marcus Ranum
|
Black Hat Asia 2000 |
| October 26, 2011 |
Slides |
Bypassing Intrusion Detection Systems
|
Ron Gula
|
Black Hat USA 2000 |
| October 26, 2011 |
Slides |
Intrusion Detection in High Speed Networks
|
Mark Kadrich
|
Black Hat USA 2000 |
| October 20, 2011 |
Slides |
Enforcer
|
Timothy Mullen
|
Black Hat Windows Security 2003 |
| October 11, 2011 |
Slides |
SPIDeR
|
Patrick Miller
|
Black Hat USA 2003 |
| October 11, 2011 |
Paper |
SPIDeR
|
Patrick Miller
|
Black Hat USA 2003 |
| October 02, 2011 |
Slides |
Application Intrusion Detection
|
Drew Miller
|
Black Hat Federal 2003 |
| September 09, 2011 |
Paper |
SprayPAL: How capturing and replaying attack traffic can save your IDS
|
Josh Pauli
Kyle Cronin
Patrick Engebretson
|
Black Hat USA 2010 |
| September 09, 2011 |
Slides |
SprayPAL: How capturing and replaying attack traffic can save your IDS
|
Josh Pauli
Kyle Cronin
Patrick Engebretson
|
Black Hat USA 2010 |
| July 23, 2011 |
Paper |
360° Anomaly Based Unsupervised Intrusion Detection
|
Stefano Zanero
|
Black Hat EU 2007 |
| July 23, 2011 |
Slides |
360° Anomaly Based Unsupervised Intrusion Detection
|
Stefano Zanero
|
Black Hat EU 2007 |
| July 03, 2011 |
Paper |
APHRODITE: an Anomaly-based Architecture for False Positive Reduction
|
Damiano Bolzoni
|
Black Hat EU 2007 |
| July 03, 2011 |
Paper |
POSEIDON: a 2-tier Anomaly-based Network Intrusion Detection System
|
Damiano Bolzoni
|
Black Hat EU 2007 |
| July 03, 2011 |
Slides |
NIDS: False Positive Reduction Through Anomaly Detection
|
Damiano Bolzoni
|
Black Hat EU 2007 |
| June 06, 2011 |
Slides |
Defeating Information Leak Prevention
|
Dan Moniz
Eric Monti
|
Black Hat USA 2007 |
| March 10, 2011 |
Video |
Open Source Framework for Advanced Intrusion Detection Solutions
|
Patrick Mullen
Ryan Pentney
|
DEFCON 18 |
| March 10, 2011 |
Slides |
Open Source Framework for Advanced Intrusion Detection Solutions
|
Patrick Mullen
Ryan Pentney
|
DEFCON 18 |
| March 10, 2011 |
Audio |
Open Source Framework for Advanced Intrusion Detection Solutions
|
Patrick Mullen
Ryan Pentney
|
DEFCON 18 |
| November 18, 2010 |
Video |
Analyzing Intrusions and Intruders
|
Sean M. Bodmer
|
PhreakNIC 11 |
| November 09, 2010 |
Video |
Distributed IPS - An in depth look
|
Dennis Boas
|
Hack3rCon 2010 |
| October 06, 2010 |
Slides |
Keynote: A new detection framework
|
|
Hack In The Box 2010 Dubai |
| July 22, 2010 |
Audio |
A Hypervisor IPS based on Hardware Assisted Virtualization Technology
|
Junichi Murakami
|
Black Hat USA 2008 |
| July 22, 2010 |
Paper |
A Hypervisor IPS based on Hardware Assisted Virtualization Technology
|
Junichi Murakami
|
Black Hat USA 2008 |
| July 22, 2010 |
Slides |
A Hypervisor IPS based on Hardware Assisted Virtualization Technology
|
Junichi Murakami
|
Black Hat USA 2008 |
| July 22, 2010 |
Video |
A Hypervisor IPS based on Hardware Assisted Virtualization Technology
|
Junichi Murakami
|
Black Hat USA 2008 |
| June 25, 2010 |
Audio |
No More 0-Days (or Code-Based Intrusion Detection by Korset)
|
Ohad Ben-Cohen
|
Black Hat USA 2008 |
| June 25, 2010 |
Video |
No More 0-Days (or Code-Based Intrusion Detection by Korset)
|
Ohad Ben-Cohen
|
Black Hat USA 2008 |
| June 04, 2010 |
Slides |
Why the Google Aurora Attack Will Happen Again. How to Analyze your Defenses and Stay Out of the Headlines
|
Vikram Phatak
|
Source Conference Boston 2010 |
| May 26, 2010 |
Slides |
How to Detect Penetration Testers
|
Ron Gula
|
Source Conference Boston 2010 |
| December 31, 2009 |
Video |
Automatic Exploit Detection in Binaries
|
Luis Miras
Matt Hargett
|
DEFCON 14 |
| December 31, 2009 |
Audio |
Automatic Exploit Detection in Binaries
|
Luis Miras
Matt Hargett
|
DEFCON 14 |
| November 21, 2009 |
Audio |
Evade IDS/IPS Systems using Geospatial Threat Detection
|
Ryan Trost
|
DEFCON 16 |
| November 08, 2009 |
Audio |
The Wide World of WAFs
|
Ben Feinstein
|
DEFCON 16 |
| November 08, 2009 |
Audio |
Snort Plug-in Development: Teaching an Old Pig New Tricks
|
Ben Feinstein
|
DEFCON 16 |
| November 01, 2009 |
Audio |
They're Hacking Our Clients! Introducing Free Client-side Intrusion Prevention
|
Jay Beale
|
DEFCON 16 |
| September 30, 2009 |
Slides |
Our Favorite XSS Filters and How to Attack Them
|
Eduardo Vela Nava
David Lindsay
|
Black Hat USA 2009 |
| May 15, 2009 |
Slides |
Masibty: a Web Application Firewall Based on Anomaly Detection
|
Stefano Zanero
Claudio Criscione
|
Black Hat EU 2009 |
| April 25, 2009 |
Slides |
KIDS – Kernel Intrusion Detection System
|
Rodrigo Rubira Branco
|
Troopers 2008 |
| April 11, 2009 |
Video |
Evade IDS/IPS Systems using Geospatial Threat Detection
|
Ryan Trost
|
DEFCON 16 |
| April 11, 2009 |
Slides |
Evade IDS/IPS Systems using Geospatial Threat Detection
|
Ryan Trost
|
DEFCON 16 |
| March 29, 2009 |
Video |
The Wide World of WAFs
|
Ben Feinstein
|
DEFCON 16 |
| March 29, 2009 |
Slides |
The Wide World of WAFs
|
Ben Feinstein
|
DEFCON 16 |
| March 29, 2009 |
Video |
Snort Plug-in Development: Teaching an Old Pig New Tricks
|
Ben Feinstein
|
DEFCON 16 |
| March 29, 2009 |
Slides |
Snort Plug-in Development: Teaching an Old Pig New Tricks
|
Ben Feinstein
|
DEFCON 16 |
| March 14, 2009 |
Video |
They're Hacking Our Clients! Introducing Free Client-side Intrusion Prevention
|
Jay Beale
|
DEFCON 16 |
| October 09, 2008 |
Slides |
Evading/Attacking NIDS
|
|
|
| October 09, 2008 |
Paper |
HTTP IDS Evasions Revisited
|
Daniel J. Roelker
|
|
| April 13, 2008 |
Paper |
Intrusion Detection Systems and A View To Its Forensic Applications
|
|
|
| March 09, 2008 |
Paper |
A Virtual Machine Introspection Based Architecture for Intrusion Detection
|
|
|