https://speakerdeck.com/shekyan 2016-04-09 18:45:18 -0400 Content Security Policy is used to declare web resource content restrictions. It prevents exploitation by cross-site scripting (XSS) and related attacks. This presentation will explore challenges of creating and deploying a policy, how reporting might be abused, and deviations between the specification and implementations. You will also learn about tools to help create and verify the efficacy of your CSP. Content Security Policy is used to declare web resource content restrictions. It prevents exploitation by cross-site scripting (XSS) and related attacks. This presentation will explore challenges of creating and deploying a policy, how reporting might be abused, and deviations between the specification and implementations. You will also learn about tools to help create and verify the efficacy of your CSP. Sun, 01 Nov 2015 00:00:00 -0400 https://speakerdeck.com/shekyan/getting-the-most-out-of-csp-a-deep-dive https://speakerdeck.com/shekyan/getting-the-most-out-of-csp-a-deep-dive This presentation discusses methods to detect unwanted headless browsers interacting with your website This presentation discusses methods to detect unwanted headless browsers interacting with your website Tue, 01 Apr 2014 00:00:00 -0400 https://speakerdeck.com/shekyan/headless-browser-hide-and-seek https://speakerdeck.com/shekyan/headless-browser-hide-and-seek This presentation describes vulnerabilities we found and exploited in popular IP Cameras and presents the toolkit we developed to automate attacks This presentation describes vulnerabilities we found and exploited in popular IP Cameras and presents the toolkit we developed to automate attacks Mon, 01 Apr 2013 00:00:00 -0400 https://speakerdeck.com/shekyan/to-watch-or-to-be-watched-turning-your-surveillance-camera-against-you https://speakerdeck.com/shekyan/to-watch-or-to-be-watched-turning-your-surveillance-camera-against-you Overview on the security of WebSockets Overview on the security of WebSockets Sat, 01 Dec 2012 00:00:00 -0500 https://speakerdeck.com/shekyan/hacking-with-websockets https://speakerdeck.com/shekyan/hacking-with-websockets Intro into Application Layer DOS attacks, including Slow Read DOS, mitigation, SlowHTTPTest. Intro into Application Layer DOS attacks, including Slow Read DOS, mitigation, SlowHTTPTest. Sun, 01 Apr 2012 00:00:00 -0400 https://speakerdeck.com/shekyan/tweaking-to-get-away-from-slowdos https://speakerdeck.com/shekyan/tweaking-to-get-away-from-slowdos