DeepSec 2007 Videos Now Online

DeepSec is an in-depth security conference in Vienna, Austria. Last year it was held on November 20th through the 23rd, and from the speaker lineup, it looked like a very good conference. Everyone can now enjoy the presentations, as the DeepSec 2007 videos are online at Google video.

Here are some of the DeepSec 2007 presentations that sound interesting to me:

• Attacking the Giants: Exploiting SAP Internals – Mariano Nuñez Di Croc
• Audit of the RFID ePassport and the Concepts – Lukas Grunwald
• Automated Structural Classification of Malware – Halvar Flake
• Browser Hijacking – Daniel Fabian
• Carmen: Rogue Web Server – Simon Roses Femerling
• Fuzzing and Exploiting Wireless Drivers – Sylvester Keil and Clemens Kolbitsch
• Hijacking Virtual Machine Execution for Fun and Profit – Nguyen Anh Quynh
• kNAC! – Ofir Arkin
• Oracle Security: Orasploit – Alexander Kornbrust
• RPC Auditing Tools and Techniques – Aaron Portnoy and Cody Pierce
• Three Faces of CSRF – Martin Johns
• Windows Heap Protection: Bypassing requires understanding – Dave Aitel

The two DeepSec 2007 keynotes are online as well:

• Reasonable Disclosure – Jeff Moss
• The Business Case for Removing Your Perimeter – Paul Simmonds

And here are the rest of the DeepSec 2007 presentations:

• Breaking and Securing Web Applications – Nitesh Dhanjani
• Designing Inputs That Make Software Fail – Heikki Kortti
• Disruptive Modernization of Legacy Systems – Shalom Carmel
• Doppelgänger: Novel Protection Against Unknown File Format Vulnerabilities – Rich Smith
• Economics of Information Security – Tyler Moore
• Flash Security Basics – Fukami
• Memory-Resident Backdoors in Oracle – David Litchfield
• New Security Model of Bluetooth 2.1 – Marcel Holtmann
• Observing the Tidal Waves of Malware – Stefano Zanero
• Security: an Obstacle for large-scale Projects and eGovernment? – Thomas Maus
• The Many Dimensions of Security in eVoting – Peter Purgathofer
• The RFID Guardian – Melanie Rieback
• The State of the Application Security Industry – Mark Curphey

I also noticed a few DeepSec 2007 presentation not online:

• Are the vendors listening? – Simon Howard
• Collecting and Managing Accumulated Malware Automatically – Georg Wicherski
• Intercepting GSM traffic – Steve
• Web 2.0 Application Kung-Fu: Securing Ajax & Web Services – Shreeraj Shah