Track 1 Friday·53 min
Andy Applebaum
Walks through building a malware classifier, then attacking rival models in an adversarial ML competition.
machine-learningmalware-analysisdetection+2
February 2022 · Mesa, AZ, USA
CactusCon 10
6 sessions · 42 talks
Sessions at this event
Track 1 Friday
6 talks
Track 1 Friday talks from CactusCon 10 2022.
Track 1 Saturday
7 talks
Track 1 Saturday talks from CactusCon 10 2022.
Track 2 Friday
8 talks
Track 2 Friday talks from CactusCon 10 2022.
Track 2 Saturday
4 talks
Track 2 Saturday talks from CactusCon 10 2022.
Track 3 Friday
10 talks
Track 3 Friday talks from CactusCon 10 2022.
Track 3 Saturday
7 talks
Track 3 Saturday talks from CactusCon 10 2022.
All CC10 talks
Filters+
1–24 of 41 talks / 42
Track 1 Friday·41 min
Paul Wagner
Explains why the cybersecurity talent gap persists and surveys programs that aim to build a workforce pipeline.
learningbuildingteam+2
Track 1 Friday·25 min
Parzival
Shows how COVID-19 themed pretexts shifted phishing and vishing results during remote work, and the ethical choices behind them.
socialphishinglessons-learned+2
Track 1 Friday·23 min
Woland
Shares practical lessons from a first year as a SOC analyst, covering log reading, alert limits, and career survival.
security-operationsincident-responsethreat-detection+2
Track 1 Friday·51 min
Yael Grauer · David Huerta
Dissects 2021 tech news stories that got privacy policies, press releases and technical details wrong, and how to do better.
lessons-learnedprivacytrust+1
Track 1 Saturday·39 min
Matt Edmondson
Shows how a low-cost Raspberry Pi setup can flag wireless devices that keep appearing while you travel.
privacydetectiondevice+2
Track 1 Saturday·48 min
Closes the tenth CactusCon with volunteer shout-outs, CTF results, finances and prize giveaways.
villagechallengeinterview+1
Track 1 Saturday·45 min
Kyle Nordby
Examines which forensic artifacts cloud free tiers leave behind after simulated compromises of Azure, GCP and AWS instances.
cloudincident-responsemonitoring+1
Track 1 Saturday·42 min
Kevin Tyers · Haley Mills · Jamie Winterton · Alex Hoffman
Panelists review real conference submissions and explain what makes a security talk proposal stand out or fall flat.
paneldiscussionlessons-learned+2
Track 1 Saturday·51 min
Leron Gray
Shows how debugging .NET memory dumps can recover secrets and encryption keys, with a tool that automates object extraction.
reverse-engineeringmemorywindows+2
Track 1 Saturday·57 min
Joe Giron
Walks through reverse engineering Windows DLLs, from loading and exports to tracing a vendor library's download routine.
reverse-engineeringwindowsmalware-analysis+2
Track 2 Friday·34 min
Aaron Rose
Explores how AI can strengthen defenses against ransomware and how attackers could use the same technology.
ransomwareaimachine-learning+2
Track 2 Friday·13 min
Explains how AI and machine learning can both help and hinder security, from home network segmentation to ransomware.
aimachine-learningransomware+2
Track 2 Friday·15 min
Michelle Winters
Shows how hiring for attitude over credentials opened a cybersecurity career path for one newcomer.
managementteaminterview+1
Track 2 Friday·8 min
Michelle Winters
Offers hiring managers practical ways to widen their candidate pools and recruit beyond traditional cybersecurity backgrounds.
discussionteammanagement+2
Track 2 Friday·51 min
Mike Manrod
Draws parallels between how malware compromises a system and how biases are exploited during disinformation campaigns.
socialthreatattack+2
Track 2 Friday·33 min
Bryson Bort
Shows how to win leadership buy-in for risk management and use purple team exercises and metrics to drive security investment.
riskmanagementthreat-detection+2
Track 2 Friday·11 min
Bryson
Answers audience questions on managing up, compliance versus real security, and starting a security business.
managementinterviewdiscussion+2
Track 2 Friday·24 min
Mirza Burhan Baig
Explains business logic flaws that scanners miss, with banking and OTP bypass cases and manual testing advice.
webvulnerabilitiesapplication+3
Track 2 Saturday·43 min
Erez Yalon
Explains the OWASP API Security Top 10 risks, with access control singled out as the hardest problem to get right.
owaspapplicationweb+2
Track 2 Saturday·54 min
Rob Richardson
Shows where container image scanning fits in a build pipeline, registry and Kubernetes admission webhooks.
containerkubernetesdevops+1
Track 2 Saturday·38 min
Kurtis Minder · Bryce Webster-Jacobsen
Presents a 15-step ransomware kill chain and practical advice for building response plans around extortion and data theft.
ransomwareincident-responserisk+2