Talks

Title	Humans
Stumping the Mobile Chipset	Adam Donenfeld , Check Point
CANSPY: a Framework for Auditing CAN Devices	Jonathan-Christofer Demay , AIRBUS Defence and Space CyberSecurity
Universal Serial aBUSe: Remote Physical Access Attacks	Rogan Dawes , Sensepost
Six Degrees of Domain Admin - Using Graph Theory to Accelerate Red Team Operations	Andy Robbins (@_wald0) , Veris Group
Exploiting and Attacking Seismological Networks... Remotely	Bertin Bervis Bonilla , NETDB.IO
Slouching Towards Utopia: The State of the Internet Dream	Jennifer S. Granick , Civil Liberties, Stanford Center for Internet and Society
Realtime Bluetooth Device Detection with Blue Hydra	Zero_Chaos , Pwnie Express
All Your Solar Panels are Belong to Me	Fred Bret-Mounet
Frontrunning the Frontrunners	Dr. Paul Vixie , Farsight Security, Inc.
Research on the Machines: Help the FTC Protect Privacy & Security	Terrell McSweeny , Federal Trade Commission
How to get good seats in the security theater? Hacking boarding passes for fun and profit.	Przemek Jaroszewski , CERT Polska/NASK
Retweet to Win: How 50 lines of Python made me the luckiest guy on Twitter	Hunter Scott
Platform agnostic kernel fuzzing	James Loureiro , MWR InfoSecurity
Use Their Machines Against Them: Loading Code with a Copier	Mike , The MITRE Corporation
SITCH - Inexpensive, Coordinated GSM Anomaly Detection	ashmastaflash
A Journey Through Exploit Mitigation Techniques in iOS	Max Bazaliy , Lookout
Side-channel Attacks on High-security Electronic Safe Locks	Plore
How to Overthrow a Government	Chris Rock , Kustodian
Phishing without Failure and Frustration	Jay Beale
Toxic Proxies - Bypassing HTTPS and VPNs to Pwn Your Online Identity	Alex Chapman , Context Information Security Ltd.
Beyond the MCSE: Red Teaming Active Directory	Sean Metcalf , Trimarc
Ask the EFF	Kurt Opsahl , EFF
Light-Weight Protocol! Serious Equipment! Critical Implications!	Lucas Lundgren , FortConsult , NCC Group
How to Design Distributed Systems Resilient Despite Malicious Participants	Radia Perlman
Samsung Pay: Tokenized Numbers, Flaws and Issues	Salvador Mendoza , Sean Metcalf , Mike , Marc Newlin , Guevara Noubir , Radia Perlman , Dan ‘AltF4’ Petro , Kurt Opsahl , Plore , regilero , WIlla Cassandra Riggins(abyssknight) , Andy Robbins (@_wald0) , Chris Rock , Anthony Rose , Nicholas Rosario (MasterChen) , The Bob Ross Fan Club , Henrik Schmidt , Hunter Scott , Mickey Shkatov (@Laplinker) , Haoqi Shan , Yan Shoshitaishvili , Six_Volts , Shane Steiger, Esq. , Tamas Szakaly , Richard Thieme , Javier Vazquez Vidal , Dr. Paul Vixie , Dr. Phil , Mike Walker , Patrick Wardle , Sebastian Westerhold , Brad Woodberg , Luke Young , Bryant Zadegan , Mudge Zatko , Zero_Chaos , Kai Zhong , Trimarc , The MITRE Corporation , Bastille Networks , Northeastern University , Bishop Fox , EFF , Makina Corpus , Veracode , Veris Group , Kustodian , ERNW GmbH , Intel Advanced Threat Research. , Qihoo 360 , UC Santa Barbara , PR-Audit Ltd., Hungary , ThiemeWorks , Code White Gmbh , Farsight Security, Inc. , Bloomsburg University of Pennsylvania , Synack , Proofpoint,Inc. , Emerging Threats, Proofpoint,Inc. , Proofpoint , Hydrant Labs LLC , Mach37 , CITL , Pwnie Express , Etsy
Developing Managed Code Rootkits for the Java Runtime Environment	Benjamin Holland , DARPA's Space , ISU Team
101 Sentient Storage - Do SSDs Have a Mind of Their Own?	Tom Kopchak , Hurricane Labs
Hacking Next-Gen ATM's From Capture to Cashout	Weston Hecker , Rapid7
How to Do it Wrong: Smartphone Antivirus and Security Applications Under Fire	Stephan Huber , Fraunhofer SIT
Examining the Internet's pollution	Karyn Benson
Hacker-Machine Interface - State of the Union for SCADA HMI Vulnerabilities	Brian Gorenc , Trend Micro's Zero Day Initiative
Stargate: Pivoting Through VNC to Own Internal Networks	Yonathan Klijnsma , Fox-IT
Vulnerabilities 101: How to Launch or Improve Your Vulnerability Research Game	Joshua Drake , Zimperium
Secure Penetration Testing Operations: Demonstrated Weaknesses in Learning Material and Tools	Wesley McGrew , HORNE Cyber
101 Ways to Brick your Hardware	Joe FitzPatrick , SecuringHardware.com
Compelled Decryption - State of the Art in Doctrinal Perversions	Ladar Levison , Lavabit, LLC
Breaking the Internet of Vibrating Things : What We Learned Reverse Engineering Bluetooth- and Internet-Enabled Adult Toys
Cunning with CNG: Soliciting Secrets from Schannel	Jake Kambic
BSODomizer HD: A Mischievous FPGA and HDMI Platform for the (M)asses	Joe Grand (Kingpin) , Grand Idea Studio
Backdooring the Frontdoor	Jmaxxz
MouseJack: Injecting Keystrokes into Wireless Mice	Marc Newlin , Bastille Networks
Introduction the Wichcraft Compiler Collection : Towards Universal Code Theft	Jonathan Brossard (endrazine) , MOABI.com
(Ab)using Smart Cities: The Dark Age of Modern Mobility	Matteo Beccaro , Opposing Force
Bypassing Captive Portals and Limited Networks	Grant Bugher , Perimeter Grid
Help, I've got ANTs!!!	Tamas Szakaly , PR-Audit Ltd., Hungary
Anti-Forensics AF	int0x80
Meet the Feds	Jonathan Mayer , Federal Communications Commission
VLAN hopping, ARP Poisoning and Man-In-The-Middle Attacks in Virtualized Environments	Ronny Bull , Utica College , Clarkson University
Blockfighting with a Hooker -- BlockfFghter2!	K2 , IOActive, Inc.
Eavesdropping on the Machines	Tim ‘t0rch’ Estell , BAE Systems
I Fight For The Users, Episode I - Attacks Against Top Consumer Products	Zack Fasel , Urbane
MR. ROBOT Panel	Kor Adana , MR. ROBOT
Feds and 0Days: From Before Heartbleed to After FBI-Apple	Jay Healey , Columbia University
Hiding Wookiees in HTTP - HTTP smuggling is a thing we should know better and care about	regilero , Makina Corpus
DIY Nukeproofing: A New Dig at 'Datamining'	3AlarmLampScooter
Crypto: State of the Law	Nate Cardozo , Electronic Frontier Foundation
Weaponizing Data Science for Social Engineering: Automated E2E Spear Phishing on Twitter	Delta Zero (John Seymour) , ZeroFOX
Escaping The Sandbox By Not Breaking It	Marco Grassi , Tencent Keen Security Lab
Abusing Bleeding Edge Web Standards for AppSec Glory	Bryant Zadegan , Mach37
Malware Command and Control Channels: A journey into darkness	Brad Woodberg , Proofpoint,Inc. , Emerging Threats, Proofpoint,Inc. , Proofpoint
Playing Through the Pain? - The Impact of Secrets and Dark Knowledge on Security and Intelligence Professionals	Richard Thieme , ThiemeWorks
DEF CON 101 Panel	Mike Petruzzi (wiseacre)
Direct Memory Attack the Kernel	Ulf Frisk
Sticky Keys To The Kingdom: Pre-auth RCE Is More Common Than You Think	Dennis Maldonado (AKA Linuz) , LARES Consulting
A Monitor Darkly: Reversing and Exploiting Ubiquitous On-Screen-Display Controllers in Modern Monitors	Ang Cui , Red Balloon Security
Project CITL	Mudge Zatko , CITL
Discovering and Triangulating Rogue Cell Towers	JusticeBeaver (Eric Escobar) , Barracuda Networks Inc
Sk3wlDbg: Emulating All (well many) of the Things with Ida	Chris Eagle
Attacking BaseStations - an Odyssey through a Telco's Network	Henrik Schmidt , ERNW GmbH
NG9-1-1: The Next Generation of Emergency Ph0nage	CINCVolFLT (Trey Forgety)
How to Make Your Own DEF CON Black Badge	Mickey Shkatov (@Laplinker) , Intel Advanced Threat Research.
'Cyber' Who Done It?! Attribution Analysis Through Arrest History	Jake Kouns , Risk Based Security
Machine Duping 101: Pwning Deep Learning Systems	Clarence Chio
Esoteric Exfiltration	WIlla Cassandra Riggins(abyssknight) , Veracode
CAN i haz car secret plz?	Javier Vazquez Vidal , Code White Gmbh
Jittery MacGyver: Lessons Learned from Building a Bionic Hand out of a Coffee Maker	Evan Booth
Maelstrom - Are You Playing with a Full Deck? : Using a Newly Developed Attack Life Cycle Game to Educate, Demonstrate and Evangelize.	Shane Steiger, Esq.
I've got 99 Problems, but Little Snitch ain't one	Patrick Wardle , Synack
Hacking Hotel Keys and Point of Sale Systems: Attacking Systems Using Magnetic Secure Transmission	Weston Hecker , Rapid7
Picking Bluetooth Low Energy Locks from a Quarter Mile Away	Anthony Rose
Game over, man! – Reversing Video Games to Create an Unbeatable AI Player	Dan ‘AltF4’ Petro , Bishop Fox
How to Remmote Control an Airliner: SecurityFLawsin Avionics	Sebastian Westerhold
Cyber Grand Shellphish	Yan Shoshitaishvili , UC Santa Barbara
Mouse Jiggler Offense and Defense	Dr. Phil , Bloomsburg University of Pennsylvania
Auditing 6LoWPAN Networks using Standard Penetration Testing Tools	Jonathan-Christofer Demay , AIRBUS Defence and Space CyberSecurity
Hacker Fundamentals and Cutting Through Abstraction	LosT
pin2pwn: How to Root an Embedded Linux Box with a Sewing Needle	Brad Dixon
The Remote Metamorphic Engine: Detecting, Evading, Attacking the AI and Reverse Engineering	Amro Abdelgawad , Immuneye
Propaganda and You (and your devices) - How media devices can be used to coerce, and how the same devices can be used to fight back.	The Bob Ross Fan Club
An Introduction to Pinworm: Man in the Middle for your Metadata	bigezy
Honey Onions: Exposing Snooping Tor HSDir Relays	Guevara Noubir , Northeastern University
Robot Hacks Video Games: How TASBot Exploits Consoles with Custom Controllers	Allan Cecil (dwangoAC) , North Bay Linux User's Group
Can You Trust Autonomous Vehicles: Contactless Attacks against Sensors of Self-driving Vehicle	Jianhao Liu , ADLAB, Qihoo 360
Attacking Network Infrastructure to Generate a 4 Tb/s DDoS for $5	Luke Young , Hydrant Labs LLC
Drones Hijacking - multi-dimensional attack vectors and countermeasures	Aaron Luo , Trend Micro, Inc.
Cheap Tools for Hacking Heavy Trucks	Six_Volts
DARPA Cyber Grand Challenge Award Ceremony	Mike Walker
Let’s Get Physical: Network Attacks Against Physical Security Systems	Ricky ‘HeadlessZeke’ Lawshae
Forcing a Targeted LTE Cellphone into an Unsafe Network	Haoqi Shan , Qihoo 360
So You Think You Want To Be a Penetration Tester	Anch
411: A framework for managing security alerts	Kai Zhong , Etsy
Weaponize Your Feature Codes	Nicholas Rosario (MasterChen)