1. Events
  2. Black Hat USA 2017
Star 0

Talks

Title Humans
White Hat Privilege: The Legal Landscape for a Cybersecurity Professional Seeking to Safeguard Sensitive Client Data Karen Neuman , Jacob Osborn , Goodwin , Goodwin Procter LLP
Evil Bubbles or How to Deliver Attack Payload via the Physics of the Process Marina Krotofil , Honeywell
An ACE Up the Sleeve: Designing Active Directory DACL Backdoors Andy Robbins , Will Schroeder , Specter Ops
Adventures in Attacking Wind Farm Control Networks Jason Staggs , University of Tulsa
Evolutionary Kernel Fuzzing Richard Johnson , Cisco Talos Group
Real Humans Simulated Attacks: Usability Testing with Attack Scenarios Lorrie Cranor , Carnegie Mellon University
Industroyer/Crashoverride: Zero Things Cool About a Threat Group Targeting the Power Grid Robert Lee , Joe Slowik , Ben Miller , Anton Cherepanov , Robert Lipovsky , Dragos, Inc. , ESET
Break
Escalating Insider Threats Using VMware's API Ofri Ziv , GuardiCore
Hacking Hardware with a $10 SD Card Reader Amir Etemadieh , Khoa Hoang , CJ Heres , Cylance , Draper Laboratory
Redesigning PKI to Solve Revocation Expiration and Rotation Problems Brian Knopf , Neustar
rVMI: A New Paradigm for Full System Analysis Jonas Pfoh , Sebastian Vogl , FireEye, Inc.
Exploiting Network Printers Jens Müller , Chair for Network and Data Security, Ruhr University Bochum
Developing Trust and Gitting Betrayed Clint Gibler , Noah Beddome , NCC Group
Free-Fall: Hacking Tesla from Wireless to CAN Bus Sen Nie , Ling Liu , Yuefeng Du , Tencent Keen Security Lab
Behind the Plexiglass Curtain: Stats and Stories from the Black Hat NOC Neil Wyler , Bart Stump , RSA , Red Sky Solutions, LLC
Skype & Type: Keystroke Leakage over VoIP Daniele Lain , Mauro Conti , Gene Tsudik , Alberto Compagno , University of Padua , University of California, Irvine , Cisco Systems
Lies and Damn Lies: Getting Past the Hype of Endpoint Security Solutions Lidia Giuliano , Mike Spaulding
Intel AMT Stealth Breakthrough Dmitriy Evdokimov , Alexander Ermolov , Maksim Malyutin , Embedi
IoTCandyJar: Towards an Intelligent-Interaction Honeypot for IoT Devices Tongbo Luo , Zhaoyan Xu , Xin Ouyang , Xing Jin , Palo Alto Networks
Stepping Up Our Game: Re-focusing the Security Community on Defense and Making Security Work for Everyone Alex Stamos , Facebook
Intel SGX Remote Attestation is Not Sufficient Yogesh Swami , Cryptography Research, Rambus
They're Coming for Your Tools: Exploiting Design Flaws for Active Intrusion Prevention John Ventura , Optiv Security, Inc.
Automated Detection of Vulnerabilities in Black-Box Routers (and Other Network Devices) Gabi Nakibly , The Technion
Bug Collisions Meet Government Vulnerability Disclosure Trey Herr , Jason Healey , Kim Zetter , Lillian Ablon , Katie Moussouris , Belfer Center Cyber Security Project, Harvard Kennedy School , Columbia SIPA , RAND Corporation , Luta Security, Inc.
'Ghost Telephonist' Link Hijack Exploitations in 4G LTE CS Fallback Haoqi Shan , Jun Li , Yuwei Zheng , Lin Huang , Qing Yang , UnicornTeam, 360 Technology
Go to Hunt Then Sleep David Bianco , Robert Lee , Target , Dragos, Inc.
Fractured Backbone: Breaking Modern OS Defenses with Firmware Attacks Yuriy Bulygin , Mikhail Gorobets , Oleksandr Bazhaniuk , Andrew Furtak , McAfee
Business Hall Welcome Reception (Sponsored by Forcepoint McAfee LogRhythm & Tenable Network Security)
Honey I Shrunk the Attack Surface – Adventures in Android Security Hardening Nick Kralevich , Google Inc.
Taking Over the World Through MQTT - Aftermath Lucas Lundgren , IOActive, Inc.
Pwnie Awards Dino Dai Zovi , Capsule8, Inc.
The Epocholypse 2038: What's in Store for the Next 20 Years Mikko Hypponen , F-Secure
Challenges of Cooperation Across Cyberspace Jeff Moss , Marina Kaljurand , Joseph Nye , Bill Woodcock , Khoo Boon Hui , Wolfgang Kleinwachter , Global Commission on the Stability of Cyberspace
The Industrial Revolution of Lateral Movement Tal Be'ery , Tal Maor , Microsoft Corporation
SS7 Attacker Heaven Turns into Riot: How to Make Nation-State and Intelligence Attackers' Lives Much Harder on Mobile Networks Martin Kacer , Philippe Langlois , P1 Security
Breaking the Laws of Robotics: Attacking Industrial Robots Davide Quarta , Marcello Pogliani , Mario Polino , Federico Maggi , Andrea Maria Zanchettin , Stefano Zanero , Politecnico di Milano , Trend Micro, Inc.
Breaking the x86 Instruction Set Christopher Domas , Battelle Memorial Institute
The Art of Securing 100 Products Nir Valtman , NCR Corporation
Coffee Service
Don't Trust the DOM: Bypassing XSS Mitigations via Script Gadgets Sebastian Lekies , Krzysztof Kotowicz , Eduardo Vela , Google Inc.
Ichthyology: Phishing as a Science Karla Burnett , Stripe
Sonic Gun to Smart Devices: Your Devices Lose Control Under Ultrasound/Sound Zhengbo Wang , Wang Kang , Bo Yang , Shangyuan LI , Aimin Pan , Mobile Security Team of Alibaba Group , CAICT , Tsinghua University
RBN Reloaded - Amplifying Signals from the Underground Dhia Mahjoub , David Rodriguez , Jason Passwaters , Cisco Umbrella (OpenDNS) , Intel 471
Web Cache Deception Attack Omer Gil
WiFuzz: Detecting and Exploiting Logical Flaws in the Wi-Fi Cryptographic Handshake Mathy Vanhoef , KU Leuven
Attacking Encrypted USB Keys the Hard(ware) Way Jean-Michel Picod , Rémi Audebert , Elie Bursztein , Google Inc.
Blue Pill for Your Phone Oleksandr Bazhaniuk , Yuriy Bulygin
The Active Directory Botnet Ty Miller , Paul Kalinin , Threat Intelligence Pty Ltd
kR^X: Comprehensive Kernel Protection Against Just-In-Time Code Reuse Marios Pomonis , Columbia University
A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages! Orange Tsai , DEVCORE
Broadpwn: Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets Nitay Artenstein , Exodus Intelligence
Electronegativity - A Study of Electron Security Luca Carettoni , Doyensec
Influencing the Market to Improve Security Justine Bone , Chris Wysopal , MedSec , Veracode
Friday the 13th: JSON Attacks Alvaro Muñoz , Oleksandr Mirosh , HPE
AVPASS: Leaking and Bypassing Antivirus Detection Model Automatically Jinho Jung , Chanil Jeon , Max Wolotsky , Insu Yun , Taesoo Kim , Georgia Institute of Technology
The Avalanche Takedown: Landslide for Law Enforcement Tom Grasso , Federal Bureau of Investigation - Cyber Division
OpenCrypto: Unchaining the JavaCard Ecosystem Vasilios Mavroudis , George Danezis , Petr Svenda , Dan Cvrcek , University College London , Masaryk University , Enigma Bridge Ltd
Ice Cream Social (Sponsored by Code42 Software Core Security Cybereason Darktrace F5 Networks iboss Malwarebytes & Optiv Security)
WSUSpendu: How to Hang WSUS Clients Romain Coltel , Yves Le Provost , Alsid , ANSSI
Firmware is the New Black - Analyzing Past Three Years of BIOS/UEFI Security Vulnerabilities Rodrigo Branco , Vincent Zimmer , Bruce Monroe , Intel Corporation
Datacenter Orchestration Security and Insecurity: Assessing Kubernetes Mesos and Docker at Scale Dino Dai Zovi , Capsule8, Inc.
Automated Testing of Crypto Software Using Differential Fuzzing Jean-Philippe Aumasson , Yolan Romailler , Kudelski Security
Practical Tips for Defending Web Applications in the Age of DevOps Zane Lackey , Signal Sciences
Defeating Samsung KNOX with Zero Privilege Di Shen , Tencent Keen Security Lab
Infecting the Enterprise: Abusing Office365+Powershell for Covert C2 Craig Dods , Juniper Networks
Bochspwn Reloaded: Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking Mateusz Jurczyk , Google Project Zero
Network Automation is Not Your Safe Haven: Protocol Analysis and Vulnerabilities of Autonomic Network Omar Eissa , ERNW GmbH
Protecting Visual Assets: Digital Image Counter-Forensics Nikita Mazurov , Kenneth Brown , Malmo University , VMware
Cyber Wargaming: Lessons Learned in Influencing Security Stakeholders Inside and Outside Your Organization Jason Nichols , SAIC
Well that Escalated Quickly! How Abusing Docker API Led to Remote Code Execution Same Origin Bypass and Persistence in the Hypervisor via Shadow Containers Michael Cherny , Sagie Dulce , Aqua Security
The Adventures of AV and the Leaky Sandbox Itzik Kotler , Amit Klein , SafeBreach
Cracking the Lens: Targeting HTTP's Hidden Attack-Surface James Kettle , PortSwigger Web Security
New Adventures in Spying 3G and 4G Users: Locate Track & Monitor Ravishankar Borgaonkar , Shinjo Park , Lucca Hirschi , Altaf Shaik , Andrew Martin , Jean-Pierre Seifert , University of Oxford , TU Berlin , ETH Zürich
Protecting Pentests: Recommendations for Performing More Secure Tests Wesley McGrew , HORNE Cyber
Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard Sarah Zatko , Eason Goodale , Cyber Independent Testing Lab , Disconnect
The Shadow Brokers – Cyber Fear Game-Changers Matt Suiche , Comae Technologies
Why Most Cyber Security Training Fails and What We Can Do About it Arun Vishwanath , University at Buffalo
Mimosa Bar (Sponsored by AlienVault Arbor Networks Carbon Black CrowdStrike Cylance DarkMatter Digital Guardian & IBM)
Zero Days Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits Lillian Ablon , RAND Corporation
How We Created the First SHA-1 Collision and What it Means for Hash Security Elie Bursztein , Google Inc.
Game of Chromes: Owning the Web with Zombie Chrome Extensions Tomer Cohen , Wix.com
Fighting the Previous War (aka: Attacking and Defending in the Era of the Cloud) Haroon Meer , Marco Slaviero , Thinkst
And Then the Script-Kiddie Said Let There be No Light. Are Cyber-Attacks on the Power Grid Limited to Nation-State Actors? Anastasis Keliris , Mihalis Maniatakos , Charalambos Konstantinou , New York University , New York University Abu Dhabi
Champagne Toast (Sponsored by ESET North America Fidelis Cybersecurity Fortinet Leidos Palo Alto Networks Raytheon & Symantec)
Breaking Electronic Door Locks Like You're on CSI: Cyber Colin O'Flynn , NewAE Technology Inc.
Orange is the New Purple - How and Why to Integrate Development Teams with Red/Blue Teams to Build More Secure Software April C. Wright , Verizon Wireline
Evilsploit – A Universal Hardware Hacking Toolkit Chui Yew Leong , Mingming Wan , Guangzhou TYA Information Technology Co., Ltd.
The Future of ApplePwn - How to Save Your Money Timur Yunusov , Positive Technologies
All Your SMS & Contacts Belong to ADUPS & Others Ryan Johnson , Angelos Stavrou , Azzedine Benameur , Kryptowire
Delivering Javascript to World+Dog Kyle Randolph , Optimizely
Cloak & Dagger: From Two Permissions to Complete Control of the UI Feedback Loop Yanick Fratantonio , Chenxiong Qian , Simon Pak Ho Chung , Wenke Lee , University of California, Santa Barbara , Georgia Institute of Technology
The Origin of Array [@@species]: How Standards Drive Bugs in Script Engines Natalie Silvanovich , Google Inc.
PEIMA: Harnessing Power Laws to Detect Malicious Activities from Denial of Service to Intrusion Detection Traffic Analysis and Beyond Stefan Prandl , Curtin University
Smoothie Social (Sponsored by Bromium Proofpoint Inc. Rapid7 SentinelOne Trend Micro Webroot StackPath & Tanium)
Betraying the BIOS: Where the Guardians of the BIOS are Failing Alex Matrosov , Cylance
Garbage In Garbage Out: How Purportedly Great Machine Learning Models can be Screwed Up by Bad Data Hillary Sanders , Sophos Group PLC
Evading Microsoft ATA for Active Directory Domination Nikhil Mittal , PentesterAcademy
Advanced Pre-Breach Planning: Utilizing a Purple Team to Measure Effectiveness vs. Maturity Justin Harvey , Accenture
Fighting Targeted Malware in the Mobile Ecosystem Megan Ruthven , Andrew Blaich , Google Inc. , Lookout
What They're Teaching Kids These Days: Comparing Security Curricula and Accreditations to Industry Needs Chaim Sanders , Rob Olson , Rochester Institute of Technology/Zerofox , Rochester Institute of Technology
Digital Vengeance: Exploiting the Most Notorious C&C; Toolkits Waylon Grange , Symantec
Fad or Future? Getting Past the Bug Bounty Hype Kymberlee Price , Angelo Prado , Charles Valentine , Lori Rangel , Microsoft Corporation , salesforce.com , Indeed , Silent Circle
Hacking Serverless Runtimes: Profiling AWS Lambda Azure Functions and More Andrew Krug , Graham Jones , Mozilla , Legitscript
Tracking Ransomware End to End Luca Invernizzi , Kylie McRoberts , Elie Bursztein , Google Inc.
Hunting GPS Jammers Vlad Gostomelsky , Spirent Federal
Offensive Malware Analysis: Dissecting OSX/FruitFly via a Custom C&C; Server Patrick Wardle , Objective-See
So You Want to Market Your Security Product... Aaron Alva , Terrell McSweeny , Federal Trade Commission
Go Nuclear: Breaking Radiation Monitoring Devices Ruben Santamarta , IOActive, Inc.
Wire Me Through Machine Learning Ankit Singh , Vijay Thaware , Symantec
Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev Harold Chun , Norman Barbosa , United States Attorney's Office for the Western District of Washington, U.S. Department of Justice
Taking Windows 10 Kernel Exploitation to the Next Level – Leveraging Write-What-Where Vulnerabilities in Creators Update Morten Schenk , Improsec
ShieldFS: The Last Word in Ransomware Resilient File Systems Andrea Continella , Alessandro Guagnelli , Giovanni Zingaro , Giulio De Pasquale , Alessandro Barenghi , Stefano Zanero , Federico Maggi , Politecnico di Milano , Trend Micro, Inc.
Revoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using Science Daniel Bohannon , Lee Holmes , Mandiant, a division of FireEye, Inc. , Microsoft Corporation
When IoT Attacks: Understanding the Safety Risks Associated with Connected Devices Billy Rios , Jonathan Butts , Whitescope , QED
Splunking Dark Tools - A Pentesters Guide to Pwnage Visualization Nathan Bates , Bryce Kunz , Adobe Systems, Inc.
Taking DMA Attacks to the Next Level: How to do Arbitrary Memory Reads/Writes in a Live and Unmodified System Using a Rogue Memory Controller Anna Trikalinou , Dan Lake , Intel Corporation
Many Birds One Stone: Exploiting a Single SQLite Vulnerability Across Multiple Software Siji Feng , Zhi Zhou , Kun Yang , Beijing Chaitin Tech Co. Ltd.
Intercepting iCloud Keychain Alex Radocea , Longterm Security, Inc.
(in)Security in Building Automation: How to Create Dark Buildings with Light Speed Thomas Brandstetter , Limes Security / University of Applied Sciences St. Poelten
Big Game Theory Hunting: The Peculiarities of Human Behavior in the InfoSec Game Kelly Shortridge , BAE Systems Applied Intelligence
FlowFuzz - A Framework for Fuzzing OpenFlow-Enabled Software and Hardware Switches Nicholas Gray , Thomas Zinner , Phuoc Tran-Gia , Manuel Sommer , University of Würzburg/ Chair of Communication Networks , University of Wurzburg
What's on the Wireless? Automating RF Signal Identification Michael Ossmann , Dominic Spill , Great Scott Gadgets
Bot vs. Bot for Evading Machine Learning Malware Detection Hyrum Anderson , Endgame
Exploit Kit Cornucopia Brad Antoniewicz , Matt Foley , Cisco Cloud Security