Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Embedded Systems Security

#Firmware Security
Showing: 143 courses
IEEE

Protecting Bare-metal Embedded Systems with Privilege Overlays

0 rewiews
Innovative technique for securing bare-metal embedded systems using privilege overlaying, code integrity, and randomization to prevent attacks while minimizing performance impact.
Add to list
13 Lesons
19 minutes
On-Demand
Free-Video
IEEE

OAT - Attesting Operation Integrity of Embedded Devices

0 rewiews
Innovative framework for attesting operation integrity of embedded devices, addressing control-flow hijacks and data-only attacks in IoT systems through lightweight measurement and verification techniques.
Add to list
24 Lesons
18 minutes
On-Demand
Free-Video
USENIX Enigma Conference

Ghost in the Machine: Challenges in Embedded Binary Security - Enigma 2017

0 rewiews
Explores challenges in embedded binary security, highlighting the lag behind general-purpose systems and difficulties in adopting modern exploit mitigations due to constraints in embedded environments.
Add to list
17 Lesons
20 minutes
On-Demand
Free-Video
Microsoft

Reducing Security Risks in the Hybrid Workplace with Windows 11 and Surface

0 rewiews
Discover how Windows-enhanced security settings on Surface devices reduce organizational security risks by 60% in hybrid workplaces, leveraging Microsoft's holistic ecosystem from chip to cloud.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Linux Foundation

Security Features for UBIFS

0 rewiews
Explore UBIFS cryptography support, fscrypt implementation, and data authentication for embedded systems. Learn about MTD stack protection and establishing a chain of trust.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
Linux Foundation

Azure Sphere - Fitting Linux Security in 4 MiB of RAM

0 rewiews
Explore Azure Sphere's innovative approach to securing IoT devices with Linux, overcoming memory constraints and implementing robust security measures for microcontroller-powered systems.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Linux Foundation

Project Cerberus: Hardware Root of Trust for Cloud Security

0 rewiews
Explore hardware-enforced secure boot and measured boot with Project Cerberus, a cryptographic microcontroller enhancing firmware security for cloud platforms and data centers.
Add to list
20 Lesons
35 minutes
On-Demand
Free-Video
OWASP Foundation

Exploiting Hardware Glitches and Side Channels in Perfect Software

0 rewiews
Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
OWASP Foundation

Embedded Systems Security - Common Threats and Best Practices

0 rewiews
Explore embedded system security threats, proactive controls, and best practices to protect interconnected devices from vulnerabilities and potential DDoS attacks.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

TEEP Implementation on RISC-V Keystone and Arm TrustZone

0 rewiews
Explore TEEP implementation on RISC-V Keystone and Arm TrustZone, focusing on secure provisioning techniques for trusted execution environments in embedded systems.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

Boot-Time Optimization for the Real World

0 rewiews
Explore techniques for optimizing boot time in embedded systems, balancing speed with security and functionality. Learn practical strategies for real-world implementation and hardware design.
Add to list
14 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

Demystifying Intel Security Technologies in Firmware

0 rewiews
Explore Intel's firmware security technologies, including Converged Security, Boot Guard, and Trusted Execution, with insights on implementation and platform protection mechanisms.
Add to list
10 Lesons
53 minutes
On-Demand
Free-Video
Linux Foundation

OP-TEE - When Linux Loses Control

0 rewiews
Explore OP-TEE's role in secure computing, examining how it operates independently from Linux to enhance system security and protect sensitive operations.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Shhh - Stop Sharing Secrets: A Secure Mindset for Embedded Development

0 rewiews
Explore secure embedded development practices, focusing on encryption, authentication, and trusted execution environments to protect IoT devices and data.
Add to list
21 Lesons
43 minutes
On-Demand
Free-Video
Linux Foundation

Secure Bootloaders and Secure Software Update Support in CIP - Civil Infrastructure Platform

0 rewiews
Explore secure bootloaders and software updates in CIP, focusing on implementation, IEC-62443 compliance, and the collaborative efforts of CIP workgroups to enhance industrial software security.
Add to list
27 Lesons
39 minutes
On-Demand
Free-Video
BSidesLV

IoT and OT Firmware Security Analysis with EMBA - From Firmware to Exploit

0 rewiews
Automated firmware analysis for IoT and OT devices using EMBA, an open-source tool that detects vulnerabilities, identifies exploits, and supports penetration testing of embedded systems.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
Linux Foundation

Design and Implementation of a Security Architecture for Critical Infrastructure Industrial Control Systems

0 rewiews
Comprehensive security architecture for critical infrastructure, addressing nation-state cyber threats. Covers hardware roots of trust, secure boot, and integrity measures across various systems and networks.
Add to list
12 Lesons
40 minutes
On-Demand
Free-Video
BruCON Security Conference

Firmware Vulnerabilities in Critical Infrastructure - Tools and Techniques for Security Analysis

0 rewiews
Explore firmware vulnerabilities in critical infrastructure using open-source tools. Learn techniques for deep security analysis, uncovering risks, and leveraging AI to simplify research and reverse engineering.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
OffensiveCon

Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology

0 rewiews
Explore the attack surface and security implications of eSIM technology through a comprehensive deep dive into embedded threats.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
TheIACR

Hardware Security I - CHES 2024

0 rewiews
Explore hardware security topics presented at CHES 2024, chaired by Jan Richter-Brockmann. Gain insights into cutting-edge research and developments in the field of cryptographic hardware and embedded systems.
Add to list
1 Lesons
1 hour 12 minutes
On-Demand
Free-Video
Black Hat

Faults in Our Bus - Novel Bus Fault Attack to Break Trusted Execution Environments in Embedded Systems

0 rewiews
Uncover novel bus fault attacks on Trusted Execution Environments in embedded systems, exploring vulnerabilities in SoC system buses and their implications for IoT security and TEE implementations.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
TheIACR

Physical Emissions - CHES 2024

0 rewiews
Explore cutting-edge research on physical emissions in cryptographic hardware at CHES 2024, chaired by Patrick Schaumont. Gain insights into latest developments and implications for secure system design.
Add to list
1 Lesons
1 hour 9 minutes
On-Demand
Free-Video
OffensiveCon

Booting with Caution: Dissecting Secure Boot's Third-Party Attack Surface

0 rewiews
Dissect Secure Boot's third-party attack surface, exploring vulnerabilities and potential exploits in boot processes.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
Yocto Project

Dealing with UEFI Secure Boot Using Yocto Project

0 rewiews
Implement UEFI Secure Boot in production using Yocto Project. Learn analysis, integration, and maintenance processes for this critical functionality in ongoing projects.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Yocto Project

Practical Security for Embedded Systems Using Trusted Execution Environments - YPDD 2024.09

0 rewiews
Explore practical security measures for embedded systems using Trusted Execution Environments. Learn about TEE benefits, root of trust, and gain insights from Zarhus OS integration within Yocto-based Secure Embedded Linux.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
OpenInfra Foundation

UEFI Secure Boot in Cloud Workloads - Implementation and Benefits

0 rewiews
Explore UEFI Secure Boot implementation in OpenStack environments, covering benefits for virtual workloads, image compatibility, and configuration methods for bare metal deployments using Ironic.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
DEFCONConference

RingHopper: From User-Land to SMM - A Journey Through UEFI Vulnerabilities

0 rewiews
Delve into the discovery of RingHopper, a critical UEFI vulnerability affecting billions of devices, exploring exploitation techniques and elevation methods across Windows and Linux systems.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
TheIACR

Side Channel Metrics and Masking Schemes - CHES 2022 Session

0 rewiews
Explore advanced side channel metrics and masking schemes in cryptography, enhancing security against hardware attacks and information leakage.
Add to list
1 Lesons
1 hour 25 minutes
On-Demand
Free-Video
TheIACR

MIRACLE: MIcRo-ArChitectural Leakage Evaluation - Best Paper Award Session

0 rewiews
Explore groundbreaking research on micro-architectural leakage evaluation in cryptographic hardware, presented by award-winning experts at CHES 2022.
Add to list
1 Lesons
1 hour 29 minutes
On-Demand
Free-Video
TheIACR

Efficient Masking Techniques in Cryptography

0 rewiews
Explore advanced techniques in efficient masking for cryptographic implementations, enhancing security against side-channel attacks in hardware and software systems.
Add to list
1 Lesons
1 hour 30 minutes
On-Demand
Free-Video
TheIACR

Leakage Resilience and Masking Verification in Cryptography

0 rewiews
Explore cutting-edge techniques in cryptographic hardware security, focusing on leakage resilience and masking verification methods for enhanced protection against side-channel attacks.
Add to list
1 Lesons
1 hour 30 minutes
On-Demand
Free-Video
Linux Foundation

Verifiable End-to-End Secure OCI Native Machines

0 rewiews
Explore a secure toolchain for verifiable workloads using signed OCI images, ensuring tamper-proof boot processes and authenticated communication with hosts.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Linux Foundation

Establishing Trust in Linux Keyrings - Built-in, Imputed, or Transitive Trust

0 rewiews
Explore Linux keyrings, trust models, and key management in firmware, kernel, and user space. Learn about trust domains, scope, usage constraints, and security implications for different systems.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
OWASP Foundation

IoT Security - Ecosystem, Interoperability and Standards

0 rewiews
Explore IoT security challenges and solutions with the Security & Privacy Development Lifecycle framework, addressing ecosystem complexities, privacy concerns, and compliance issues in rapidly evolving IoT landscapes.
Add to list
23 Lesons
31 minutes
On-Demand
Free-Video
The Cyber Academy

Cracking Light-weight Cryptography with Side Channels

0 rewiews
Explore side-channel attacks on lightweight cryptography systems, understanding vulnerabilities and defense strategies for secure implementation in resource-constrained environments.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
TheIACR

Side Channel Attacks on Post-Quantum Implementations - Part I

0 rewiews
Explore cutting-edge side channel attacks on post-quantum cryptography implementations in this CHES 2023 session, chaired by Thomas Eisenbarth. Gain insights into emerging security challenges and countermeasures.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
TheIACR

Machine Learning and Side-Channel Analysis - Part 2

0 rewiews
Explore advanced machine learning techniques for side-channel analysis in cryptography, covering neural networks, deep learning, and collision attacks with practical applications and sensitivity analysis.
Add to list
20 Lesons
1 hour 21 minutes
On-Demand
Free-Video
TheIACR

Threshold Implementations in Software: Micro-architectural Leakages in Algorithms - Best Paper CHES 2023

0 rewiews
Explore award-winning research on threshold implementations in software, focusing on micro-architectural leakages in algorithms and their impact on cryptographic security.
Add to list
14 Lesons
31 minutes
On-Demand
Free-Video
TheIACR

Fault Analysis on Symmetric Algorithms I - CHES 2023

0 rewiews
Explore fault analysis techniques for symmetric cryptographic algorithms, focusing on recent research and advancements presented at CHES 2023, chaired by Shivam Bhasin.
Add to list
1 Lesons
1 hour 8 minutes
On-Demand
Free-Video
TheIACR

Symmetric Designs in Cryptographic Hardware and Embedded Systems

0 rewiews
Explore cutting-edge symmetric cryptography designs presented at CHES 2023, featuring innovative research and insights from leading experts in the field.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
TheIACR

Fault Analysis on Symmetric Algorithms II

0 rewiews
Explore advanced fault analysis techniques for symmetric cryptographic algorithms, presented by leading experts at CHES 2023.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
TheIACR

Side-Channel Attacks on Symmetric Algorithms II

0 rewiews
Explore advanced side-channel attacks on symmetric algorithms in this CHES 2023 session, chaired by Thorben Moos. Gain insights into cutting-edge research and developments in cryptographic hardware security.
Add to list
1 Lesons
1 hour 15 minutes
On-Demand
Free-Video
TheIACR

Post-Quantum Cryptography - Part 3

0 rewiews
Explore post-quantum cryptography advancements and gain insights from CHES 2021 conference closing remarks, advancing your understanding of cutting-edge cryptographic technologies.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
Linux Foundation

A Canonical Event Log Structure for IMA - Optimizing Attestation Information

0 rewiews
Explore a new Canonical Event Log structure for IMA, enhancing Linux system attestation with algorithm agility, sequence numbering, and optimized storage for improved security and efficiency.
Add to list
15 Lesons
41 minutes
On-Demand
Free-Video
Linux Foundation

Replace Your Exploit-Ridden Firmware with Linux

0 rewiews
Learn how to replace vulnerable UEFI firmware with NERF, an open-source system using a tiny Linux kernel and initramfs, enhancing security and reducing exploit risks in PC and laptop firmware.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
Linux Foundation

OpenPOWER Host OS Secure Boot Key Management

0 rewiews
Explore OpenPOWER's flexible key management for Linux-based secure boot, covering architecture, ownership, updates, storage, and compatibility across firmware, kernel, and userspace.
Add to list
21 Lesons
33 minutes
On-Demand
Free-Video
Linux Foundation

IoT Developer's Guide to Building Secure IoT Devices

0 rewiews
Learn essential strategies and best practices for developing secure IoT devices, focusing on key vulnerabilities and effective mitigation techniques.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
Linux Foundation

Insights from Zephyr Security Audit and Vulnerability Experiences

0 rewiews
Explore Zephyr's security evolution through vulnerability analysis and external audit findings. Gain practical insights to enhance embedded system security in your projects.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Linux Plumbers Conference

Leveraging and Managing SBAT Revocation Mechanism on Distribution Level

0 rewiews
Explore SBAT revocation mechanisms at the distribution level, focusing on leveraging and managing these systems for enhanced security and efficiency.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Knockin' On MediaTek ADSP's Door

0 rewiews
Reverse engineering MediaTek's audio DSP firmware reveals vulnerabilities in RTOS and Android HAL, potentially enabling local privilege escalation and eavesdropping on user conversations.
Add to list
24 Lesons
37 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Low Level BootROM Protocol Fuzzing Secure Memory Regions

0 rewiews
Explore low-level protocol fuzzing for secure microcontrollers, uncovering vulnerabilities in BootROM USB drivers. Learn about a custom fuzzing framework for SPI, I2C, USB, and UART, and its application in hardware security research.
Add to list
13 Lesons
44 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

ICEFALL - Revisiting A Decade Of OT Insecure-By-Design Practices

0 rewiews
Revisiting insecure-by-design practices in OT devices, highlighting persistent security issues across industries and critical infrastructure, with technical deep-dives and implications for risk management.
Add to list
15 Lesons
58 minutes
On-Demand
Free-Video
BSidesLV

Firmware Security 101

0 rewiews
Explore firmware security fundamentals, vulnerabilities, and protection strategies in embedded systems with expert insights and practical examples.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
Recon Conference

Researching the Unisoc Baseband

0 rewiews
Exploring Unisoc baseband security: reverse-engineering and fuzzing LTE protocol stack to uncover vulnerabilities in budget smartphone chipsets, disrupting radio communication.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
Recon Conference

Baring the System - New Vulnerabilities in SMM of Coreboot and UEFI Based Systems

0 rewiews
Unveiling new vulnerabilities in SMM of Coreboot and UEFI systems, exploring impacts, and discussing mitigation techniques. Includes release of CHIPSEC module for automatic detection.
Add to list
1 Lesons
1 hour 6 minutes
On-Demand
Free-Video
Recon Conference

Neurosurgery for Industrial Routers - Security of Sarian OS

0 rewiews
Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.
Add to list
1 Lesons
1 hour 1 minute
On-Demand
Free-Video
nullcon

Fuzzing Embedded - Trusted Operating Systems Using AFL

0 rewiews
Explore fuzzing techniques for Trusted Execution Environments using AFL, focusing on OP-TEE. Learn about challenges, coverage tracking, and creating initial inputs for effective embedded system security testing.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
nullcon

Hardware Backdooring is Possible

0 rewiews
Demonstration of permanent hardware backdooring using Rakshasa malware, exploring BIOS vulnerabilities and implications for computer security and forensics practices.
Add to list
1 Lesons
52 minutes
On-Demand
Free-Video
Recon Conference

DIY ARM Debugger for Wi-Fi Chips

0 rewiews
Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.
Add to list
1 Lesons
1 hour 2 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Static Analysis-Based Recovery of Service Function Calls in UEFI Firmware

0 rewiews
Discover a new tool for automated recovery of service calls and EFI type info in UEFI firmware, simplifying vulnerability hunting and making firmware code resemble original source.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Breaking Firmware Trust From Pre-EFI - Exploiting Early Boot Phases

0 rewiews
Exploración de vulnerabilidades en fases tempranas de arranque, evolución de mitigaciones de firmware y nuevos ataques en módulos de evaluación de plataformas Intel desde una perspectiva ofensiva.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Exploring the Hidden Attack Surface of OEM Routers

0 rewiews
Descubre vulnerabilidades críticas en routers OEM y sus implicaciones para la seguridad. Análisis detallado de un caso de estudio que revela fallos en la cadena de suministro y prácticas de seguridad deficientes.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
BruCON Security Conference

Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing

0 rewiews
Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
OWASP Foundation

Securing the Internet of Things

0 rewiews
Explore IoT security challenges and solutions, covering smart devices, common verticals, technologies, and key vulnerabilities in this comprehensive talk on securing the Internet of Things.
Add to list
22 Lesons
48 minutes
On-Demand
Free-Video
DefCamp

The U.S. Election System, Can We Fix It? Yes We Can! - DefCamp - 2019

0 rewiews
Explore vulnerabilities in U.S. election systems and potential solutions, covering voter registration, voting machines, and result reporting. Learn about security measures and the importance of human factors in election integrity.
Add to list
31 Lesons
33 minutes
On-Demand
Free-Video
Cooper

Intel AMT - Using & Abusing the Ghost in the Machine

0 rewiews
Explore Intel AMT vulnerabilities and forensics techniques. Learn about potential attacks, mitigations, and non-destructive investigation methods for compromised systems. Gain insights into remote management technology risks.
Add to list
25 Lesons
48 minutes
On-Demand
Free-Video
WEareTROOPERS

Netscreen of Death

0 rewiews
Explore firmware vulnerabilities, live debugging, and real-world attacks on network security devices. Learn about untrusted code, scripting, and common criteria audits in this technical deep dive.
Add to list
17 Lesons
1 hour 10 minutes
On-Demand
Free-Video
USENIX Enigma Conference

Defending, Detecting, and Responding to Hardware and Firmware Attacks - Teddy Reed - USENIX Enigma Conference - 2016

0 rewiews
Explore firmware security, attack surfaces, and defense strategies. Learn to detect vulnerabilities, monitor integrity, and implement deep systems defense for enterprise protection against hardware and firmware attacks.
Add to list
16 Lesons
26 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Modern Secure Boot Attacks - Alex Matrosov - Ekoparty Security Conference - 2019

0 rewiews
Explore modern Secure Boot attacks, focusing on bypassing Intel Boot Guard in enterprise systems. Learn about hardware Root of Trust, Embedded Controllers, and UEFI Firmware vulnerabilities.
Add to list
12 Lesons
36 minutes
On-Demand
Free-Video
Linux Foundation

Open System Firmware Projects

0 rewiews
Explore open source system firmware initiatives aimed at enhancing boot, device, and management firmware. Industry experts discuss efforts to improve openness, portability, security, and maintainability.
Add to list
15 Lesons
44 minutes
On-Demand
Free-Video
Black Hat

Securing Your In-Ear Fitness Coach - Challenges in Hardening Next Generation Wearables

0 rewiews
Explore security challenges and solutions for next-gen wearables, focusing on a custom Security Development Lifecycle for hardware, software, and cloud components in IoT ecosystems.
Add to list
28 Lesons
54 minutes
On-Demand
Free-Video
Black Hat

Breaking Through Another Side - Bypassing Firmware Security Boundaries from Embedded Controller

0 rewiews
Reverse engineering Embedded Controller firmware to bypass Intel BIOS Guard on Lenovo Thinkpads, exploring hardware security boundaries and firmware update processes.
Add to list
20 Lesons
49 minutes
On-Demand
Free-Video
RSA Conference

My Threat Model is Your Threat Model

0 rewiews
Explore evolving threat landscapes, from nation-state conflicts to sophisticated attacks on individuals and devices. Learn about below-OS mitigations to protect BIOS, firmware, and data.
Add to list
16 Lesons
48 minutes
On-Demand
Free-Video
nullcon

I Boot when U-Boot

0 rewiews
Explore a custom bootkit for U-Boot devices, its persistence techniques, and implications for IoT security. Learn about backdooring methods and potential countermeasures.
Add to list
22 Lesons
33 minutes
On-Demand
Free-Video

The Internet of Insecure Things - 10 Most Wanted List

0 rewiews
Explore top 10 security vulnerabilities in Internet of Things devices, covering privacy concerns, industrial systems, and medical applications. Learn about real-world exploits and potential solutions.
Add to list
40 Lesons
53 minutes
On-Demand
Free-Video
0xdade

Demystifying IMSI Catchers

0 rewiews
Uncover the mysteries of IMSI catchers, their functionality, detection methods, and legal implications. Gain insights into cellular network fundamentals and cutting-edge research on unauthorized cell sites.
Add to list
18 Lesons
58 minutes
On-Demand
Free-Video
0xdade

Looking for Malicious Hardware Implants with Minimal Equipment

0 rewiews
Explore hardware security threats, detection methods, and threat modeling with minimal equipment. Learn to identify unexpected features and understand the challenges of hardware implants and interdiction.
Add to list
13 Lesons
44 minutes
On-Demand
Free-Video
0xdade

Securing Bare Metal Hardware at Scale

0 rewiews
Explore advanced techniques for securing firmware in large-scale hardware deployments, addressing challenges and future trends in protecting against persistent backdoors and exploits.
Add to list
13 Lesons
50 minutes
On-Demand
Free-Video
0xdade

Adventures in Hardware Hacking or Building Expensive Tools on a Budget

0 rewiews
Explore hardware hacking techniques like CT scanning and chip decapping for non-destructive device analysis, circuit reconstruction, and vulnerability identification in embedded systems and access control.
Add to list
20 Lesons
50 minutes
On-Demand
Free-Video
Black Hat

Attacking IOBluetoothFamily HCI and Vendor-Specific Commands

0 rewiews
Explores vulnerabilities in Bluetooth stacks, focusing on Host-Controller Interface (HCI) and vendor-specific commands. Demonstrates attack techniques and discusses security implications for MacOS and iOS devices.
Add to list
11 Lesons
38 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Army of Undead - Tailored Firmware Emulation

0 rewiews
Explore automated firmware emulation techniques for embedded systems, covering root filesystem location, architecture identification, and emulation methods using open-source tools and scripts.
Add to list
20 Lesons
1 hour 1 minute
On-Demand
Free-Video
Hack In The Box Security Conference

Bootstrapping Systems With Open Source Firmware

0 rewiews
Explore open-source firmware for enhanced physical security and data protection. Learn about Heads, a custom firmware and OS configuration that combines hardware hardening with secure boot processes.
Add to list
26 Lesons
39 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Hardsploit Project

0 rewiews
Hardsploit: A comprehensive toolbox and framework for auditing electronic systems and embedded devices, addressing the growing security challenges in the Internet of Things era.
Add to list
19 Lesons
56 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Bypassing Hardware-Based Trusted Boot Through x86 Downgrade

0 rewiews
Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.
Add to list
19 Lesons
33 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

TOCTOU Attacks Against Secure Boot and BootGuard

0 rewiews
Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.
Add to list
20 Lesons
39 minutes
On-Demand
Free-Video
Kaspersky

Eight Crazy Ways to Foil Hardware Attacks - For All Budgets

0 rewiews
Explore cost-effective strategies to protect embedded devices from hardware attacks. Learn about common vulnerabilities, defense mechanisms, and design decisions for optimal security in IoT and industrial control systems.
Add to list
13 Lesons
22 minutes
On-Demand
Free-Video
Black Hat

HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk!

0 rewiews
Explore vulnerabilities in HPE Gen10 servers' iLO5 management technology, focusing on the "silicon root of trust" and its implications for server security.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Black Hat

Remotely Attacking System Firmware

0 rewiews
Explore remote attack vectors targeting system firmware, including networking and updates. Learn about exploiting UEFI vulnerabilities for installing persistent implants at scale.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Black Hat

ThunderStrike 2 - Sith Strike

0 rewiews
Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.
Add to list
17 Lesons
43 minutes
On-Demand
Free-Video
Black Hat

Firmware.RE - Firmware Unpacking, Analysis and Vulnerability-Discovery as a Service

0 rewiews
Large-scale analysis of firmware images reveals vulnerabilities across embedded systems, highlighting security challenges and the need for improved tools and techniques in firmware analysis.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Black Hat

Computrace Backdoor Revisited

0 rewiews
Exposición de vulnerabilidades en software antirrobo Computrace, demostrando fallos de seguridad y posibles ataques. Incluye análisis del protocolo, comportamiento sospechoso y métodos de detección/desactivación.
Add to list
21 Lesons
1 hour 6 minutes
On-Demand
Free-Video
DefCamp

Insecurity of Embedded Devices' Firmware - Fast and Furious at Large Scale

0 rewiews
Explore embedded device firmware vulnerabilities and large-scale security challenges in this DefCamp 2015 presentation, offering insights for security specialists and developers.
Add to list
1 Lesons
1 hour 6 minutes
On-Demand
Free-Video
Black Hat

Analysis of the Attack Surface of Windows 10 Virtualization-Based Security

0 rewiews
Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.
Add to list
14 Lesons
51 minutes
On-Demand
Free-Video
USENIX

Green Lights Forever - Analyzing the Security of Traffic Infrastructure

0 rewiews
Researchers expose security vulnerabilities in traffic signal systems, demonstrating potential for disruption and safety risks. Recommendations for improving embedded systems security are provided.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
Black Hat

FirmWar - An Imminent Threat to the Foundation of Computing

0 rewiews
Explore the overlooked risks of enterprise device firmware in IT supply chains, uncovering vulnerabilities and discussing their impact on computing security and industry practices.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

How Hardware Boundaries Define Platform Security

0 rewiews
Exploring how hardware component boundaries impact platform security, focusing on outsourced components, supply chain risks, and threat modeling gaps in modern hardware architectures.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Nifty Tricks and Sage Advice for Shellcode on Embedded Systems

0 rewiews
Clever tricks for writing exploits on embedded systems, including tiny shellcode for ARM, memory corruption on 8-bit micros, and developing without debuggers or firmware images.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Random Walk Through A Few Million Things

0 rewiews
Explore IoT security challenges in enterprises, examining millions of devices to reveal vulnerabilities, default credentials, and outdated firmware. Gain insights into the current state of IoT security.
Add to list
1 Lesons
1 hour 8 minutes
On-Demand
Free-Video
Association for Computing Machinery (ACM)

Colorful Like a Chameleon - Security Nightmares of Embedded Systems

0 rewiews
Explore security vulnerabilities in embedded systems, focusing on real-world examples and practical attack scenarios. Learn about potential risks and strategies for enhancing embedded system security.
Add to list
1 Lesons
1 hour 5 minutes
On-Demand
Free-Video
Black Hat

Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses

0 rewiews
Explore fault injection attacks on Secure Boot, their impact on embedded systems, and strategies for enhancing defenses through simulation techniques.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video