Aktualizr-lite: Secure OSTree Updates for Embedded Devices
Explore secure, scalable OSTree updates with Aktualizr-lite, eliminating the need for constant SD card reformatting and complex test automation in embedded device management.
Securing TPM Secrets with TXT and Kernel Signatures
Explore securing TPM2 NVRAM data using Intel TXT and tboot extensions for kernel signature verification, enhancing protection while maintaining usability during kernel updates.
Integrity Measurements and the Cruel World
Explore integrity measurement systems for embedded devices, overcoming challenges in security-enhanced Android and Linux to improve reliability without compromising user experience.
An Agile Approach to Threat Modeling for Securing Open Source Projects - EdgeX Foundry Case Study
Learn an agile approach to threat modeling for open source projects using EdgeX Foundry as an example. Discover practical steps, STRIDE model application, and strategies to evaluate security risks effectively.
A Million Ways to Provision Embedded Linux Images
Explore diverse methods for provisioning embedded Linux images on IoT devices, covering bootloaders, storage options, and popular build systems like OpenEmbedded and Yocto.
Rich Authorization in Resource-Constrained Devices - TPM 2.0 Design and Use Cases
Explore TPM 2.0's advanced authorization capabilities in resource-constrained devices. Learn policy design, calculation, and satisfaction, with practical use cases and a complex example.
USB Arsenal for Masses - Open Source Tools for USB Traffic Analysis
Explore open-source tools for USB traffic monitoring, modification, and security testing. Learn about usbmon, OpenVizsla, USBProxy, GoodFET, and more for cost-effective USB analysis and research.
Writing Your Own Ticket to the Cloud Like APT - A Deep Dive to AD FS Attacks, Detections, and Mitigations
Explore AD FS attacks, detections, and mitigations for Azure AD security. Learn about identity federation vulnerabilities and strategies to protect cloud-based resources from unauthorized access.
Practically-Exploitable Cryptographic Vulnerabilities in Matrix
Uncover critical cryptographic vulnerabilities in Matrix's federated communication standard, compromising confidentiality and authentication claims against malicious servers.
IAM The One Who Knocks
Exposing hidden risks in multi-cloud IAM, detailing access flaws, misconfigurations, and inconsistencies that can lead to unintended access and privilege escalation across cloud providers.
Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS
Explore Microsoft IIS's Dynamic Hashing algorithm and its vulnerabilities. Learn about potential collision attacks on hash tables in web server architecture and their implications for cybersecurity.
Kubernetes Privilege Escalation - Container Escape Equals Cluster Admin
Explore Kubernetes security vulnerabilities, privilege escalation techniques, and container escape risks. Learn to identify powerful system pods and implement mitigations to protect your cluster from potential attacks.
Breaking Firmware Trust From Pre-EFI - Exploiting Early Boot Phases
Explore recent UEFI firmware security changes, focusing on Intel CPUs. Covers firmware mitigations in SMM/DXE and new attacks on Intel PPAM, offering unique insights from an offensive security perspective.
Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds
Systematic study reveals vulnerabilities in IoT cloud platforms' MQTT integration, exposing risks of device control, DoS attacks, data theft, and status manipulation.
How to Detect that Your Domains are Being Abused for Phishing by Using DNS
Learn to protect your domains from phishing attacks using DNS and email security protocols like SPF, DKIM, and DMARC. Discover advanced techniques for detecting and preventing domain abuse.
Critical Zero Days Remotely Compromise the Most Popular Real-Time OS
Explore critical vulnerabilities in VxWorks, a popular real-time OS, and their potential for remote network breaches and device exploitation. Includes live demonstrations on various devices, including medical equipment.
How We Created the First SHA-1 Collision and What it Means for Hash Security
Explore the creation of the first SHA-1 collision, its implications for hash security, and the challenges faced in developing a meaningful payload and scaling computation.
An ACE Up the Sleeve - Designing Active Directory DACL Backdoors
Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.
Man-in-the-SCADA - Anatomy of Data Integrity Attacks in Industrial Control Systems
Explore data integrity attacks in industrial control systems, focusing on attacker perspectives and strategies for unauthorized access to control networks and equipment.
Exploiting USB-IP in Linux
Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.
Conclusions & Key Takeaways from Black Hat Asia 2017
Explore key cybersecurity insights from Black Hat Asia 2017, covering topics like attacker specialization, machine learning, digital nations, and biometrics.