The Mummy 2018 - Microsoft Accidentally Summons Back Ugly Attacks from the Past
Explores how Microsoft inadvertently revived old IP fragmentation vulnerabilities, allowing packet interception, modification, and denial of service attacks. Discusses implications for network security.
Decisions and Revisions - The Ever Evolving Face of the Black Hat NOC
Explore the decision-making process behind Black Hat's network operations center, including equipment selection and service deployment strategies for optimal cybersecurity infrastructure.
PASTA - Portable Automotive Security Testbed with Adaptability
Explore PASTA, a portable testbed for automotive security analysis, enabling research, development, and education in vehicle cybersecurity without ECU restrictions.
How Can Someone with Autism Specifically Enhance the Cyber Security Workforce
Explore unique skills individuals with Autism Spectrum Disorder bring to cybersecurity, enhancing workforce diversity and effectiveness in addressing complex security challenges.
Over-the-Air - How We Remotely Compromised the Gateway, BCM, and Autopilot ECUs of Tesla Cars
Detailing Tesla car hacking techniques, including remote compromises of gateway, BCM, and Autopilot ECUs. Explores vulnerabilities, attack chains, and Tesla's security enhancements in response.
Last Call for SATCOM Security
Explore vulnerabilities in satellite communication systems, including potential cyber-physical attacks on maritime, aviation, and military sectors. Learn about security flaws and their real-world implications.
DeepLocker - Concealing Targeted Attacks with AI Locksmithing
DeepLocker: AI-powered targeted attacks using deep neural networks for evasive malware. Explores mechanisms, implications, and defenses against AI-weaponized cybercrime.
SDL That Won't Break the Bank
Learn cost-effective strategies for implementing a secure development lifecycle in smaller organizations, addressing unique challenges and leveraging available resources.
Automated Discovery of Deserialization Gadget Chains
Explore automated discovery of deserialization gadget chains, understanding vulnerabilities, and learning techniques to find and mitigate exploits in Java libraries and applications.
Outsmarting the Smart City
Explore vulnerabilities in smart city tech, privacy implications, and future trends. Learn to identify city systems and understand attack consequences.
Catch Me, Yes We Can - Pwning Social Engineers Using Natural Language Processing Techniques in Real-Time
Explore techniques to detect and prevent social engineering attacks across various communication channels using content-based analysis and natural language processing.
Lessons and Lulz - The Annual Black Hat USA NOC Report
Insights into setting up, stabilizing, and securing the Black Hat conference network. Learn about tools, techniques, and improvements made by the NOC team to enhance network operations and security.
Lowering the Bar - Deep Learning for Side Channel Analysis
Explore deep learning's potential to automate power side channel analysis, enhancing cryptanalytic techniques and signal processing for improved security assessments.
The Science of Hiring and Retaining Female Cybersecurity Engineers
Explore latest strategies for recruiting and retaining women in cybersecurity, addressing barriers, debunking myths, and implementing effective frameworks for diversity and inclusion.
From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore secure administration challenges, vulnerabilities in password vaults, and effective strategies for protecting administrative credentials in enterprise environments.
Beating the Blockchain by Mapping Out Decentralized Namecoin and Emercoin Infrastructure
Explore decentralized domain infrastructure using Namecoin and Emercoin blockchains, focusing on unofficial TLDs and alternate DNS resolution for takedown-resistant domains.
Stop That Release, There's a Vulnerability!
Explore BlackBerry's software defect tracking system and risk-based release evaluation process for effective security gating in product development.
Pestilential Protocol - How Unsecure HL7 Messages Threaten Patient Lives
Explore healthcare cybersecurity risks, focusing on vulnerabilities in medical devices and HL7 messaging protocols that could potentially endanger patient safety and compromise sensitive medical data.
Black Box is Dead - Long Live Black Box!
Explore the evolution of ATM security against logic attacks, focusing on black box devices and encryption measures implemented to protect cash dispensers.
Back to the Future - A Radical Insecure Design of KVM on ARM
Explore ARM architecture vulnerabilities in KVM, focusing on privilege escalation through exception-generating instructions and hypervisor calls. Learn about potential security risks in virtualization.
AFL's Blindspot and How to Resist AFL Fuzzing for Arbitrary ELF Binaries
Explore AFL fuzzing limitations, its blindspot impact on bug detection, and techniques to resist fuzzing for ELF binaries. Learn about AFL's challenges with symbolic execution seeds.