Design Pitfalls in Commercial Mini-Programs on Android and iOS
Explore security vulnerabilities in app-in-app paradigms for Android and iOS, focusing on mini-programs' design flaws and potential risks to user privacy and data protection.
A New Hope - The One Last Chance to Save Your SSD Data
Explore SSD data recovery techniques, uncovering hidden management methods and confidential controller information to maximize chances of retrieving lost data from solid-state drives.
Quantum Security and Cryptography - You Are - Probably - Doing it Wrong
Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.
My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection
Explore new timing attacks for hypervisor detection, crucial for sandbox evasion in malware analysis. Learn about hardware-assisted virtualization vulnerabilities and low-level measurement techniques.
It's Not Finished - The Evolving Maturity in Ransomware Operations
Explore the evolving sophistication of ransomware operations, focusing on European targets, attack strategies, and the lifecycle of Rival ransomware. Learn about emerging trends and future threats in cybersecurity.
Hermes Attack - Steal DNN Models in AI Privatization Deployment Scenarios
Unveils a novel attack exploiting PCIe bus vulnerabilities to reconstruct DNN models in AI privatization scenarios, discussing challenges, techniques, and countermeasures.
CDPwn - Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days
Unveiling critical zero-day vulnerabilities in layer 2 protocols, demonstrating their impact on enterprise device and network security, and exploring potential exploitation techniques.
What the Log - So Many Events, So Little Time
Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.
Conclusions and Key Takeaways from Day 1
Insightful discussion on pressing InfoSec issues, including COVID-19 impact, security breaches, misinformation, and digital asset protection, featuring Black Hat Review Board members.
Biometrics and Privacy - Time to Faceoff or is that FaceApp
Explore biometric data usage, privacy legislation, and implications in APAC and globally. Learn about government and private sector practices, legal frameworks, and individual rights regarding biometric information.
Attacking and Defending Machine Learning Applications of Public Cloud
Explore techniques for attacking and defending machine learning applications in public cloud environments, focusing on visual classification vulnerabilities and countermeasures.
Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale
Explore techniques for identifying vulnerabilities in embedded firmware, focusing on multi-binary analysis, dynamic and static approaches, and scalable solutions for IoT device security.
Cutting Edge - Microsoft Browser Security — From People Who Owned It
Deep dive into Microsoft Edge security architecture, exploring sandbox initialization, browser broker implementation, and renderer security isolation.
Real-Time Detection of Attacks Leveraging Domain Administrator Privilege
Discover a real-time method to detect attacks using Domain Administrator privileges, including Golden Tickets, through Domain Controller Event logs for immediate threat mitigation.
Network Defender Archeology - An NSM Case Study in Lateral Movement with DCOM
Explore DCOM as a lateral movement technique from attacker and defender perspectives, addressing knowledge gaps and providing methodical insights for network security professionals.
Perception Deception - Physical Adversarial Attack Challenges
Explore physical adversarial attacks on object detection systems, focusing on YOLOv3. Learn tactics to overcome challenges in real-world scenarios and understand implications for AI security.
Don't Eat Spaghetti with a Spoon - An Analysis of the Practical Value of Threat Intelligence
Explore the effectiveness of Threat Intelligence in predicting Internet malicious activity through analysis of over a million indicators across diverse real-world network sensors.
Off-Path Attacks Against PKI
Explore vulnerabilities in Certificate Authorities and learn how off-path attackers can compromise PKI security, undermining the foundation of Internet application trustworthiness.
The Undeniable Truth - How Remote Attestation Circumvents Deniability Guarantees in Secure Messaging Protocols
Explore protocol design to resist remote attestation attacks in secure messaging, covering cryptographic methods and TEE-based approaches for enhanced deniability and security.
Divide et Impera - MemoryRanger Runs Drivers in Isolated Kernel Spaces
Explore Windows 10 kernel memory protection, its vulnerabilities, and MemoryRanger's innovative approach to isolating drivers for enhanced security against malware attacks.
BLEEDINGBIT - Your APs Belong to Us
Explore BLEEDINGBIT vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn attack methods, packet structures, and prevention strategies for enterprise wireless access points.