Black Hat USA Registration

Black Hat USA Registration

Black Hat USA Briefings

Black Hat USA Briefings

Black Hat USA Training

Black Hat USA Training

Black Hat USA Schedule

Black Hat USA Schedule

Black Hat USA Sponsors

Black Hat USA Sponsors

Black Hat USA Special Events

Black Hat USA Special Events

Black Hat USA Venue

Black Hat USA Venue

Schedule

Trainings July 27-30 Briefings July 31 Briefings August 01 Arsenal July 31 Arsenal August 01 Executive Summit
July 30 Sponsored Workshops July 31

Briefings | July 31

Download Briefing Schedule

Registration 0700 – 17:00

0800

Breakfast

Sponsor Hall Hours: 10:00 – 19:00

0850

Welcome & Introduction to Black Hat USA 2013

0900

Keynote Speaker: General Keith B. Alexander

1000

Break

1015

Mainframes: The Past Will Come to Haunt You Philip Young
Roman 2

BlackberryOS 10 From a Security Perspective Ralf-Philipp Weinmann
Roman 4

With BIGDATA comes BIG responsibility: Practical exploiting of MDX injections Dmitry Chastuhin & Alexander Bolshev
Roman 1 & 3

New Trends in FastFlux Networks Wei Xu & Xinran Wang
Palace 2

CrowdSource: An Open Source, Crowd Trained Machine Learning Model for Malware Detection Joshua Saxe
Palace 2

Lessons from Surviving a 300Gbps Denial of Service Attack Matthew Prince
Palace 3

Combating the Insider Threat at the FBI: Real-world Lessons Learned Patrick Reidy
Augustus 5 & 6

Beyond the Application: Cellular Privacy Regulatory Space Christie Dudley
Palace 1

Legal Considerations for Cellular Research Marcia Hofmann
Palace 1

Java Every-Days: Exploiting Software Running on Three Billion Devices Brian Gorenc & Jasiel Spelman
Augustus 1 & 2

How to Build a SpyPhone Kevin McNamee
Augustus 3 & 4

Practical Pentesting of ERPs and Business Applications Alexander Polyakov & Alexey Tyurin
Pompeian

Methodologies of Hacking Embedded Security Appliances Rob Bathurst & Mark Carey
Florentine

1115

Coffee Service

1145

Black-box Assessment of Pseudorandom Algorithms Derek Soeder... & Christopher Abad & Gabriel Acevedo
Roman 2

Shattering Illusions in Lock-Free Worlds: Compiler/Hardware Behaviors in OSes and VMs Marc Blanchou
Roman 4

Password Hashing: The Future is Now Jean-Philippe Aumasson
Roman 4

Power Analysis Attacks for Cheapskates Colin O'Flynn
Roman 1 & 3

Denying Service to DDoS Protection Services Allison Nixon
Palace 2

Denial of Service as a Service - Asymmetrical Warfare at its Finest Robert Masse
Palace 2

What Security Researchers Need to Know About Anti-Hacking Law Marcia Hofmann
Palace 3

Just-In-Time Code Reuse: The More Things Change, the More They Stay the Same Kevin Snow & Lucas Davi
Augustus 5 & 6

A Tale of One Software Bypass of Windows 8 Secure Boot Yuriy Bulygin & Oleksandr Bazhaniuk & Andrew Furtak
Palace 1

TLS 'Secrets' Florent 'NextGen$' Daigniere
Augustus 1 & 2

Million Browser Botnet Jeremiah Grossman & Matt Johansen
Augustus 3 & 4

Practical Pentesting of ERPs and Business Applications cont Alexander Polyakov & Alexey Tyurin
Pompeian

Methodologies of Hacking Embedded Security Appliances cont Rob Bathurst & Mark Carey
Florentine

1245

Lunch

1415

End-to-end Analysis of Domain Generating Algorithm Malware Family Jason Geffner
Roman 2

Pass the Hash and other credential theft and reuse: Preventing Lateral Movement and Privelage Escalation Mark Simos & Patrick Jungles
Roman 4

Fact and Fiction: Defending your Medical Devices Jay Radcliffe
Roman 1 & 3

Universal DDoS Mitigation Bypass Tony Miu & Albert Hui & Wai Leng Lee
Palace 2

Legal Aspects of Full-spectrum Computer Network (Active) Defense Robert Clark
Palace 3

BIOS Security John Butterworth & Corey Kallenberg & Xeno Kovah
Augustus 5 & 6

I Can Hear You Now: Traffic Interception and Remote Mobile Phone Cloning with a Compromised CDMA Femtocell Tom Ritter & Doug DePerry & Andrew Rahimi
Palace I

Lawful Access Panel Matt Blaze & Brewster Kahle & Jennifer Valentino-DeVries & Alan Davidson
Augustus 1 & 2

Evading Deep Inspection for Fun and Shell Olli Pekka Niemi & Antti Levomäki
Augustus 3 & 4

Embedded Devices Security and Firmware RE Jonas Zaddach & Andrei Costin
Pompeian

PDF Attack: A Journey from the Exploit Kit to the Shellcode Jose Miguel Esparza
Florentine

1515

Break

1530

Javascript Static Security Analysis Made Easy with JSPrime Nishant Das Patnaik & Sarathi Sabyasachi Sahoo
Roman 2

How to grow a TREE (Taint-Enabled Reverse Engineering Environment) from a CBASS (Cross-platform Binary Automated Symbolic-execution System) Nathan Li & Loc Nguyen & Xing Li & James Just
Roman 4

Maltego Tungsten As a Collaborative Attack Platform Roelof Temmingh & Andrew MacPherson
Roman 1 & 3

Untwining Twine Jon Chittenden & Anson Gomes
Palace 2

Detecting Vulnerabilities in Virtual Devices Using Conformance Testing -- "Turning Old Hardware into Gold" Kang Li & Michael Contreras
Palace 2

A Practical Attack Against MDM Solutions Daniel Brodie & Michael Shaulov
Palace 3

TOR… ALL-THE-THINGS! Jason Geffner
Augustus 5 & 6

Truncating TLS Connections to Violate Beliefs in Web Applications Ben Smyth & Alfredo Pironti
Augustus 5 & 6

Buying into the Bias: Why Vulnerability Statistics Suck Brian Martin & Steve Christey
Palace 1

Clickjacking Revisted: A Perceptual View of UI Security Devdatta Akhawe
Augustus 1 & 2

OPSEC Failures of Spies Matthew Cole
Augustus 1 & 2

Let's Get Physical: Breaking Home Security Systems and Bypassing Building Controls Drew Porter & Stephen Smith
Augustus 3 & 4

Embedded Devices Security and Firmware RE cont Jonas Zaddach & Andrei Costin
Pompeian

PDF Attack: A Journey from the Exploit Kit to the Shellcode cont Jose Miguel Esparza
Florentine

1630

Coffee Service

1700

The Web IS Vulnerable: XSS Defense on the BattleFront Greg Wroblewski & Ryan Barnett Roman 2

Malicious File for Exploiting Forensic Software Takahiro Haruyama & Hiroshi Suzuki Roman 2

Predicting Susceptibility to Socialbots on Twitter Chris Sumner & Randall Wald
Roman 4

BinaryPig - Scalable Malware Analytics in Hadoop Zachary Hanif & Telvis Calhoun & Jason Trost
Roman 1 & 3

Smashing the Font Scaler Engine in Windows Kernel Ling Chuan Lee & Lee Yee Chan
Palace 2

Pixel-Perfect Timing Attacks with HTML5 Paul Stone
Palace 3

Rooting SIM Cards Karsten Nohl
Augustus 5 & 6

How CVSS is DOSsing Your Patching Policy (and wasting your money) Luca Allodi & Fabio Massacci
Palace 1

Hiding @ Depth -Exploring, Subverting, and Breaking NAND Flash Memory Josh 'm0nk' Thomas
Augustus 1 & 2

Mactans: Injecting Malware Into iOS Devices via Malicious Chargers Billy Lau & Yeongjin Jang & Chengyu Song
Augustus 3 & 4

Embedded Devices Security and Firmware RE cont Jonas Zaddach & Andrei Costin
Pompeian

Town Hall Meeting: CFAA Reform Strategy Kurt Opsahl
Florentine

1730

Reception - Sponsored by our Diamond, Platinum Plus and Platinum level sponsors

1830

PWNIE Awards