Black Hat USA 2014 | Briefings Schedule - August 6

TrainingsAugust 2-5 Executive Summit
August 5 BriefingsAugust 6 ArsenalAugust 6 Sponsored SessionsAugust 6 Sponsored WorkshopsAugust 6 BriefingsAugust 7 ArsenalAugust 7 Sponsored Sessions
August 7 Sponsored WorkshopsAugust 7

Briefings | August 6

Download Schedule

07:00

Registration

08:00

Breakfast

08:50

Welcome & Introduction To Black Hat USA 2014

09:00

Keynote

Cybersecurity as Realpolitik Dan GeerMandalay Bay Ballroom

10:00

Break

10:15

API Security Roundtable: Lessons Learned in API Security Zane LackeyPalm A10:15 - 11:15

Cellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol Mathew Solnik & Marc BlanchouLagoon K10:15 - 11:15

Digging for IE11 Sandbox Escapes James ForshawSouth Seas GH10:15 - 12:45

Evasion of High-End IPS Devices in the Age of IPv6 Antonios Atlasis & Enno ReySouth Seas CD10:15 - 10:40

Pivoting in Amazon Clouds Andres RianchoSouth Seas AB10:15 - 11:15

Prevalent Characteristics in Modern Malware Rodrigo Branco & Gabriel Negreira BarbosaSouth Seas E10:15 - 11:15

Reverse Engineering Flash Memory for Fun and Benefit Jeong Wook OhJasmine Ballroom10:15 - 11:15

SecSi Product Development: Techniques for Ensuring Secure Silicon Applied to Open-Source Verilog Projects Joseph FitzPatrickSouth Seas IJ10:15 - 11:15

The BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP Antoine Delignat-LavaudMandalay Bay D10:15 - 11:15

The Library of Sparta David Raymond & Greg Conti & Tom CrossSouth Seas F10:15 - 11:15

10:50

Attacking Mobile Broadband Modems Like a Criminal Would Andreas LindhSouth Seas CD10:50 - 11:15

11:15

Coffee Service

11:45

A Survey of Remote Automotive Attack Surfaces Charlie Miller & Christopher ValasekLagoon K11:45 - 12:45

Bringing Software Defined Radio to the Penetration Testing Community Jean-Michel Picod & Jonathan-Christofer Demay & Arnaud LebrunSouth Seas AB11:45 - 12:45

CloudBots: Harvesting Crypto Coins Like a Botnet Farmer Rob Ragan & Oscar SalazarSouth Seas E11:45 - 12:45

Full System Emulation: Achieving Successful Automated Dynamic Analysis of Evasive Malware Christopher KruegelJasmine Ballroom11:45 - 12:45

Government Policy Roundtable: Understanding the NIST Framework for Improving Critical Infrastructure Cybersecurity Tiffany JonesPalm A11:45 - 12:45

How to Wear Your Password Markus JakobssonSouth Seas CD11:45 - 12:10

My Google Glass Sees Your Passwords!Xinwen Fu & Qinggang Yue & Zhen LingMandalay Bay D11:45 - 12:10

Network Attached Shell: N.A.S.ty Systems that Store Network Accessible Shells Jacob HolcombSouth Seas F11:45 - 12:45

Windows Kernel Graphics Driver Attack Surface Ilja van SprundelSouth Seas IJ11:45 - 12:45

12:20

Android FakeID Vulnerability Walkthrough Jeff ForristalMandalay Bay D12:20 - 12:45

Defeating the Transparency Feature of DBI Kang Li & Xiaoning LiSouth Seas CD12:20 - 12:45

12:45

Lunch

14:15

Data-Only Pwning Microsoft Windows Kernel: Exploitation of Kernel Pool Overflows on Microsoft Windows 8.1 Nikita TarakanovSouth Seas CD14:15 - 15:15

Embedded Devices Roundtable: Embedding the Modern World, Where Do We Go From Here?Don Bailey & Zach LanierPalm A14:15 - 15:15

Governments As Malware Authors: The Next Generation Mikko HypponenMandalay Bay D14:15 - 15:15

Mobile Device Mismanagement Stephen BreenSouth Seas AB14:15 - 15:15

OpenStack Cloud at Yahoo Scale: How to Avoid Disaster Anders BeitnesSouth Seas IJ14:15 - 14:40

Oracle Data Redaction is Broken David LitchfieldLagoon K14:15 - 15:15

Point of Sale System Architecture and Security Lucas ZaichkowskySouth Seas GH14:15 - 14:40

The Beast is in Your Memory: Return-Oriented Programming Attacks Against Modern Control-Flow Integrity Protection Techniques Daniel Lehmann & Ahmad-Reza SadeghiSouth Seas E14:15 - 15:15

Unveiling the Open Source Visualization Engine for Busy Hackers Thibault Reuille & Andrew HayJasmine Ballroom14:15 - 15:15

VoIP Wars: Attack of the Cisco Phones Fatih OzavciSouth Seas F14:15 - 15:15

14:50

APT Attribution and DNS Profiling Frankie LiSouth Seas GH14:50 - 15:15

Protecting Data In-Use from Firmware and Physical Attacks Steve WeisSouth Seas IJ14:50 - 15:15

15:15

Break

15:30

Certifications Roundtable: The Quest For Value Dave LewisPalm A15:30 - 16:30

Dynamic Flash Instrumentation for Fun and Profit Timo HirvonenJasmine Ballroom15:30 - 16:30

Finding and Exploiting Access Control Vulnerabilities in Graphical User Interfaces Collin MullinerSouth Seas IJ15:30 - 16:30

Multipath TCP: Breaking Today's Networks with Tomorrow's Protocols Catherine Pearce & Patrick ThomasSouth Seas AB15:30 - 16:30

Pulling Back the Curtain on Airport Security: Can a Weapon Get Past TSA?Billy RiosLagoon K15:30 - 16:30

Reflections on Trusting TrustZone Dan RosenbergMandalay Bay D15:30 - 16:30

Secure Because Math: A Deep-Dive on Machine Learning-Based Monitoring Alex PintoSouth Seas GH15:30 - 16:30

The Big Chill: Legal Landmines that Stifle Security Research and How to Disarm Them Trey Ford & Marcia Hofmann & Kevin BankstonSouth Seas E15:30 - 16:30

What Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels!Aditya K SoodSouth Seas F15:30 - 15:55

Why Control System Cyber-Security Sucks...Dr. Stefan LdersSouth Seas CD15:30 - 16:30

16:05

Joshua SaxeSouth Seas F16:05 - 16:30

16:30

Coffee Service

17:00

802.1x and Beyond!Brad AntoniewiczJasmine Ballroom17:00 - 18:00

Abusing Performance Optimization Weaknesses to Bypass ASLR Byoungyoung Lee & Yeongjin Jang & Tielei WangSouth Seas E17:00 - 18:00

Babar-ians at the Gate: Data Protection at Massive Scale Davi OttenheimerSouth Seas F17:00 - 18:00

Breaking the Security of Physical Devices Silvio CesareLagoon K17:00 - 18:00

Computrace Backdoor Revisited Vitaliy Kamluk & Sergey Belov & Anibal SaccoSouth Seas IJ17:00 - 18:00

Contemporary Automatic Program Analysis Julian CohenSouth Seas GH17:00 - 18:00

Learn How to Control Every Room at a Luxury Hotel Remotely: The Dangers of Insecure Home Automation Deployment Jesus MolinaMandalay Bay D17:00 - 17:25

Researching Android Device Security with the Help of a Droid Army Joshua DrakeSouth Seas CD17:00 - 18:00

Responsible Disclosure Roundtable: You Mad Bro?Trey FordPalm A17:00 - 18:00

17:35

Pili Hu & Wing Cheong LauMandalay Bay D17:35 - 18:00

17:30

Business Hall Reception // Shoreline A // Sponsored by: Diamond, Platinum Plus, Platinum Sponsors

18:30

PWNIE Awards