Black Hat USA 2014 | Briefings Schedule - August 7

TrainingsAugust 2-5 Executive Summit
August 5 BriefingsAugust 6 ArsenalAugust 6 Sponsored SessionsAugust 6 Sponsored WorkshopsAugust 6 BriefingsAugust 7 ArsenalAugust 7 Sponsored Sessions
August 7 Sponsored WorkshopsAugust 7

Briefings | August 7

Download Schedule

08:00

Breakfast

09:00

BadUSB - On Accessories that Turn Evil Karsten Nohl & Jakob LellLagoon K09:00 - 10:00

Epidemiology of Software Vulnerabilities: A Study of Attack Surface Spread Kymberlee Price & Jake KounsSouth Seas GH09:00 - 09:25

How Smartcard Payment Systems Fail Ross AndersonSouth Seas F09:00 - 10:00

I Know Your Filtering Policy Better than You Do: External Enumeration and Exploitation of Email and Web Security Solutions Ben WilliamsSouth Seas IJ09:00 - 10:00

It Just (Net)works: The Truth About iOS 7's Multipeer Connectivity Framework Alban DiquetSouth Seas CD09:00 - 09:25

Mobile Security Roundtable: What Does Mobile Security Look Like Today? What Will it Look Like Tomorrow?Vincenzo Iozzo & Peiter Zatko & Ian Robertson & Dino Dai ZoviPalm A09:00 - 10:00

Reverse-Engineering the Supra iBox: Exploitation of a Hardened MSP430-Based Device Braden ThomasSouth Seas AB09:00 - 10:00

Stay Out of the Kitchen: A DLP Security Bake-Off Zach Lanier & Kelly LumJasmine Ballroom09:00 - 10:00

The New Scourge of Ransomware: A Study of CryptoLocker and Its Friends Lance James & John BambenekMandalay Bay D09:00 - 10:00

Write Once, Pwn Anywhere Yang YuSouth Seas E09:00 - 10:00

09:35

Abuse of CPE Devices and Recommended Fixes Jonathan Spring & Paul Vixie & Chris HallenbeckSouth Seas CD09:35 - 10:00

One Packer to Rule Them All: Empirical Identification, Comparison, and Circumvention of Current Antivirus Detection Techniques Alaeddine Mesbahi & Arne SwinnenSouth Seas GH09:35 - 10:00

10:15

A Practical Attack Against VDI Solutions Daniel Brodie & Michael ShaulovJasmine Ballroom10:15 - 11:15

Bitcoin Transaction Malleability Theory in Practice Daniel Chechik & Ben HayakSouth Seas CD10:15 - 11:15

Building Safe Systems at Scale - Lessons from Six Months at Yahoo Alex StamosLagoon K10:15 - 11:15

Extreme Privilege Escalation on Windows 8/UEFI Systems Corey Kallenberg & Xeno Kovah & Samuel Cornwell & John ButterworthMandalay Bay D10:15 - 11:15

ICSCorsair: How I Will PWN Your ERP Through 4-20 mA Current Loop Alexander Bolshev & Gleb CherbovSouth Seas AB10:15 - 11:15

Leviathan: Command and Control Communications on Planet Earth Kenneth Geers & Kevin ThompsonSouth Seas F10:15 - 11:15

Medical Devices Roundtable: Is There a Doctor in the House? Security and Privacy in the Medical World Jay RadcliffePalm A10:15 - 11:15

Saving Cyberspace Jason HealeySouth Seas E10:15 - 11:15

Sidewinder Targeted Attack Against Android in the Golden Age of Ad Libs Tao Wei & Yulong ZhangSouth Seas GH10:15 - 10:40

When the Lights Go Out: Hacking Cisco EnergyWise Matthias Luft & Ayhan Soner KocaSouth Seas IJ10:15 - 11:15

10:50

Threat Intelligence Library - A New Revolutionary Technology to Enhance the SOC Battle Rhythm!Ryan TrostSouth Seas GH10:50 - 00:00

11:15

Coffee Service

11:45

Abusing Microsoft Kerberos: Sorry You Guys Don't Get It Alva Duckwall & Benjamin DelpySouth Seas CD11:45 - 12:45

Exploiting Unpatched iOS Vulnerabilities for Fun and Profit Yeongjin Jang & Tielei Wang & Byoungyoung Lee & Billy LauSouth Seas E11:45 - 12:45

GRR: Find All the Badness, Collect All the Things Greg CastleSouth Seas GH11:45 - 12:45

Internet Scanning - Current State and Lessons Learned Mark SchloesserSouth Seas IJ11:45 - 12:10

Mission mPOSsible Nils & Jon ButlerLagoon K11:45 - 12:45

MoRE Shadow Walker: The Progression of TLB-Splitting on x86 Jacob TorreySouth Seas AB11:45 - 12:45

Pragmatic Security Automation Roundtable Rich MogullPalm A11:45 - 12:45

RAVAGE - Runtime Analysis of Vulnerabilities and Generation of Exploits Xiaoran Wang & Yoel GluckJasmine Ballroom11:45 - 12:45

Smart Nest Thermostat: A Smart Spy in Your Home Yier Jin & Grant Hernandez & Daniel BuentelloMandalay Bay D11:45 - 12:45

Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways Brian Gorenc & Jasiel SpelmanSouth Seas F11:45 - 12:45

12:20

From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices Tony SagerSouth Seas IJ12:20 - 12:45

12:45

Lunch

14:15

48 Dirty Little Secrets Cryptographers Don't Want You To Know Thomas Ptacek & Alex BalducciLagoon K14:15 - 15:15

Be Mean to Your Code Roundtable: Security in the Age of Continuous Integration & Deployment Matt JohansenPalm A14:15 - 15:15

Miniaturization Jason LarsenSouth Seas AB14:15 - 15:15

"Nobody is Listening to Your Phone Calls." Really? A Debate and Discussion on the NSA's Activities Mark Jaycox & Jamil JafferSouth Seas F14:15 - 15:15

SVG: Exploiting Browsers without Image Parsing Bugs Rennie deGraafSouth Seas CD14:15 - 14:40

The Devil Does Not Exist - The Role of Deception in Cyber Mark Mateski & Matt DevostSouth Seas E14:15 - 15:15

The State of Incident Response Bruce SchneierMandalay Bay D14:15 - 15:15

Time Trial: Racing Towards Practical Timing Attacks Daniel Mayer & Joel SandinJasmine Ballroom14:15 - 15:15

14:50

Static Detection and Automatic Exploitation of Intent Message Vulnerabilities in Android Applications Daniele GallinganiSouth Seas CD14:50 - 15:15

15:15

Break

15:30

A Journey to Protect Points-of-Sale Nir ValtmanSouth Seas IJ15:30 - 16:30

Call To Arms: A Tale of the Weaknesses of Current Client-Side XSS Filtering Martin Johns & Ben Stock & Sebastian LekiesMandalay Bay D15:30 - 16:30

Catching Malware En Masse: DNS and IP Style Dhia Mahjoub & Thibault Reuille & Andree ToonkSouth Seas AB15:30 - 16:30

Fingerprinting Web Application Platforms by Variations in PNG Implementations Dominique BongardSouth Seas GH15:30 - 15:55

Lifecycle of a Phone Fraudster: Exposing Fraud Activity from Reconnaissance to Takeover Using Graph Analysis and Acoustical Anomalies Vijay Balasubramaniyan & Raj Bandyopadhyay & Telvis CalhounSouth Seas E15:30 - 16:30

SAP, Credit Cards, and the Bird that Talks Too Much Ertunga ArsalSouth Seas F15:30 - 16:30

SATCOM Terminals: Hacking by Air, Sea, and Land Ruben SantamartaLagoon K15:30 - 16:30

Security and Software Defined Networking Roundtable: New Exposures or New Opportunities?Robert StrattonPalm A15:30 - 16:30

Understanding IMSI Privacy Ravishankar Borgaonkar & Swapnil UdarJasmine Ballroom15:30 - 16:30

Why You Need to Detect More Than PtH Matthew Hathaway & Jeff MyersSouth Seas CD15:30 - 16:30

16:05

Investigating PowerShell Attacks Ryan Kazanciyan & Matt HastingsSouth Seas GH16:05 - 16:30

16:30

Coffee Service

17:00

Capstone: Next Generation Disassembly Framework Quynh Nguyen AnhSouth Seas CD17:00 - 18:00

Creating a Spider Goat: Using Transactional Memory Support for Security Igor Muttik & Alex NayshtutSouth Seas E17:00 - 18:00

Exposing Bootkits with BIOS Emulation Lars HaukliSouth Seas AB17:00 - 18:00

Hacking the Wireless World with Software Defined Radio - 2.0 Balint SeeberLagoon K17:00 - 18:00

Poacher Turned Gamekeeper: Lessons Learned from Eight Years of Breaking Hypervisors Rafal WojtczukMandalay Bay D17:00 - 18:00

Probabilistic Spying on Encrypted Tunnels Brandon Niemczyk & Prasad RaoSouth Seas IJ17:00 - 17:25

The New Page of Injections Book: Memcached Injections Ivan NovikovSouth Seas F17:00 - 18:00

Understanding TOCTTOU in the Windows Kernel Font Scaler Engine Yu WangJasmine Ballroom17:00 - 18:00

Unwrapping the Truth: Analysis of Mobile Application Wrapping Solutions Ron Gutierrez & Stephen KomalSouth Seas GH17:00 - 18:00

17:35

Badger - The Networked Security State Estimation Toolkit Edmond Rogers & William Rogers & Gabe WeaverSouth Seas IJ17:35 - 18:00

18:00

End of Day