Black Hat USA 2014

110 talks · 2014 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• "Nobody is Listening to Your Phone Calls." Really? A Debate and Discussion on the NSA's Activities 2014
• 48 Dirty Little Secrets Cryptographers Don’t Want You To Know 2014
• 802.1x and Beyond! 2014
• A Journey to Protect Points-of-Sale 2014
• A Practical Attack Against VDI Solutions 2014
• A Scalable, Ensemble Approach for Building and Visualizing Deep Code-Sharing Networks 2014
• A Survey of Remote Automotive Attack Surfaces 2014
• Abuse of CPE Devices and Recommended Fixes 2014
• Abusing Microsoft Kerberos: Sorry You Guys Don't Get It 2014
• Abusing Performance Optimization Weaknesses to Bypass ASLR 2014
• Android FakeID Vulnerability Walkthrough 2014
• APT Attribution and DNS Profiling 2014
• Attacking Mobile Broadband Modems Like a Criminal Would 2014
• Babar-ians at the Gate: Data Protection at Massive Scale 2014
• Badger - The Networked Security State Estimation Toolkit 2014
• BadUSB - On Accessories that Turn Evil by Karsten Nohl + Jakob Lell 2014
• Bitcoin Transaction Malleability Theory in Practice 2014
• Breaking the Security of Physical Devices by Silvio Cesare 2014
• Bringing Software Defined Radio to the Penetration Testing Community 2014
• Building Safe Systems at Scale - Lessons from Six Months at Yahoo 2014
• Call To Arms: A Tale of the Weaknesses of Current Client-Side XSS Filtering 2014
• Capstone: Next Generation Disassembly Framework 2014
• Catching Malware En Masse: DNS and IP Style 2014
• Cellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol 2014
• CloudBots: Harvesting Crypto Coins Like a Botnet Farmer 2014
• Computrace Backdoor Revisited 2014
• Contemporary Automatic Program Analysis 2014
• Creating a Spider Goat: Security with Intel CPU Transactional Memory Support 2014
• Data-Only Pwning Microsoft Windows Kernel 2014
• Defeating the Transparency Feature of DBI 2014
• Digging for IE11 Sandbox Escapes Part 1 2014
• Digging for IE11 Sandbox Escapes Part 2 2014
• Dynamic Flash Instrumentation for Fun and Profit 2014
• Epidemiology of Software Vulnerabilities: A Study of Attack Surface Spread 2014
• Evasion of High-End IPS Devices in the Age of IPv6 2014
• Exploiting Unpatched iOS Vulnerabilities for Fun and Profit 2014
• Exposing Bootkits with BIOS Emulation 2014
• Extreme Privilege Escalation on Windows 8/UEFI Systems 2014
• Finding and Exploiting Access Control Vulnerabilities in Graphical User Interfaces 2014
• Fingerprinting Web Application Platforms by Variations in PNG Implementations 2014
• From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices 2014
• Full System Emulation: Achieving Successful Automated Dynamic Analysis of Evasive Malware 2014
• Governments As Malware Authors: The Next Generation 2014
• GRR: Find All the Badness, Collect All the Things 2014
• Hacking the Wireless World with Software Defined Radio - 2.0 2014
• How Smartcard Payment Systems Fail 2014
• How to Leak a 100-Million-Node Social Graph in Just One Week? 2014
• How to Wear Your Password 2014
• I Know Your Filtering Policy Better than You Do 2014
• ICSCorsair: How I Will PWN Your ERP Through 4-20 mA Current Loop 2014
• Internet Scanning - Current State and Lessons Learned 2014
• Investigating PowerShell Attacks 2014
• It Just (Net)works: The Truth About iOS 7's Multipeer Connectivity Framework 2014
• Learn How to Control Every Room at a Luxury Hotel Remotely 2014
• Leviathan: Command and Control Communications on Planet Earth 2014
• Lifecycle of a Phone Fraudster: Exposing Fraud Activity 2014
• Miniaturization 2014
• Mission mPOSsible by Nils + Jon Butler 2014
• Mobile Device Mismanagement 2014
• MoRE Shadow Walker: The Progression of TLB-Splitting on x86 2014
• Multipath TCP: Breaking Today's Networks with Tomorrow's Protocols 2014
• My Google Glass Sees Your Passwords! 2014
• Network Attached Shell: N.A.S.ty Systems that Store Network Accessible Shells 2014
• One Packer to Rule Them All 2014
• OpenStack Cloud at Yahoo Scale: How to Avoid Disaster 2014
• Oracle Data Redaction is Broken by David Litchfield 2014
• Pivoting in Amazon Clouds 2014
• Poacher Turned Gamekeeper: Lessons Learned from Eight Years of Breaking Hypervisors 2014
• Point of Sale System Architecture and Security 2014
• Prevalent Characteristics in Modern Malware 2014
• Probabilistic Spying on Encrypted Tunnels 2014
• Protecting Data In-Use from Firmware and Physical Attacks 2014
• Pulling Back the Curtain on Airport Security: Can a Weapon Get Past TSA? 2014
• RAVAGE - Runtime Analysis of Vulnerabilities and Generation of Exploits 2014
• Reflections on Trusting TrustZone 2014
• Researching Android Device Security with the Help of a Droid Army 2014
• Reverse Engineering Flash Memory for Fun and Benefit 2014
• Reverse-Engineering the Supra iBox: Exploitation of a Hardened MSP430-Based Device 2014
• SAP, Credit Cards, and the Bird that Talks Too Much 2014
• SATCOM Terminals: Hacking by Air, Sea, and Land by Ruben Santamarta 2014
• Saving Cyberspace by Jason Healey 2014
• SecSi Product Development 2014
• Secure Because Math: A Deep-Dive on Machine Learning-Based Monitoring 2014
• Sidewinder Targeted Attack Against Android in the Golden Age of Ad Libs 2014
• Smart Nest Thermostat: A Smart Spy in Your Home 2014
• Static Detection and Automatic Exploitation of Intent Message Vulnerabilities in Android 2014
• Stay Out of the Kitchen: A DLP Security Bake-Off 2014
• SVG: Exploiting Browsers without Image Parsing Bugs 2014
• The Beast is in Your Memory 2014
• The BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP 2014
• The Big Chill: Legal Landmines that Stifle Security Research and How to Disarm Them 2014
• The Devil Does Not Exist - The Role of Deception in Cyber 2014
• The Library of Sparta 2014
• The New Page of Injections Book: Memcached Injections 2014
• The New Scourge of Ransomware: A Study of CryptoLocker and Its Friends 2014
• The State of Incident Response by Bruce Schneier 2014
• Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways 2014
• Threat Intelligence Library - A New Revolutionary Technology to Enhance the SOC Battle Rhythm! 2014
• Time Trial: Racing Towards Practical Timing Attacks 2014
• Understanding IMSI Privacy 2014
• Understanding TOCTTOU in the Windows Kernel Font Scaler Engine 2014
• Unveiling the Open Source Visualization Engine for Busy Hackers 2014
• Unwrapping the Truth: Analysis of Mobile Application Wrapping Solutions 2014
• VoIP Wars: Attack of the Cisco Phones 2014
• What Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels! 2014
• When the Lights Go Out: Hacking Cisco EnergyWise 2014
• Why Control System Cyber-Security Sucks… 2014
• Why You Need to Detect More Than PtH 2014
• Windows Kernel Graphics Driver Attack Surface 2014
• Write Once, Pwn Anywhere 2014