BLACKHAT 2023 EU

2023

BLACKHAT 2023 EU

Black Hat Briefings (běžně označované jako Black Hat ) je konference o počítačové bezpečnosti , která poskytuje bezpečnostní konzultace, školení a instruktáže hackerům, korporacím a vládním agenturám po celém světě.

Keynote: Industrialising Cyber Defence in an Asymmetric World
Speaker: Ollie Whitehouse
Track:

Keynote
Format: 60-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
WEDNESDAY | 10:20AM
Evils in the Sparse Texture Memory: Exploit Kernel Based on Undefined Behaviors of Graphic APIs
Speaker: Xingyu Jin, Speaker: Richard Neal, Speaker: Tony Mendez
Tracks:

Exploit Development,

Mobile
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

HODOR: Reducing Attack Surface on Node.js via System Call Limitation
Speaker: Wenya Wang, Contributor: Xingwei Lin, Contributor: Jingyi Wang, Contributor: Wang Gao, Contributor: Dawu Gu
Tracks:

Application Security: Defense,

Defense
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

LogoFAIL: Security Implications of Image Parsing During System Boot
Speaker: Fabio Pagani, Speaker: Alex Matrosov, Contributor: Alex Ermolov, Contributor: Yegor Vasilenko, Contributor: Sam Thomas, Contributor: Anton Ivanov
Tracks:

Platform Security,

Hardware / Embedded
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3

Millions of Patient Records at Risk: The Perils of Legacy Protocols
Speaker: Sina Yazdanmehr, Contributor: Ibrahim Akkulak
Tracks:

Cloud Security,

Cyber-Physical Systems & IoT
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3
WEDNESDAY | 11:00AM
Briefings Morning Coffee Service

Track:
Location: Briefings Corridor, Level 3
WEDNESDAY | 11:20AM
AutoSpill: Zero Effort Credential Stealing from Mobile Password Managers
Speaker: Ankit Gangwal, Contributor: Shubham Singh, Contributor: Abhijeet Srivastava
Tracks:

Mobile,

Application Security: Offense
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

New Techniques for Split-Second DNS Rebinding
Speaker: Daniel Thatcher
Track:

Application Security: Offense
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

The Magnetic Pull of Mutable Protection: Worked Examples in Cryptographic Agility
Speaker: Daniel Cuthbert, Speaker: Mark Carney, Speaker: Niroshan Rajadurai, Speaker: Benjamin Rodes
Tracks:

Cryptography,

Defense
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3

TunnelCrack: Leaking VPN Traffic by Manipulating Routing Tables
Speaker: Mathy Vanhoef
Track:

Network Security
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
WEDNESDAY | 12:00PM
Briefings Lunch

Track:
Location: ICC Capital Auditorium, Level 0
WEDNESDAY | 1:30PM
A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven
Speaker: Colin Finck, Speaker: Tom Dohrmann
Tracks:

Cyber-Physical Systems & IoT,

Reverse Engineering
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

Hiding in the Clouds: Abusing Azure DevOps Services to Bypass Microsoft Sentinel Analytic Rules
Speaker: Brett Hawkins
Tracks:

Cloud Security,

Enterprise Security
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3

REDIScovering HeadCrab - A Technical Analysis of a Novel Malware and the Mind Behind It
Speaker: Asaf Eitani, Speaker: Nitzan Yaakov
Tracks:

Data Forensics & Incident Response,

Malware
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

Something Rotten in the State of Data Centers
Speaker: Jesse Chick, Speaker: Kasimir Schulz
Tracks:

Enterprise Security,

Reverse Engineering
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3
WEDNESDAY | 2:30PM
Breaking Theoretical Limits: The Gap Between Virtual NICs and Physical Network Cards
Speaker: Luo Quan, Speaker: Qian Chen, Contributor: A Ben, Contributor: Ruiqi Chen, Contributor: Hang An
Tracks:

Cloud Security,

Network Security
Format: 30-Minute Briefings
Location: ICC Capital Suite 14, Level 3

Indirect Prompt Injection Into LLMs Using Images and Sounds
Speaker: Ben Nassi, Contributor: Eugene Bagdasaryan
Track:

AI, ML, & Data Science
Format: 30-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

Through the Looking Glass: How Open Source Projects See Vulnerability Disclosure
Speaker: Marta Rybczynska
Tracks:

Policy,

Application Security: Defense
Format: 30-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3

TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
Speaker: Haixin Duan, Contributor: Xiang Li, Contributor: Wei Xu, Contributor: Chaoyi Lu
Track:

Network Security
Format: 30-Minute Briefings
Location: ICC Capital Suite 4, Level 3
WEDNESDAY | 3:00PM
Briefings Afternoon Coffee Service

Track:
Location: Briefings Corridor, Level 3
WEDNESDAY | 3:20PM
Collide+Power: The Evolution of Software-based Power Side-Channels Attacks
Speaker: Andreas Kogler
Tracks:

Hardware / Embedded,

Cloud Security
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

Security Through Transparency: Scaling Your Customer Trust Program
Speaker: Ayoub Fandi
Tracks:

Enterprise Security,

Policy
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3

The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools
Speaker: Alon Leviev
Tracks:

Malware,

Reverse Engineering
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

When The Front Door Becomes a Backdoor: The Security Paradox of OSDP
Speaker: Eran Jacob, Speaker: Ariel Harush, Contributor: Roy Hodir
Tracks:

Cyber-Physical Systems & IoT,

Hardware / Embedded
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
WEDNESDAY | 4:20PM
Locknote: Conclusions and Key Takeaways from Day 1
Moderator: Jeff Moss, Speaker: Daniel Cuthbert, Panelist: Meadow Ellis, Panelist: Marina Krotofil, Panelist: Saša Zdjelar
Track:

Keynote
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
THURSDAY | 8:00AM
Briefings Breakfast

Track:
Location: Briefings Corridor, Level 3
THURSDAY | 9:00AM
Keynote: My Lessons from the Uber Case
Speaker: Joe Sullivan
Track:

Keynote
Format: 60-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
THURSDAY | 10:20AM
Breaching the Perimeter via Cloud Synchronized Browser Settings
Speaker: Edward Prior
Tracks:

Enterprise Security,

Cloud Security
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3

Deleting Your Domain? Preventing Data Leaks at TLD Scale
Speaker: Maarten Wullink
Tracks:

Defense,

Privacy
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3

My Invisible Adversary: Burnout
Speaker: Johan Berggren, Speaker: Matt Linton
Track:

Community & Career
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

Reviving JIT Vulnerabilities: Unleashing the Power of Maglev Compiler Bugs on Chrome Browser
Speaker: Bohan Liu, Speaker: Zheng Wang
Tracks:

Application Security: Offense,

Exploit Development
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3
THURSDAY | 11:00AM
Briefings Morning Coffee Service

Track:
Location: Briefings Corridor, Level 3
THURSDAY | 11:20AM
Attacking NPUs of Multiple Platforms
Speaker: Ye Zhang, Speaker: Le Wu, Contributor: Shupeng Gao, Contributor: Zheng Huang
Tracks:

Hardware / Embedded,

Platform Security
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

How I Learned to Stop Worrying and Build a Modern Detection & Response Program
Speaker: Allyn Stott
Tracks:

Data Forensics & Incident Response,

Defense
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

Illegitimate Data Protection Requests - To Delete or to Address?
Speaker: Larisa Munteanu, Speaker: Mark Povey
Tracks:

Privacy,

Human Factors
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3

Old Code Dies Hard: Finding New Vulnerabilities in Old Third-Party Software Components and the Importance of Having SBoM for IoT/OT Devices
Speaker: Stanislav Dashevskyi, Speaker: Francesco La Spina
Tracks:

Cyber-Physical Systems & IoT,

Network Security
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
THURSDAY | 12:00PM
Briefings Lunch

Track:
Location: ICC Capital Auditorium, Level 0
THURSDAY | 1:30PM
A Security RISC? The State of Microarchitectural Attacks on RISC-V
Speaker: Lukas Gerlach, Speaker: Daniel Weber, Contributor: Michael Schwarz
Tracks:

Platform Security,

Reverse Engineering
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3

How We Taught ChatGPT-4 to Break mbedTLS AES With Side-Channel Attacks
Speaker: Witold Waligóra
Tracks:

AI, ML, & Data Science,

Hardware / Embedded
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3

Orchestrate This! Kubernetes Rootkit
Speaker: Nicholas Lang, Speaker: Andrew Hughes
Tracks:

Cloud Security,

Malware
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

Sweet QuaDreams or Nightmare Before Christmas? Dissecting an iOS 0-Day
Speaker: Christine Fossaceca, Speaker: Bill Marczak
Tracks:

Mobile,

Reverse Engineering
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
THURSDAY | 2:30PM
A World-View of IP Spoofing in L4 Volumetric DoS Attacks - and a Call to Enable BCP38
Speaker: Vasileios Giotsas
Track:

Network Security
Format: 30-Minute Briefings
Location: ICC Capital Suite 14

Hacking Your Documentation: Who Should WTFM?
Speaker: Elliott Grey
Track:

Community & Career
Format: 30-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

Kidnapping Without Hostages: Virtual Kidnapping and the Dark Road Ahead
Speaker: Craig Gibson, Speaker: Vladimir Kropotov
Tracks:

Human Factors,

AI, ML, & Data Science
Format: 30-Minute Briefings
Location: ICC Capital Suite 4, Level 3

One Million ASUS Routers Under Control: Exploiting ASUS DDNS to MITM Admin Credentials
Speaker: Masaki Kubo, Speaker: Yoshiki Mori, Contributor: Kanta Okugawa
Tracks:

Network Security,

Cyber-Physical Systems & IoT
Format: 30-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3
THURSDAY | 3:00PM
Briefings Afternoon Coffee Service

Track:
Location: Briefings Corridor, Level 3
THURSDAY | 3:20PM
Off The Record - Weaponizing DHCP DNS Dynamic Updates
Speaker: Ori David
Tracks:

Enterprise Security,

Network Security
Format: 40-Minute Briefings
Location: ICC Capital Suites 9 & 10, Level 3

The Black Hat Europe Network Operations Center (NOC) Report
Speaker: Neil Wyler, Speaker: Bart Stump
Track:

Network Security
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3

Unmasking APTs: An Automated Approach for Real-World Threat Attribution
Speaker: Aakanksha Saha
Tracks:

Malware,

AI, ML, & Data Science
Format: 40-Minute Briefings
Location: ICC Capital Suite 14, Level 3

VoBERT: Unstable Log Sequence Anomaly Detection: Introducing Vocabulary-Free BERT
Speaker: Eduardo Barbaro, Contributor: Yury Zhauniarovich, Contributor: Anna Lukina, Contributor: Daan Hofman
Tracks:

AI, ML, & Data Science,

Defense
Format: 40-Minute Briefings
Location: ICC Capital Suite 4, Level 3
THURSDAY | 4:20PM
Locknote: Conclusions and Key Takeaways from Day 2
Moderator: Jeff Moss, Panelist: Ali Abbasi, Panelist: Jiska Classen, Panelist: Vandana Verma, Speaker: Kenneth White
Track:

Keynote
Format: 40-Minute Briefings
Location: ICC Capital Suites 7 & 12, Level 3