BLACKHAT 2024 ASIE

2024

BLACKHAT 2024 ASIE

Black Hat Briefings (běžně označované jako Black Hat ) je konference o počítačové bezpečnosti , která poskytuje bezpečnostní konzultace, školení a instruktáže hackerům, korporacím a vládním agenturám po celém světě.

- THURSDAY | 8:00AM
- Morning Beverage Break (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- THURSDAY | 9:00AM
- Keynote - Securing Our Cyberspace Together
  Speaker: David Koh
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- THURSDAY | 10:20AM
- Cloud Console Cartographer: Tapping Into Mapping > Slogging Thru Logging
  Speaker: Daniel Bohannon, Speaker: Andi Ahmeti
  Tracks:
  
  Cloud Security,
  
  Data Forensics and Incident Response
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  One Flip is All It Takes: Identifying Syscall-Guard Variables for Data-Only Attacks
  Contributor: Song Liu, Contributor: Zhechang Zhang, Speaker: Hengkai Ye, Contributor: Hong Hu
  Tracks:
  
  Exploit Development,
  
  Application Security: Offense
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  What the TrustZone-M Doesn't See, the MCU Does Grieve Over: Lessons Learned from Assessing a Microcontroller TEE
  Speaker: Sandro Pinto, Speaker: Cristiano Rodrigues
  Tracks:
  
  Hardware / Embedded,
  
  Cyber-Physical Systems & IoT
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  You Shall Not PASS - Analysing a NSO iOS Spyware Sample
  Speaker: Matthias Frielingsdorf
  Tracks:
  
  Mobile,
  
  Malware
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- THURSDAY | 11:00AM
- Morning Refreshment Break (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- THURSDAY | 11:20AM
- Attacking Debug Modules In The Android Ecosystem
  Speaker: Lewei Qu
  Track:
  
  Mobile
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  LLM4Shell: Discovering and Exploiting RCE Vulnerabilities in Real-World LLM-Integrated Frameworks and Apps
  Speaker: Tong Liu, Speaker: Yuekang Li, Contributor: Zizhuang Deng, Contributor: Guozhu Meng, Contributor: Kai Chen
  Tracks:
  
  AI, ML, & Data Science,
  
  Platform Security
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
  
  The Hole in Sandbox: Escape Modern Web-Based App Sandbox From Site-Isolation Perspective
  Speaker: Bohan Liu, Speaker: Haibin Shi
  Tracks:
  
  Exploit Development,
  
  Mobile
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  The Key to Remote Vehicle Control: Autonomous Driving Domain Controller
  Speaker: Shupeng Gao, Speaker: Yingtao Zeng, Contributor: Jie Gao, Contributor: Yimi Hu
  Tracks:
  
  Hardware / Embedded,
  
  Cyber-Physical Systems & IoT
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
- THURSDAY | 12:00PM
- Lunch (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- THURSDAY | 1:30PM
- Breaking Managed Identity Barriers In Azure Services
  Speaker: Nitesh Surana, Speaker: David Fiser
  Tracks:
  
  Cloud Security,
  
  Platform Security
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
  
  From BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting Scams
  Speaker: Luigino Camastra, Speaker: Igor Morgenstern, Contributor: Jan Vojtesek
  Track:
  
  Malware
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  Magicdot: A Hacker's Magic Show of Disappearing Dots and Spaces
  Speaker: Or Yair
  Tracks:
  
  Platform Security,
  
  Malware
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition
  Speaker: Arun Kanuparthi, Speaker: Hareesh Khattri, Speaker: Jason Fung, Speaker: Jeyavijayan JV Rajendran, Speaker: Ahmad-Reza Sadeghi
  Tracks:
  
  Community & Career,
  
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
- THURSDAY | 2:30PM
- A Glimpse Into The Protocol: Fuzz Windows RDP Client For Fun And Profit
  Speaker: Quan Jin, Speaker: Yingqi Shi, Speaker: Mingjia Liu, Contributor: Siyuan Liu, Contributor: Guoxian Zhong
  Tracks:
  
  Platform Security,
  
  Reverse Engineering
  Format: 30-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  CertifiedDCOM: The Privilege Escalation Journey to Domain Admin with DCOM
  Speaker: Tianze Ding
  Tracks:
  
  Enterprise Security,
  
  Network Security
  Format: 30-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  Immoral Fiber: Unlocking & Discovering New Offensive Capabilities of Fibers
  Speaker: Daniel Jary
  Tracks:
  
  Malware,
  
  Reverse Engineering
  Format: 30-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  Operation PoisonedApple: Tracing Credit Card Information Theft to Payment Fraud
  Speaker: Gyuyeon Kim, Contributor: Hyunho Cho
  Tracks:
  
  Data Forensics and Incident Response,
  
  Defense
  Format: 30-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- THURSDAY | 3:00PM
- Afternoon Refreshment Break (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- THURSDAY | 3:20PM
- Bad Randomness: Protecting Against Cryptography's Perfect Crime
  Speaker: Tal Be'ery
  Tracks:
  
  Cryptography,
  
  Cyber-Physical Systems & IoT
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
  
  Confused Learning: Supply Chain Attacks through Machine Learning Models
  Speaker: Adrian Wood, Speaker: Mary Walker
  Tracks:
  
  AI, ML, & Data Science,
  
  Malware
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  Privacy Detective: Sniffing Out Your Data Leaks for Android
  Speaker: Zhengyang Zhou, Speaker: Yiman He, Contributor: Ning Wang, Contributor: Xianlin Wu, Contributor: Feifei Chen
  Tracks:
  
  Mobile,
  
  Privacy
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
- THURSDAY | 4:20PM
- Emerging Frontiers: Insights from the Black Hat Asia Review Board
  Moderator: Ty Miller, Panelist: Shanna Daly, Panelist: Mika Devonshire, Panelist: Marina Krotofil, Panelist: Anthony Cheuk Tung Lai, Panelist: Neil (Grifter) Wyler, Panelist: Fyodor Yarochkin, Contributor: Vitaly Kamluk
  Track:
  
  Keynote
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- FRIDAY | 8:00AM
- Morning Beverage Break (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- FRIDAY | 9:00AM
- Fireside Chat: Jeff Moss and Ruimin He
  Speaker: Jeff Moss, Speaker: Ruimin He
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- FRIDAY | 10:20AM
- China's Military Cyber Operations: Has the Strategic Support Force Come of Age?
  Speaker: Pukhraj Singh
  Tracks:
  
  Policy,
  
  Defense
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  Game of Cross Cache: Let's Win It in a More Effective Way!
  Speaker: Le Wu, Speaker: Qi Zhang
  Tracks:
  
  Mobile,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  LLMs at the Core: From Attention to Action in Scaling Security Teams
  Speaker: Fotis Chantzis, Speaker: Paul McMillan
  Tracks:
  
  AI, ML, & Data Science,
  
  Application Security: Defense
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
  
  The Fault in Our Metrics: Rethinking How We Measure Detection & Response
  Speaker: Allyn Stott
  Tracks:
  
  Defense,
  
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
- FRIDAY | 11:00AM
- Morning Refreshment Break (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- FRIDAY | 11:20AM
- How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads over Pre-Trained Large Model Hubs
  Speaker: Peng Zhou
  Tracks:
  
  AI, ML, & Data Science,
  
  Platform Security
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  The Dark Side of EDR: Repurpose EDR as an Offensive Tool
  Speaker: Shmuel Cohen
  Tracks:
  
  Malware,
  
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  The Final Chapter: Unlimited ways to bypass your macOS privacy mechanisms
  Speaker: Csaba Fitzl, Speaker: Wojciech Reguła
  Tracks:
  
  Privacy,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  Unveiling the Cracks in Virtualization, Mastering the Host System--VMware Workstation Escape
  Speaker: Victor V
  Tracks:
  
  Exploit Development,
  
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- FRIDAY | 12:00PM
- Lunch (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- FRIDAY | 1:30PM
- Bypassing Entra ID Conditional Access Like APT: A Deep Dive Into Device Authentication Mechanisms for Building Your Own PRT Cookie
  Speaker: Yuya Chudo, Contributor: Takayuki Hatakeyama
  Tracks:
  
  Cloud Security,
  
  Platform Security
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  EDR Reloaded: Erase Data Remotely
  Speaker: Tomer Bar, Speaker: Shmuel Cohen
  Tracks:
  
  Enterprise Security,
  
  Platform Security
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  SystemUI As EvilPiP: The Hijacking Attacks on Modern Mobile Devices
  Speaker: WeiMin Cheng, Contributor: Yue Liu
  Tracks:
  
  Mobile,
  
  Platform Security
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  URB Excalibur: The New VMware All-Platform VM Escapes
  Speaker: Yuhao Jiang, Speaker: Xinlei Ying
  Tracks:
  
  Exploit Development,
  
  Cloud Security
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- FRIDAY | 2:30PM
- Back to the Roots: Finding the Origin of CSP Security Bugs
  Speaker: Gertjan Franken, Speaker: Tom Van Goethem
  Tracks:
  
  Application Security: Offense,
  
  Application Security: Defense
  Format: 30-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  Chinese APT: A Master of Exploiting Edge Devices
  Speaker: Greg Chen, Speaker: Charles Li, Speaker: Che Chang
  Tracks:
  
  Cyber-Physical Systems & IoT,
  
  Malware
  Format: 30-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
  
  Faults in Our Bus: Novel Bus Fault Attack to Break Trusted Execution Environments in Embedded Systems
  Speaker: Nimish Mishra, Speaker: Anirban Chakraborty, Contributor: Debdeep Mukhopadhyay
  Track:
  
  Hardware / Embedded
  Format: 30-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  Voice Phishing Syndicates Unmasked: An In-Depth Investigation and Exposure
  Speaker: Sojun Ryu, Speaker: YeongJae Shin
  Tracks:
  
  Human Factors,
  
  Malware
  Format: 30-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
- FRIDAY | 3:00PM
- Afternoon Refreshment Break (Briefings)
  
  Track:
  Location: Jasmine Ballroom
- FRIDAY | 3:20PM
- Debug7: Leveraging a Firmware Modification Attack for Remote Debugging of Siemens S7 PLCs
  Speaker: Eyal Semel, Speaker: Ron Semel, Contributor: Alon Dankner, Contributor: Sara Bitan, Contributor: Eli Biham
  Tracks:
  
  Cyber-Physical Systems & IoT,
  
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3810B
  
  How to Get the Most Out of the Python Decompilers Uncompyle6 and Decompyle3 - How to Write and Read a Bytecode Decompiler
  Speaker: Rocky Bernstein
  Tracks:
  
  Reverse Engineering,
  
  Malware
  Format: 40-Minute Briefings
  Location: Jasmine Junior Ballroom 3812
  
  LinkDoor: A Hidden Attack Surface in the Android Netlink Kernel Modules
  Speaker: Chao Ma, Contributor: Han Yan, Speaker: Tim Xia
  Tracks:
  
  Platform Security,
  
  Mobile
  Format: 40-Minute Briefings
  Location: Heliconia Junior Ballroom 3410B
  
  The Black Hat Asia Network Operations Center (NOC) Report
  Speaker: Neil (Grifter) Wyler, Speaker: Bart Stump
  Tracks:
  
  Network Security,
  
  Application Security: Defense
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610
- FRIDAY | 4:20PM
- Locknote: Conclusions and Key Takeaways
  Contributor: Vitaly Kamluk, Speaker: Anant Shrivastava, Speaker: Pamela O'Shea, Moderator: Ty Miller, Speaker: Jeff Moss
  Track:
  
  Keynote
  Format: 40-Minute Briefings
  Location: Hibiscus Junior Ballroom 3610