BlackHat 2022 Asie

BlackHat 2022 Asie

- THURSDAY | 9:00AM
- Keynote: #HackingDemocracy: Will Our Societies Hold?
  Speaker: Samir Saran
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
- THURSDAY | 10:20AM
- A False Door: Crack the Bluetooth Digital Vehicle Key
  Speaker: Haikuo Xie, Dikun Zhang, Fan Yang, Shan Huang, Weirao Lu
  Tracks:
  
  Hardware / Embedded,
  
  Applied Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  Backdoor Investigation and Incident Response: From Zero to Profit
  Speaker: Anthony LAI, Ken Wong, Alan Ho, Zetta Ke
  Tracks:
  
  Data Forensics & Incident Response,
  
  Malware
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
  
  Remote Memory-Deduplication Attacks
  Speaker: Erik Kraft, Daniel Gruss, Martin Schwarzl
  Tracks:
  
  Cloud & Platform Security,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
- THURSDAY | 11:20AM
- AutoSpear: Towards Automatically Bypassing and Inspecting Web Application Firewalls
  Speaker: Zhenqing Qu, Xiang Ling, Chunming Wu
  Tracks:
  
  AppSec,
  
  Network Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  SideWinder Uncoils to Strike
  Speaker: Noushin Shabab
  Track:
  
  Malware
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  The Firmware Supply-Chain Security Is Broken: Can We Fix It?
  Speaker: Alex Matrosov, Alex Ermolov, Kai Michaelis, Richard Hughes
  Tracks:
  
  Hardware / Embedded,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
- THURSDAY | 1:30PM
- DroidGuard: A Deep Dive into SafetyNet
  Speaker: Romain Thomas
  Track:
  
  Reverse Engineering
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  The Next Gen PlugX/ShadowPad? A Dive into the Emerging China-Nexus Modular Trojan, Pangolin8RAT
  Speaker: Silvia Yeh, Leon Chang
  Tracks:
  
  Malware,
  
  Data Forensics & Incident Response
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  Using Zero to Attack Zero-Knowledge Proof (ZKP) PLONK
  Speaker: Quan Thoi Minh Nguyen
  Tracks:
  
  Cryptography,
  
  Applied Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
- THURSDAY | 2:30PM
- Hunting and Exploiting Recursive MMIO Flaws in QEMU/KVM
  Speaker: Qiuhao Li, Gaoning Pan, Hui He, Chunming Wu
  Tracks:
  
  Cloud & Platform Security,
  
  Exploit Development
  Format: 30-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  Non-Intrusive Vulnerability Localization and Hotpatching for Industrial Control Systems
  Speaker: Prashant Hari Narayan Rajput, Michail Maniatakos
  Tracks:
  
  Cyber-Physical Systems,
  
  Hardware / Embedded
  Format: 30-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
  
  Start Arbitrary Activity App Components as the System User Vulnerability Affecting Samsung Android Devices
  Speaker: Ryan Johnson, Mohamed Elsabagh, Angelos Stavrou
  Tracks:
  
  Mobile,
  
  Exploit Development
  Format: 30-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
- THURSDAY | 3:20PM
- The Little Seal Bug: Optical Sound Recovery from Lightweight Reflective Objects
  Speaker: Ben Nassi, Raz Swissa, Boris Zadov
  Tracks:
  
  Applied Security,
  
  Cyber-Physical Systems
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  Unix Domain Socket: A Hidden Door Leading to Privilege Escalation in the Android Ecosystem
  Speaker: Dongxiang Ke, Lewei Qu, Han Yan, Daozheng Lin
  Tracks:
  
  Mobile,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
  
  USMA: Share Kernel Code With Me
  Speaker: Yong Liu, Jun Yao, Xiaodong Wang
  Track:
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
- THURSDAY | 4:20PM
- Locknote: Conclusions and Key Takeaways from Black Hat Asia 2022
  Speaker: Jeff Moss, Ryan Flores, Lidia Giuliano, Vandana Verma Sehgal, Stefano Zanero
  Track:
  
  Keynote
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
- FRIDAY | 9:00AM
- Keynote: Quantify Security Effectively – Moving the Security Needle From the Security Trenches to the Boardroom
  Speaker: George Do
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
- FRIDAY | 10:20AM
- Like Lightning From the Cloud: Finding RCEs in an Embedded TLS Library and Toasting a Popular Cloud-connected UPS
  Speaker: Yuval Sarel, Gal Levy
  Tracks:
  
  Hardware / Embedded,
  
  Cyber-Physical Systems
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  SMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets
  Speaker: Paul Christian Pajares, Vladimir Kropotov, Zhengyu Dong
  Tracks:
  
  Mobile,
  
  Malware
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
  
  The Next Generation of Windows Exploitation: Attacking the Common Log File System
  Speaker: Shijie Xu, Jianyang Song, Linshuang Li
  Tracks:
  
  Exploit Development,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
- FRIDAY | 11:20AM
- AMSI Unchained: Review of Known AMSI Bypass Techniques and Introducing a New One
  Speaker: Maor Korkos
  Track:
  
  Malware
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  Codema Attack: Controlling Your Smart Home Through Dangling Management Channels
  Speaker: Yan Jia, Bin Yuan, Luyi Xing
  Tracks:
  
  Cyber-Physical Systems,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  The Virtual Battlefield in 2022: Russia-Ukraine War & Its Policy Implications
  Speaker: Kenneth Geers
  Tracks:
  
  Policy,
  
  Defense
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
- FRIDAY | 1:30PM
- Cooper Knows the Shortest Stave: Finding 134 Bugs in the Binding Code of Scripting Languages with Cooperative Mutation
  Speaker: Xu Peng, Yanhao Wang, Hong Hu, Purui Su
  Tracks:
  
  Exploit Development,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  The Hidden RCE Surfaces That Control the Droids
  Speaker: Qidan He, Juntao Wu
  Tracks:
  
  Mobile,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
  
  To Loot or Not to Loot? That Is Not a Question When State-Nexus APT Targets Online Entertainment Industry
  Speaker: Che Chang, Charles Li
  Tracks:
  
  Data Forensics & Incident Response,
  
  Malware
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
- FRIDAY | 2:30PM
- Backdooring of Real Time Automotive OS Devices
  Speaker: Shaked Delarea, Ariel Kadyshevitch
  Tracks:
  
  Cyber-Physical Systems,
  
  Exploit Development
  Format: 30-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  Bypass CFG in Chrome
  Speaker: Yunhai Zhang
  Tracks:
  
  Exploit Development,
  
  Applied Security
  Format: 30-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  Dynamic Process Isolation
  Speaker: Pietro Borrello, Andreas Kogler, Martin Schwarzl
  Tracks:
  
  Cloud & Platform Security,
  
  Defense
  Format: 30-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
- FRIDAY | 3:20PM
- ExplosION: The Hidden Mines in the Android ION Driver
  Speaker: Le Wu, Xuen Li, Tim Xia
  Tracks:
  
  Mobile,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4810
  Experience: In-Person/Virtual
  
  macOS Vulnerabilities Hiding in Plain Sight
  Speaker: Csaba Fitzl
  Tracks:
  
  Exploit Development,
  
  Applied Security
  Format: 40-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual
  
  Taking Kernel Hardening to the Next Level
  Speaker: Jinbum Park, Haehyun Cho, Seolheui Kim, Yeji Kim, Bumhan Kim, Taesoo Kim, Sungbae Yoo
  Tracks:
  
  Defense,
  
  Mobile
  Format: 40-Minute Briefings
  Location: Virtual & Simpor Junior Ballroom 4813
  Experience: In-Person/Virtual
- FRIDAY | 4:20PM
- Keynote: Fireside Chat with U.S. National Cyber Director Chris Inglis
  Speaker: Chris Inglis
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Virtual & Roselle Junior Ballroom 4610
  Experience: In-Person/Virtual