BLACKHAT ASIE 2023

Black Hat Briefings (běžně označované jako Black Hat ) je konference o počítačové bezpečnosti , která poskytuje bezpečnostní konzultace, školení a instruktáže hackerům, korporacím a vládním agenturám po celém světě.

- THURSDAY | 8:00AM
- Morning Beverage Break (Briefings)
  
  Track:
  Location: Peony Ballroom 4403-04 & 4502-05
- THURSDAY | 9:00AM
- Keynote - Preparing the Long Journey for Data Security
  Speaker: Xiaosheng Tan
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Roselle Junior Ballroom
- THURSDAY | 10:20AM
- Alice in Kernel Land: Lessons Learned From the eBPF Rabbit Hole
  Speaker: Simon Scannell, Speaker: Valentina Palmiotti, Speaker: Juan José López Jaimez
  Tracks:
  
  Exploit Development,
  
  Lessons Learned
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  Bypassing Anti-Cheats & Hacking Competitive Games
  Speaker: Rohan Aggarwal
  Tracks:
  
  Reverse Engineering,
  
  Application Security
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  Revisiting Stealthy Sensitive Information Collection from Android Apps
  Speaker: Guangdong Bai, Speaker: Qing Zhang, Contributor: Guangshuai Xia
  Tracks:
  
  Privacy,
  
  Mobile
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  When Knowledge Graph Meets TTPs: Highly Automated and Adaptive Executable TTP Intelligence for Security Evaluation
  Speaker: Lorin Wu, Speaker: Porot Mo, Contributor: Jack Tang
  Tracks:
  
  Defense,
  
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
- THURSDAY | 11:00AM
- Morning Refreshment Break (Briefings)
  
  Track:
  Location: Peony Ballroom (4403-04 & 4502-05)
- THURSDAY | 11:20AM
- Dilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway IoT
  Speaker: Luyi Xing, Contributor: Xin'an Zhou, Contributor: Jiale Guan, Contributor: Zhiyun Qian
  Tracks:
  
  Network Security,
  
  Cyber-Physical Systems
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  Operation Clairvoyance: How APT Groups Spy on the Media Industry
  Speaker: Yue-Tien Chen, Speaker: Zih-Cing Liao
  Tracks:
  
  Data Forensics & Incident Response,
  
  Malware
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  Stealing With Style: Using CSS to Exploit ProtonMail & Friends
  Speaker: Paul Gerste
  Tracks:
  
  Application Security,
  
  Privacy
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  Two Bugs With One PoC: Rooting Pixel 6 From Android 12 to Android 13
  Speaker: Yong Wang
  Tracks:
  
  Exploit Development,
  
  Mobile
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
- THURSDAY | 12:00PM
- Lunch (Briefings)
  
  Track:
  Location: Peony Ballroom 4403-04 & 4502-05
- THURSDAY | 1:30PM
- Behind the Scenes: How Criminal Enterprises Pre-infect Millions of Mobile Devices
  Speaker: Fyodor Yarochkin, Speaker: Zhengyu Dong, Contributor: Vladimir Kropotov, Contributor: Paul Pajares
  Tracks:
  
  Hardware / Embedded,
  
  Mobile
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  Dirty Stream Attack, Turning Android Share Targets Into Attack Vectors
  Speaker: Dimitrios Valsamaras
  Tracks:
  
  Mobile,
  
  Application Security
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  Grand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock
  Speaker: Seungjoon Lee, Speaker: Kwonyoup Kim, Contributor: Seokhie Hong
  Tracks:
  
  Reverse Engineering,
  
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  Prototype Pollution Leads to RCE: Gadgets Everywhere
  Speaker: Mikhail Shcherbakov
  Tracks:
  
  Application Security,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
- THURSDAY | 2:30PM
- Deception at Scale: How Malware Abuses Trust
  Speaker: Gerardo Fernandez Navarrete
  Tracks:
  
  Malware,
  
  Lessons Learned
  Format: 30-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  Insider Threats Packing Their Bags With Corporate Data
  Speaker: Dagmawi Mulugeta, Contributor: Colin Estep
  Tracks:
  
  Human Factors,
  
  Cloud & Platform Security
  Format: 30-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  PMFault: Voltage Fault Injection on Server Platforms Through the PMBus
  Speaker: Zitai Chen, Contributor: David Oswald
  Tracks:
  
  Hardware / Embedded,
  
  Cloud & Platform Security
  Format: 30-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  PPLdump Is Dead. Long Live PPLdump!
  Speaker: Gabriel Landau
  Tracks:
  
  Exploit Development,
  
  Cloud & Platform Security
  Format: 30-Minute Briefings
  Location: Roselle Junior Ballroom
- THURSDAY | 3:00PM
- Afternoon Refreshment Break (Briefings)
  
  Track:
  Location: Peony Ballroom (4403-04 & 4502-05)
- THURSDAY | 3:20PM
- firmWar: An Imminent Threat to the Foundation of Computing
  Speaker: Vlad Babkin, Contributor: Nate Warfield
  Tracks:
  
  Enterprise Security,
  
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  Hacked on National Television
  Speaker: Linus Kvarnhammar
  Tracks:
  
  Lessons Learned,
  
  Human Factors
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks
  Speaker: Antoine Vastel, Speaker: Konstantina Kontoudi
  Track:
  
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  Nakatomi Space: Lateral Movement as L1 Post-exploitation in OT
  Speaker: Jos Wetzels
  Tracks:
  
  Cyber-Physical Systems,
  
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
- THURSDAY | 4:20PM
- Forward Focus – The Impact of Artificial Intelligence
  Panelist: Maxine Holt, Panelist: Marina Krotofil, Moderator: Tara Seals, Speaker: Fyodor Yarochkin, Panelist: Stefano Zanero
  Tracks:
  
  Keynote,
  
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
- FRIDAY | 8:00AM
- Morning Beverage Break (Briefings)
  
  Track:
  Location: Peony Ballroom 4403-04 & 4502-05
- FRIDAY | 9:00AM
- Trends and Top Takeaways from Black Hat Asia
  Panelist: Sudhanshu Chauhan, Panelist: Ty Miller, Moderator: Jeff Moss, Panelist: Asuka Nakajima, Panelist: Pamela O'Shea
  Track:
  
  Keynote
  Format: 60-Minute Briefings
  Location: Roselle Junior Ballroom
- FRIDAY | 10:20AM
- Breaking Managed Data Services in the Cloud
  Speaker: Yoav Alon, Speaker: Tzah Pahima, Contributor: Yanir Tsarimi
  Tracks:
  
  Enterprise Security,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  Dirty Bin Cache: A New Code Injection Poisoning Binary Translation Cache
  Speaker: Koh Nakagawa
  Tracks:
  
  Exploit Development,
  
  Reverse Engineering
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  E-Meet (or Emit?) My Keystrokes: How Benign Screen-sharing Meetings Could Leak Typing Behaviors
  Speaker: Chrisando Ryan Pardomuan Siahaan, Contributor: Andry Chowanda
  Tracks:
  
  Privacy,
  
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  Sweet Dreams: Abusing Sleep Mode to Break Wi-Fi Encryption and Disrupt WPA2/3 Networks
  Speaker: Mathy Vanhoef, Speaker: Domien Schepers
  Tracks:
  
  Network Security,
  
  Cryptography
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
- FRIDAY | 11:00AM
- Morning Refreshment Break (Briefings)
  
  Track:
  Location: Peony Ballroom (4403-04 & 4502-05)
- FRIDAY | 11:20AM
- Hand Me Your SECRET, MCU! Microarchitectural Timing Attacks on Microcontrollers are Practical
  Speaker: Sandro Pinto, Speaker: Cristiano Rodrigues
  Tracks:
  
  Hardware / Embedded,
  
  Cyber-Physical Systems
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  New Wine in an Old Bottle: Attacking Chrome WebSQL
  Speaker: Ziling Chen, Speaker: Nan Wang, Contributor: Hongli Han
  Tracks:
  
  Exploit Development,
  
  Reverse Engineering
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  Security Advocacy Shouldn't Be for Security Professionals: An Analysis of How the Industry Misses the Mark and How We Can Improve
  Speaker: Sarah Young
  Tracks:
  
  Human Factors,
  
  Community & Career
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  Weaponizing Mobile Infrastructure: Are Politically Motivated Cyber Attacks a Threat to Democracy?
  Speaker: Imran Saleem
  Tracks:
  
  Mobile,
  
  Network Security
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
- FRIDAY | 12:00PM
- Lunch (Briefings)
  
  Track:
  Location: Peony Ballroom 4403-04 & 4502-05
- FRIDAY | 1:30PM
- Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators
  Speaker: Nestori Syynimaa, Speaker: Sravan Akkaram
  Tracks:
  
  Cloud & Platform Security,
  
  Exploit Development
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  A New Attack Interface in Java Applications
  Speaker: Xu Yuanzhen, Contributor: Peter Mularien
  Track:
  
  Application Security
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  A Run a Day Won't Keep the Hacker Away: Inference Attacks on Endpoint Privacy Zones in Fitness Tracking Social Networks
  Speaker: Karel Dhondt, Speaker: Victor Le Pochat
  Tracks:
  
  Privacy,
  
  Application Security
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  Fuzzing the Native NTFS Read-Write Driver (NTFS3) in the Linux Kernel
  Speaker: Chiachih Wu, Speaker: Yuan-Tsung Lo
  Tracks:
  
  Exploit Development,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
- FRIDAY | 2:30PM
- Attacking the WebAssembly Compiler of WebKit
  Speaker: Zong Cao, Speaker: Zheng Wang, Contributor: Yeqi Fu, Contributor: Fangming Gu, Contributor: Bohan Liu
  Track:
  
  Application Security
  Format: 30-Minute Briefings
  Location: Simpor Junior Ballroom 4810
  
  Engaging the Next Generation of Cybersecurity Professionals: The Power of Security Zines
  Speaker: Rohit Sehgal
  Track:
  
  Community & Career
  Format: 30-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  Phoenix Domain Attack: Vulnerable Links in Domain Name Delegation and Revocation
  Speaker: Xiang Li
  Track:
  
  Network Security
  Format: 30-Minute Briefings
  Location: Roselle Junior Ballroom
  
  You Can Run, but You Can't Hide - Finding the Footprints of Hidden Shellcode
  Speaker: John Uhlmann
  Tracks:
  
  Malware,
  
  Reverse Engineering
  Format: 30-Minute Briefings
  Location: Peony Junior Ballroom 4410
- FRIDAY | 3:00PM
- Afternoon Refreshment Break (Briefings)
  
  Track:
  Location: Peony Ballroom (4403-04 & 4502-05)
- FRIDAY | 3:20PM
- Breaking the Chain: An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws
  Speaker: Yakir Kadkoda, Speaker: Ilay Goldman
  Tracks:
  
  Defense,
  
  Application Security
  Format: 40-Minute Briefings
  Location: Peony Junior Ballroom 4410
  
  Cloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
  Speaker: Roni Gavrilov
  Tracks:
  
  Cyber-Physical Systems,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4813
  
  The Black Hat Asia NOC Report
  Speaker: Neil Wyler, Speaker: Bart Stump
  Tracks:
  
  Network Security,
  
  Application Security
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom
  
  The Various Shades of Supply Chain: SBOM, N-Days and Zero Trust
  Speaker: Alex Matrosov, Speaker: Richard Hughes, Speaker: Kai Michaelis
  Tracks:
  
  Hardware / Embedded,
  
  Cloud & Platform Security
  Format: 40-Minute Briefings
  Location: Simpor Junior Ballroom 4810
- FRIDAY | 4:20PM
- Fireside Chat: Jeff Moss and Gaurav Keerthi
  Speaker: Gaurav Keerthi, Moderator: Jeff Moss
  Tracks:
  
  Keynote,
  
  Policy
  Format: 40-Minute Briefings
  Location: Roselle Junior Ballroom