BLACKHAT EU 2022

Black Hat Briefings (běžně označované jako Black Hat ) je konference o počítačové bezpečnosti , která poskytuje bezpečnostní konzultace, školení a instruktáže hackerům, korporacím a vládním agenturám po celém světě.

WEDNESDAY | 9:00AM
Keynote - Our Kryptonite: A Defendable Internet
Speaker: Daniel Cuthbert
Track:
Format: 60-Minute Keynote
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual
WEDNESDAY | 10:20AM
Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits
Speaker: Or Yair
Tracks:

Malware,

Cloud & Platform Security
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

CSI:Rowhammer: Closing the Case of Half-Double and Beyond
Speaker: Andreas Kogler, Speaker: Jonas Juffinger
Tracks:

Cloud & Platform Security,

Exploit Development
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

Fail Harder: Finding Critical 0-Days in Spite of Ourselves
Speaker: Douglas McKee, Speaker: Philippe Laulheret
Tracks:

Lessons Learned,

Community & Career
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Practically-exploitable Cryptographic Vulnerabilities in Matrix
Speaker: Martin Albrecht, Speaker: Sofía Celi, Speaker: Benjamin Dowling, Speaker: Dan Jones
Track:

Cryptography
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual
WEDNESDAY | 11:00AM
AM Coffee Service

Track:
Location: Briefings Corridor - Level 3
WEDNESDAY | 11:20AM
Back-connect to the Connected Car. Search for Vulnerabilities in the VW Electric Car.
Speaker: Yuriy Serdyuk, Speaker: Alexey Kondikov, Contributor: Sergey Razmakhnin, Contributor: Khaled Sakr
Tracks:

Hardware / Embedded,

Reverse Engineering
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

IoT Manufacturers' New Nightmare: Design Flaws and Deployment Chaos in Cloud-based IoT Access Control Policies
Speaker: Ze Jin, Speaker: Yiwei Fang, Contributor: Yan Jia, Contributor: Bin Yuan, Contributor: Qixu Liu, Contributor: Luyi Xing
Tracks:

Cloud & Platform Security,

Cyber-Physical Systems
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

The Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
Speaker: Ragnhild Bridget Sageng
Tracks:

Human Factors,

Community & Career
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual

Vlind Glitch: A Blind VCC Glitching Technique to Bypass the Secure Boot of the Qualcomm MSM8916 Mobile SoC
Speaker: Hector Marco, Speaker: Vicente Arnau
Tracks:

Mobile,

Hardware / Embedded
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual
WEDNESDAY | 12:00PM
Lunch Break

Track:
Location: Hall Modules N22-N23
WEDNESDAY | 1:30PM
Abusing CNC Technologies
Speaker: Marco Balduzzi, Contributor: Francesco Sortino, Contributor: Leandro Pierguidi
Tracks:

Cyber-Physical Systems,

Network Security
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

DataBinding2Shell: Novel Pathways to RCE Web Frameworks
Speaker: Haowen Mu, Speaker: Biao He
Tracks:

Application Security,

Exploit Development
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

How We Organize Large-Scale DDoS Exercises in the Netherlands
Speaker: Karl Lovink, Speaker: Mieke van Ulden
Tracks:

Lessons Learned,

Network Security
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

Unwinding the Stack for Fun and Profit
Speaker: Victor Duta, Speaker: Fabian Freyer, Contributor: Cristiano Giuffrida, Contributor: Marius Muench, Contributor: Fabio Pagani
Tracks:

Exploit Development,

Application Security
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual
WEDNESDAY | 2:30PM
Confidence in Chaos: Strategies for World-Class Security Operations
Speaker: Kathryn Knerler, Speaker: Carson Zimmerman, Contributor: Ingrid Parker
Tracks:

Lessons Learned,

Data Forensics & Incident Response
Format: 30-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

Cross-Contract Ricochet Attacks & Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections
Speaker: Nitesh Dhanjani
Tracks:

Application Security,

Exploit Development
Format: 30-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

Good Motive but Bad Design: Pitfalls in MPU Usage in Embedded Systems in the Wild
Speaker: Wei Zhou, Speaker: Zhouqi Jiang, Contributor: Le Guan
Tracks:

Hardware / Embedded,

Cyber-Physical Systems
Format: 30-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Perfect Spray: A Journey From Finding a New Type of Logical Flaw at Linux Kernel To Developing a New Heap Exploitation Technique
Speaker: Yoochan Lee, Contributor: Byoungyoung Lee, Contributor: Yuseok Jeon, Contributor: Jinhan Kwak, Contributor: Junesoo Kang
Tracks:

Exploit Development,

Reverse Engineering
Format: 30-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual
WEDNESDAY | 3:00PM
PM Coffee Service

Track:
Location: Briefings Corridor - Level 3
WEDNESDAY | 3:20PM
Android Parcels: The Bad, the Good and the Better - Introducing Android's Safer Parcel
Speaker: Hao Ke, Speaker: Bernardo Rufino, Speaker: Yang Yang, Contributor: Maria Uretsky
Tracks:

Mobile,

Application Security
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Scammers Who Scam Scammers, Hackers Who Hack Hackers: Exploring a Hidden Sub-economy on Cybercrime Forums and Marketplaces
Speaker: Matt Wixey, Contributor: Angela Gunn
Tracks:

Human Factors,

Defense
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

Select Bugs From Binary Where Pattern Like CVE-1337-Days
Speaker: Tao Yan, Speaker: Ken Hsu, Speaker: Bo Qu
Tracks:

Reverse Engineering,

Cloud & Platform Security
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual

Strengthening Cyber Resiliency in a Time of Geopolitical Crises: Applying Threat Intelligence & Active Defense to Protecting Critical Information Infrastructures
Speaker: Ondrej Nekovar, Speaker: Jan Pohl
Tracks:

Defense,

Lessons Learned
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual
WEDNESDAY | 4:20PM
Locknote: Conclusions and Key Takeaways from Day 1
Speaker: Jeff Moss, Speaker: Sharon Conheady, Speaker: Meadow Ellis, Speaker: Matt Suiche, Speaker: Stefano Zanero
Track:

Keynote
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual
THURSDAY | 8:00AM
Briefings Breakfast

Track:
Location: Briefings Corridor - Level 3
THURSDAY | 9:00AM
Keynote - Cybersecurity: The Next Generation
Speaker: Jen Ellis
Track:
Format: 60-Minute Keynote
Location: Capital Suite Room 7/12 (Level 3)
THURSDAY | 10:20AM
Deep into Android Bluetooth Bug Hunting: New Attack Surfaces and Weak Code Patterns
Speaker: Zinuo Han
Tracks:

Mobile,

Exploit Development
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Grand Theft Drone: Reaching Breaking Point in Drone Proprietary RF Link Security
Speaker: Seungjoon Lee, Speaker: Kwonyoup Kim, Contributor: Seokhie Hong
Tracks:

Reverse Engineering,

Hardware / Embedded
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual

Thresholds Are for Old Threats: Demystifying AI and Machine Learning to Enhance SOC Detection
Speaker: Carole Boijaud
Tracks:

AI, ML, & Data Science,

Defense
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

Writing Your Own Ticket to the Cloud Like APT: A Deep-dive to AD FS Attacks, Detections, and Mitigations
Speaker: Nestori Syynimaa, Speaker: Roberto Rodriguez
Tracks:

Cloud & Platform Security,

Defense
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual
THURSDAY | 11:00AM
AM Coffee Service

Track:
Location: Briefings Corridor - Level 3
THURSDAY | 11:20AM
Dirty Vanity: A New Approach to Code Injection & EDR Bypass
Speaker: Eliran Nissan
Tracks:

Malware,

Defense
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

Knockout Win Against TCC - 20+ NEW Ways to Bypass Your MacOS Privacy Mechanisms
Speaker: Csaba Fitzl, Contributor: Wojciech Regula
Tracks:

Privacy,

Exploit Development
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

LCDPwn: Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again
Speaker: Qian Chen
Tracks:

Network Security,

Hardware / Embedded
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Real-World Detection Evasion Techniques in the Cloud
Speaker: Matt Muir
Tracks:

Cloud & Platform Security,

Malware
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual
THURSDAY | 12:00PM
Lunch Break

Track:
Location: Hall Modules N22-N23
THURSDAY | 1:30PM
Choo Choo, Network Train - The One to Rule Your Perimeter
Speaker: Martin Hron
Tracks:

Network Security,

Hardware / Embedded
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

DnD: Decompiling Deep Neural Network Compiled Binary
Speaker: Ruoyu Wu, Contributor: Antonio Bianchi, Contributor: Taegyu Kim, Contributor: Dave (Jing) Tian, Contributor: Dongyan Xu
Tracks:

Reverse Engineering,

AI, ML, & Data Science
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Microsoft Defender for Office 365 Evasion - The Story of Confirmed Vulnerability
Speaker: Sergey Chubarov
Track:

Cloud & Platform Security
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual

The Hacker's Guide to Policyland
Speaker: Jen Ellis, Speaker: Irfan Hemani
Tracks:

Policy,

Community & Career
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual
THURSDAY | 2:30PM
Event-based Fuzzing, Patch-based Research, and Comment Police: Finding Bugs Through a Bug
Speaker: Huinian Yang, Speaker: Qingyu Li
Tracks:

Lessons Learned,

Mobile
Format: 30-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Fuzzing and Breaking Security Functions of SIMATIC PLCs
Speaker: Gao Jian
Tracks:

Cyber-Physical Systems,

Hardware / Embedded
Format: 30-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual

Searching for RPC Functions to Coerce Authentications in Microsoft Protocols
Speaker: Remi Gascou
Tracks:

Enterprise Security,

Defense
Format: 30-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual

{JS-ON: Security-OFF}: Abusing JSON-Based SQL Queries
Speaker: Noam Moshe
Tracks:

Application Security,

Cloud & Platform Security
Format: 30-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual
THURSDAY | 3:00PM
PM Coffee Service

Track:
Location: Briefings Corridor - Level 3
THURSDAY | 3:20PM
Breaking Kerberos' RC4 Cipher and Spoofing Windows PACs
Speaker: Tom Tervoort
Tracks:

Enterprise Security,

Cryptography
Format: 40-Minute Briefings
Location: Capital Suite Room 14 (Level 3)
Experience: In-Person/Virtual

Bridging the Gap Between Research and Practice in Intelligently Bypassing WAF
Speaker: Cheng Chi
Tracks:

AI, ML, & Data Science,

Network Security
Format: 40-Minute Briefings
Location: Capital Suite Room 9/10 (Level 3)
Experience: In-Person/Virtual

Exploring a New Class of Kernel Exploit Primitive
Speaker: Andrew Ruddick, Contributor: Rohit Mothe
Tracks:

Exploit Development,

Reverse Engineering
Format: 40-Minute Briefings
Location: Capital Suite Room 4 (Level 3)
Experience: In-Person/Virtual

The Black Hat Europe NOC Report
Speaker: Neil R. Wyler, Speaker: Bart Stump
Tracks:

Network Security,

Application Security
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual
THURSDAY | 4:20PM
Locknote: Conclusions and Key Takeaways from Day 2
Speaker: Jeff Moss, Speaker: Jiska Classen, Speaker: Leigh-Anne Galloway, Speaker: Federico Maggi, Speaker: Anant Shrivastava
Track:

Keynote
Format: 40-Minute Briefings
Location: Capital Suite Room 7/12 (Level 3)
Experience: In-Person/Virtual