uk: Комп'ютерні науки

description: How my Botnet Purchased Millions of Dollars in Cars and Defeated the Russian Hackers MICHAEL SCHRENK This is the true story of a botnet that created a competitive advantage for a car dealership. This dealership found a website that offered returned lease vehicles—great cars for their inventory—but bad web design and heavy competition from other automotive dealerships made the website useless. In response, a botnet was developed to make automotive purchases with machine precision. With the bot, they could acquire any cars they wanted, without interference from competing dealerships. During its one-year life, this botnet autonomously acquired many millions of dollars in cars. Along the way, it successfully adjusted to competition from a similar bot developed by Russian hackers while maintaining a sufficiently low profile to "stay below the radar" of everyone involved. Michael Schrenk (@mgschrenk) is a Las Vegas based webbot developer, online entrepreneur and writer, who has developed commercial botnets and webbots since 1995. He is the author of "Webbots, Spiders, and Screen Scrapers, 2nd Edition (2012, No Starch Press, San Francisco). Mike has presented talks at DEF CON 10, 11, 15 and 17 and wrote about DEF CON 5 for Computer World Magazine. Facebook: https://www.facebook.com/webbots

uk: вхід без авторизації


Peiter Mudge Zatko

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Having had the opportunity to see things from within the hacker community and from a senior position in the DoD, Mudge has some enlightening stories to share, and is picking some of his favorites. He'll discuss Julian's story to him about US government involvement in the origins of Wikileaks, how the DoD accidentally caused Anonymous to target government systems, some of the ways in which the defense industrial base's poor security works financially in its favor, and cases where the government missed opportunities for positive outreach and understanding with this community. You'll probably recognize parts of these stories from the news, but there are origins and back stories that are lesser known, and that should make for a good story time.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Unexpected Stories From a Hacker Who Made it Inside the Government

DEF CON

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


EMET 4.0 PKI Mitigation

uk: Комп'ютерні науки

description: Microsoft EMET is a free Mitigation tool. In addition to its memory corruption exploit mitigations, a newly introduced feature is the PKI mitigation. This mitigation implements x509 certificate pinning to prevent usage of forged certificates in HTTPS sessions in the web browser. This talk is technical as it demos EMET in action and explains how the PKI mitigation works. Neil Sikka (@neilsikka) is a computer security enthusiast and researcher. He works at Microsoft on MSRC (Microsoft Security Response Center) as a Software Security Engineer where he analyzes 0day exploits and other security vulnerabilities in any Microsoft software, and develops security tools such as EMET. In addition to his security research at work, he also likes to do security research on his free time at home on nights and weekends. He has a technical blog where he posts his security research.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: We have some good news and some bad news. The good news is that security is now top of mind for the people of planet Earth. The bad news is that their security illiteracy has lead to very dangerous precedents and this is likely just the beginning. The reactionary stances taken by the hacker community has induced burnout and fatigue with many of us watching our own demise. We're here to help us all hit rock bottom in the pursuit of something better. At some point the pain of maintaining inertia will exceed the pain of making changes, so it is time for some uncomfortable experimentation. While it may be overwhelming to think about, this is what we do. We hack systems. Finding flaws in the digital world comes naturally to us. We can and must do the same to the physical world; the media, governments, and lawmakers in order to survive the next decade. Let's get started. Nicholas J. Percoco (@c7five) has more than 16 years of information security experience and leads SpiderLabs at Trustwave. Prior to joining Trustwave, Percoco ran security consulting practices at VeriSign, and Internet Security Systems. As a speaker, he has provided unique insight around security breaches, malware, mobile security and InfoSec trends to public (Black Hat, DEFCON, SecTor, You Sh0t the Sheriff, OWASP) and private audiences (Including DHS, US-CERT, Interpol, United States Secret Service) throughout North America, South America, Europe, and Asia. Percoco and his research has been featured by many news organizations including: The Washington Post, eWeek, PC World, CNET, Wired, Network World, Dark Reading, Fox News, USA Today, Forbes, Computerworld, CSO Magazine, CNN, The Times of London, NPR, Gizmodo, Fast Company, Financial Times and The Wall Street Journal. Joshua Corman (@joshcorman) is the Director of Security Intelligence for Akamai Technologies and has more than a decade of experience with security and networking software. Most recently he served as Research Director for Enterprise Security at The 451 Group following his time as Principal Security Strategist for IBM Internet Security Systems. Mr. Corman's cross-domain research highlights adversaries, game theory and motivational structures. His analysis cuts across sectors to the core security challenges plaguing the IT industry, and helps to drive evolutionary strategies toward emerging technologies and shifting incentives. Mr. Corman is a candid and highly-coveted speaker with engagements at leading industry events such as RSA, DEFCON, Interop, ISACA, and SANS. As a staunch advocate for CISOs, Corman also serves as a Fellow with the Ponemon Institute, on the Faculty for IANS, and co-founded Rugged Software -- a value-based initiative to raise awareness and usher in an era of secure digital infrastructure. His passion for challenging the status quo won him the title of Top Influencer of IT by NetworkWorld magazine in 2009. Corman received his bachelor's degree in philosophy, graduating Phi Beta Kappa and summa cum laude, from the University of New Hampshire. He resides with his wife and two daughters in New Hampshire.

uk: вхід без авторизації

name: The Cavalry Isn't Coming: Starting the Revolution to Fsck it All!


Please Insert Inject More Coins

uk: Комп'ютерні науки

description: The ccTalk protocol is widely used in the vending machine sector as well as casino gaming industry, but is actually not that much known, and very little information exists about it except the official documentation. This protocol is used to transfer money-related information between various devices and the machine mainboard like the value of the inserted bill or how many coins need to be given as change to the customer. This talk presents an introduction to the ccTalk protocol, its usage and various funny facts about it. Material presented will include a ccTalk server that can be used for DIY projects and various tools to help analyse and interact with a ccTalk bus. Nicolas "Balda" Oberli (@Baldanos) The ccTalk protocol is widely used in the vending machine sector as well as casino gaming industry, but is actually not that much known, and very few information exists about it except the official documentation. This protocol is used to transfer money-related information between various devices and the machine mainboard like the value of the inserted bill or how many coins need to be given as change to the customer. This talk presents an introduction to the ccTalk protocol, its usage and various funny facts about it. Material presented will include a ccTalk server that can be used for DIY projects and various tools to help analyse and interact with a ccTalk bus. Nicolas "Balda" Oberli works as a security engineer in Switzerland. His main interests are network and VoIP security, electronics and embedded devices hacking. In his free time, he likes to play old videogames and brew his own beer. He is also participates in numerous CTF competitions with the team 0daysober.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Powerpreter is "The" post exploitation tool. It is written completely in powershell which is present on all modern Windows systems. Powerpreter has multiple capabilties which any post exploitation shell worth its salt must have, minus the detection by anti virus or other countermeasure tools. Powerpreter has, to name a few, functions like stealing infromation, logging keys, dumping system secrets, in-memory code execution, getting user credenitals in plain, introducing vulnerabilties, stealing/modifying registry, web server and impersonate users. It is also capable of backdooring a target using multiple methods/payloads which could be controlled using top third party websites. Based on available privs, it could be used to pivot to other machines on a network and thus execute commands, code, powershell scripts etc. on those. It also contains a web shell which includes all these functionalities. It also has limited ability to clean up the system and tinker with logs. Almost all the capabilities of Powerpreter are persistent across reboots, memory resident and hard to detect. Powerpreter uses powershell which enables it not to use any "foreign" code. It could be deployed in a skeleton mode which pulls functionality from the internet on demand. It aims to improve Windows post exploitation practices and help in the most important phase of a Pen Test. The talk will be full of live demonstrations. Nikhil Mittal (@nikhil_mitt) is a hacker, info sec researcher and enthusiast. His area of interest includes penetration testing, attack research, defense strategies and post exploitation research. He has many years of experience in Penetration Testing of many Government Organizations of India and other global corporate giants. He specializes in assessing security risks at secure environments which require novel attack vectors and "out of the box" approach. He has worked extensively on using HID in Penetration Tests and PowerShell for post exploitation. He is creator of Kautilya, a toolkit which makes it easy to use HID in penetration tests and Nishang, a post exploitation framework in powershell. In his free time, Nikhil likes to scan full IP ranges of countries for specific vulnerabilities, does some vulnerability research and works on his projects. He has spoken/trained at conferences like BlackHat USA, BlackHat Europe, RSA China, Troopers, PHDays, BlackHat Abu Dhabi, Hackfest and more.

uk: вхід без авторизації

name: PowerPreter: Post Exploitation Like a Boss


The Dark Arts of OSINT

uk: Комп'ютерні науки

description: The proliferation and availability of public information has increased with the evolution of its dissemination. With the constant creation of digital document archives and the migration towards a paperless society, vast databases of information are continuously being generated. Collectively, these publicly available databases contain enough specific information to pose certain vulnerabilities. The actionable intelligence ascertained from these data sources is known as Open Source Intelligence (OSINT). Numerous search techniques and applications exist to harvest data for OSINT purposes. Advanced operator use, social network searches, geospatial data aggregation, network traffic graphs, image specific searches, metadata extractors, and government databases, provide a wealth of useful data. Furthermore, applications such as FOCA, Maltego, and SearchDiggity, in addition to custom site API integration, yield powerful search queries with organized results. Fluency in OSINT methodologies is essential for effective online reconnaissance, although a true mastery requires further mathematical investigation. The use of statistical correlation can often reveal hidden data relationships. Linkage attacks, inferential analysis, and deductive disclosure can exploit improperly sanitized data sets. These techniques can ultimately lead to data re-identification and de-anonymization, thus exposing personal information for exploitation. We will demonstrate our mathematical algorithm for data identification by attacking publically available anonymized datasets and revealing hidden personal information. Noah Schiffman An IT industry veteran, with 20+ years of experience, Dr. Noah Schiffman is a former black-hat hacker turned security consultant. He spent almost a decade as a career computer hacker, performing penetration testing, social engineering, corporate espionage, digital surveillance, and other ethically questionable projects. Subsequently, he worked as a security consultant, teaching network defense, giving talks, and writing about information security. His past clients have consisted of Fortune 500 companies and various government agencies. For the past several years, his R&D efforts in the commercial and defense sectors have covered areas of data analysis and pattern recognition for security applications. SkyDog (@skydogcon) With 20+ years of experience in network security and computer science, Skydog possesses a unique skillset of technological diversity and depth. His accomplishments range from the design and support of enterprise level system architectures, to developing custom security products and solutions. As an industry leader in the hacker community, his expertise in vulnerability assessment and exploitation, provide him with valuable insight for developing security strategies. He is responsible for establishing and running several Information Security conferences, including Outerz0ne and SkyDogCon. Working for Vanderbilt University, he spends his time researching security, performing data recovery services, and managing 100+ terabytes of storage.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Ask the EFF: The Year in Digital Civil Liberties Get the latest information about how the law is racing to catch up with technological change from staffers at the Electronic Frontier Foundation, the nation's premiere digital civil liberties group fighting for freedom and privacy in the computer age. This session will include updates on current EFF issues such as surveillance online and fighting efforts to use intellectual property claims to shut down free speech and halt innovation, discussion of our technology project to protect privacy and speech online, updates on cases and legislation affecting security research, and much more. Half the session will be given over to question-and-answer, so it's your chance to ask EFF questions about the law and technology issues that are important to you. Kurt Opsahl (@kurtopsahl)(@eff) is a Senior Staff Attorney with the Electronic Frontier Foundation focusing on civil liberties, free speech and privacy law. Opsahl has counseled numerous computer security researchers on their rights to conduct and discuss research. Before joining EFF, Opsahl worked at Perkins Coie, where he represented technology clients with respect to intellectual property, privacy, defamation, and other online liability matters, including working on Kelly v. Arribasoft, MGM v. Grokster and CoStar v. LoopNet. Prior to Perkins, Opsahl was a research fellow to Professor Pamela Samuelson at the U.C. Berkeley School of Information Management & Systems. Opsahl received his law degree from Boalt Hall, and undergraduate degree from U.C. Santa Cruz. Opsahl co-authored "Electronic Media and Privacy Law Handbook". In 2007, Opsahl was named as one of the 'Attorneys of the Year' by California Lawyer magazine for his work on the O'Grady v. Superior Court appeal, which established the reporter's privilege for online journalists. Marcia Hoffmann is an EFF Fellow. Now in private practice, Marcia was previously a senior staff attorney at the Electronic Frontier Foundation, where she focuses on computer crime and security, electronic privacy, free expression, and other digital civil liberties issues. Prior to joining EFF, Marcia was staff counsel and director of the Open Government Project at the Electronic Privacy Information Center (EPIC). Dan Auerbach is a Staff Technologist who is passionate about defending civil liberties and encouraging government transparency. Coming to EFF with a background in mathematical logic and automated reasoning, as well as years of engineering experience at Google, Dan now works on EFF's various technical projects and helps lawyers, activists, and the public understand important technologies that might threaten the privacy or security of users. Eva Galperin is EFF's Global Policy Analyst, and has been instrumental in highlighting government malware designed to spy upon activists around the world. A lifelong geek, Eva misspent her youth working as a Systems Administrator all over Silicon Valley. Since then, she has seen the error of her ways and earned degrees in Political Science and International Relations from SFSU. She comes to EFF from the US-China Policy Institute, where she researched Chinese energy policy, helped to organize conferences, and attempted to make use of her rudimentary Mandarin skills. Mark Jaycox is a Policy Analyst and Legislative Assistant for EFF. His issues include user privacy, civil liberties, EULAs, and "cybersecurity" (online security). When not reading legal or legislative documents, Mark can be found reading non-legal and legislative documents, exploring the Bay Area, and riding his bike. He was educated at Reed College, spent a year abroad at the University of Oxford (Wadham College), and concentrated in History and Politics. The intersection of his concentration with advancing technologies and the law was prevalent throughout his education, and Mark's excited to apply these passions to EFF. Previous to joining EFF, Mark was a Contributor to ArsTechnica, and a Legislative Research Assistant for LexisNexis. Mitch Stoltz is a Staff Attorney at the Electronic Frontier Foundation, focusing on intellectual property. Before joining EFF, Mitch worked on copyright and antitrust litigation for high-tech clients at Constantine Cannon LLP in Washington DC. Long ago, in an Internet far far away, Mitch was Chief Security Engineer at Netscape Communications and Mozilla.org, where he put out fires and cajoled hackers on three continents. He also interned at the Computer and Communications Industry Association and the office of Massachusetts State Senator Jack Hart. Mitch has a JD from Boston University and a BA in Public Policy and Computer Science from Pomona College, where he co-founded the student TV station Studio 47.

uk: вхід без авторизації

name: Panel - Ask the EFF The Year in Digital Civil Liberties


uk: Комп'ютерні науки

description: You know you can't stay away! The most talked about panel at DEF CON! More FAIL than you can shake a stick at. Come hear some of the loudest mouths in the industry talk about the epic security failures of the last year. So much fail, you'll need waffles to make it through. Nothing is sacred not even each other. Over the last two years, we've raised over $2000 for the EFF, let's see how much we can raise this year. David Mortman (@mortman.com) is the Chief Security Architect at Enstratius and is a Contributing Analyst at Securosis. Before enStratus, he ran operations and security for C3. Formerly the Chief Information Security Officer for Siebel Systems, Inc., Previously, Mr. Mortman was Manager of IT Security at Network Associates. Mr. Mortman has also been a regular panelist and speaker at RSA, Blackhat, Defcon and SSecure360 as well. Mr. Mortman sits on a variety of advisory boards including Qualys. He holds a BS in Chemistry from the University of Chicago. David writes for Securosis, Emergent Chaos and the New School blogs. Rich Mogull (@rmogull) is a recovering Gartner analyst who is embarrassed at corporate events because he actually enjoys using technology and can even pop a shell in a pinch. He is a DEF CON Goon, former paramedic and ski patroller, and once drove a submarine for a few minutes without hitting anything. In previous Fail panels he has broken robots, hacked WiFi, impersonated a money mule, and launched rockets. Chris Hoff is VP of Strategy & Planning at Juniper Networks' Security Business Unit, previously serving as chief security architect, responsible for worldwide security solutions architecture, customer advocacy, and field enablement. He was previously director of cloud & virtualization solutions at Cisco Systems where he focused on virtualization and cloud computing security, spending most of his time interacting with global enterprises and service providers, governments, and the defense and intelligence communities. Prior to Cisco, he was Unisys Corporation's chief security architect, served as Crossbeam Systems' chief security strategist, was the CISO and director of enterprise security at a $25 billion financial services company and was founder/CTO of a national security consultancy amongst other startup endeavors. Dave Maynor is a founder of Errata Security and serves as the Chief Technical Officer. Mr. Maynor is responsible for day-to-day technical decisions of Errata Security and also employs a strong background in reverse engineering and exploit development to produce Hacker Eye View reports. Mr. Maynor has previously been the Senior Researcher for Secureworks and a research engineer with the ISS Xforce R&D team where his primary responsibilities included reverse engineering high risk applications, researching new evasion techniques for security tools, and researching new threats before they become widespread. Before ISS, Maynor spent 3 years at Georgia Institute of Technology (GaTech), with the last two years as a part of the information security group as an application developer to help make the sheer size and magnitude of security incidents on campus manageable. Before that Maynor contracted with a variety of different companies in a widespread of industries ranging from digital TV development to protection of top 25 websites to security consulting and penetration testing to online banking and ISPs. James Arlen (@myrcurial) is a senior consultant at Leviathan Security Group providing security consulting services to the utility and financial verticals. He has been involved with implementing a practical level of information security in Fortune 500, TSE 100, and major public-sector corporations for 19+ years. James is also a contributing analyst with Securosis and has a recurring column on Liquidmatrix Security Digest. Best described as: "Infosec geek, hacker, social activist, author, speaker, and parent." His areas of interest include organizational change, social engineering, blinky lights and shiny things. Rob Graham (@ErrataRob) is an American security consultant, best known as the father of network IPS and the creator of BlackICE. He's been in cybersec since before people started using the term "cybersec," starting as a child learning from his grandfather, who was a code breaker in WWII.

uk: вхід без авторизації

name: DEF CON Comedy Jam Part VI, Return of the Fail


Panel - Do It Yourself Cellular IDS

uk: Комп'ютерні науки

description: For less than $500, you can build your own cellular intrusion detection system to detect malicious activity through your own local femtocell. Our team will show how we leveraged root access on a femtocell, reverse engineered the activation process, and turned it into a proof-of-concept cellular network intrusion monitoring system. We leveraged commercial Home Node-Bs ("femtocells") to create a 3G cellular network sniffer without needing to reimplement the UMTS or CDMA2000 protocol stacks. Inside a Faraday cage, we connected smartphones to modified femtocells running Linux distributions and redirected traffic to a Snort instance. Then we captured traffic from infected phones and showed how Snort was able to detect and alert upon malicious traffic. We also wrote our own CDMA protocol dissector in order to better analyze CDMA traffic. The goal of this project was to develop a low-cost proof-of-concept method for capturing and analyzing cellular traffic using locally-deployed femtocells, which any security professional can build. Sherri Davidoff (@sherridavidoff) is a principal and Senior Security Consultant at LMG Security. She has over a decade of experience as an information security professional, specializing in penetration testing, forensics, social engineering testing and web application assessments. Sherri is the co-author of "Network Forensics: Tracking Hackers Through Cyberspace" (Prentice Hall, 2012). She is a GIAC-certified forensic examiner (GCFA) and penetration tester (GPEN), and holds her degree in Computer Science and Electrical Engineering from MIT.br Facebook Scott Fretheim is an expert penetration tester and risk assessment consultant. His clients include Fortune 500 companies, financial institutions, insurance companies, health care organizations, and more. He is a GIAC Certified Web Application Penetration Tester (GWAPT) and is trained in smart grid and SCADA security. He is a founding member of the Montana HTCIA, and holds his B.S. in Management of Information Systems. Scott is an instructor at Black Hat. David Harrison specializes in digital and mobile device forensics as well as information security research. He is a principal author of the DEFCON 2012 Network Forensics Contest. David holds a A.S. in Computer Science from FVCC and is pursuing a B.S. in Software Design from Western Governor's University. Randi Price is a security consultant at LMG Security. She specializes in policy and procedure review and development, including ISO 27001 assessments and HIPAA risk analyses. Randi provides security management consulting for large enterprises such as financial and health care organizations. She is a certified digital forensic examiner and holds her GIAC forensic certification (GCFE). Randi holds two BS degrees in Management of Information Systems and Accounting from the University of Montana.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Google TV is intended to bring the Android operating system out of the mobile environment and into consumers' living rooms. Unfortunately, content providers began to block streaming access to popular content from the Google TV platform which hindered its reach. Furthermore, the first generation of Google TV hardware used an Intel powered x86 chipset that fractured Google TV from that of the traditional ARM based Android ecosystem, preventing most Android applications with native code from functioning properly. In our previous presentation at DEFCON 20, we discussed exploits found in the first generation of Google TV hardware and software. This presentation will be geared towards the newly released second generation of devices which includes models from a wider variety of OEM's such as Asus, Sony, LG, Vizio, Hisense, and Netgear. Our demonstration will include newly discovered and undisclosed hardware exploits, software exploits, and manufacturer mistakes as well as discuss in detail how to exploit the new Secure Boot environment on the Marvell chipset. In order to bypass Secure Boot on the Google TV we will release two separate exploits which will allow users to run an unsigned bootloader on Google TV devices. One of which affects specific configurations of the Linux kernel that can also be used for priviledge escalation against a multitude of other embedded devices. Finally, after our talk make sure to stop by the Q&A room and ask us a question. We have a limited number of USB TTL adapters to give away for free to aid the community in bootloader and kernel development. Amir Etemadieh (@Zenofex) founded the GTVHacker group and has been working on the GTVHacker project from its initial start in November 2010. Amir is on the research and development team at Accuvant LABS and prior to his employment conducted independent research in consumer devices including the Logitech Revue, Ooma Telo, Samsung Galaxy S2, Boxee Box as well as services such as the 4G Clear Network. CJ Heres (@cj_000) is an IT consultant by day who enjoys breaking devices ranging from washing machines to Blu-Ray players. His philosophy is to use a simple approach for complex problems. CJ's recent work includes independent research on Hospira and Alaris IV infusion pumps, as well as consumer electronics such as the Roku, Google TV, Boxee Box, and Vizio Smart TV's. Mike Baker (@gtvhacker) (aka [mbm]) is a firmware developer, better known as the Co-Founder behind OpenWrt. He hacks stuff. Hans Nielsen (@n0nst1ck) is a security wizard at Matasano Security. When he isn't busy protecting your in-house and external applications from evil, he enjoys hacking apart consumer electronics and designing prototype boards. Hans is a tinkerer at heart with an ability to quickly reverse hardware and software through whatever means necessary.

uk: вхід без авторизації

name: Panel - Google TV or: How I Learned to Stop Worrying and Exploit Secure Boot


uk: Комп'ютерні науки

description: Microcontrollers and embedded systems come in many shapes, sizes and flavors. From tiny 6-pin devices with only a few bytes of RAM (ala the DEF CON 14 Badge) to 32- bit, eight core multiprocessor systems (ala DEF CON 20 Badge), each has their own strengths and weaknesses. Engineers and designers tend to have their favorites, but how do they decide what part to work with? Join DEFCON Badge designers Joe Grand and LoSTBoY, master of embedded system design FirmWarez, devoted electronics hobbyist Smitty, and moderator extraordinaire RenderMan as they argue the virtues of their favorite microcontrollers and answer questions about hardware hacking. If you're just getting started with electronics and are trying to navigate the sea of available microcontrollers, microprocessors, and modules, this panel is for you. Joe Grand (@joegrand) is an electrical engineer and hardware hacker. He runs Grand Idea Studio (www.grandideastudio.com) and specializes in the design of consumer and hobbyist embedded systems. He created the electronic badges for DEFCON 14 through 18 and was a co-host of Discovery Channel's Prototype This. Back in the day when he was known as Kingpin, he was a member of the infamous hacker group L0pht Heavy Industries. Mark 'Smitty' Smith (@SmittyHalibut) is a network engineer and system administrator by day, relentless maker by night. (And by the weekend.) Electronics and computers have been a hobby of his since childhood with his first 50-In-1 and a TRS-80 at the age of 6. (And by lunch hour.) Microcontrollers have been a part of his repertoire since the 8051 in the mid 90s. His recent experience includes: Arduino, native Atmel, Propeller and BASIC Stamp. He is currently spending most of his Maker energies in the analog domain on Audiophile Electronics. (And by coffee break. In fact, it's safe to say he's always involved in some project or other.) LosT (@1o57) With a background in mathematics and robotics LosT spends his free time between calculating how to take over the world and building the robots to accomplish it. Deciding to teach others how to create robot overlords, he created the Hardware Hacking Village for the DEF CON community with Russ in an effort to get more people involved with hardware. Fearing competition LosT devised the Mystery Challenge to confuse and confound those who would rise up against him- eventually becoming the creator of the badges to that same end. Really he just wants to juggle and read books these days, or watch MST3K with Tom. RenderMan (@ihackedwhat) is a white hat by trade, blackhat by fashion. He spends his days fixing stuff that other people break and evenings finding new ways to break stuff once people fix it. A frequent speaker at conferences around the world, he tries to make the world a better place by educating people about security and the hacker ethic and stuffing random electronics into stuffed toys to make them creepier than ever imagined. FirmWarez (@FirmWarez) is an embedded systems engineer with twenty years experience developing microcontroller based devices ranging from toys to military hardware. Having gone the MBA route to collect such titles as 'Director of Engineering' and 'VP of Engineering', he still stays directly active in designing and building electronics for fun and profit. Currently involved in a couple of start-ups as well as freelance jobs, he works from an obfuscated lab in a barn somewhere deep in flyover country.

uk: вхід без авторизації

name: Hardware Hacking with Microcontrollers: A Panel Discussion


uk: Комп'ютерні науки

description: A growing trend in electronics is to have them integrate with your home network in order to provide potentially useful features like automatic updates or to extend the usefulness of existing technologies such as door locks you can open and close from anywhere in the world. What this means for us as security professionals or even just as people living in a world of network-connected devices is that being compromised poses greater risk than before. Once upon a time, a compromise only meant your data was out of your control. Today, it can enable control over the physical world resulting in discomfort, covert audio/video surveillance, physical access or even personal harm. If your door lock or space heater are compromised, you're going to have a very bad day. This talk will discuss the potential risks posed by network-attached devices and even demonstrate new attacks against products on the market today. Daniel (@dan_crowley) (aka "unicornFurnace") is a Managing Consultant for Trustwave's SpiderLabs team. Daniel denies all allegations regarding unicorn smuggling and questions your character for even suggesting it. Daniel has developed configurable testbeds such as SQLol and XMLmao for training and research regarding specific vulnerabilities. Daniel enjoys climbing large rocks. Daniel has been working in the information security industry since 2004 and is a frequent speaker at conferences including DEF CON, Shmoocon, and SOURCE. Daniel does his own charcuterie. Jennifer (@savagejen) is a software engineer that cares about secure development. In her professional life, she has been tackling some of the harder questions surrounding security and privacy in the mobile payments industry. In her spare time, she has been hacking home electronics. David has more then 10 years of computer security experience, including pentesting, consulting, engineering, and administration. As an active participant in the information security community, he volunteers at DEFCON, where he designs and implements the firewall and network for what is said to be the most hostile network environment in the world. In his spare time he runs the local DEFCON group, DC612, is the president of The Hack Factory, and helps to run Thotcon as an OPER.

uk: вхід без авторизації

name: Panel - Home Invasion v2.0: Attacking Network Controlled Consumer Devices


uk: Комп'ютерні науки

description: The Schlage Primus is one of the most common high-security locks in the United States. We reverse-engineered the operation of this lock, constructed a parameterized 3d model of a working key, and constructed a software tool to produce such a 3d model given the code number for any key. We then used this tool to 3d print working Primus keys with a variety of 3d printing processes. In our talk, we will discuss the reverse-engineering process, demonstrate our software tool, examine the working 3d printed keys, and discuss the security ramifications of this process. dlaw, ervanalb, and robj study electrical engineering and computer science at the Massachusetts Institute of Technology, where they spend most of their time hacking on projects unrelated to their studies. They have taught seminars on lockpicking and security vulnerabilities to various audiences at the Institute.

uk: вхід без авторизації

name: Panel - Key Decoding and Duplication Attacks for the Schlage Primus High-Security Lock


Panel - Meet the VCs

uk: Комп'ютерні науки

description: Venture capital investments have reached the highest level since the dot-com days. Almost seven billion dollars was invested last quarter alone. While clean-tech deals hit a new low, security deals increased the most. Security is the new black. How should we spend the next billion? Meet the VCs and strategize on the future! Deepak Jeevankumar, partner at General Catalyst, focuses on investments in cloud computing, big data, data center infrastructure and clean energy. He has been with General Catalyst Partners since 2010, first in Boston and later in the firm's Palo Alto office and has been closely involved in our investments in DataGravity, Virtual Instruments and Sunglass. Prior to joining GC, Deepak worked at Sun Microsystems and was an intern at the Yale Investments Office. At Sun, he was involved in designing a few top 10 supercomputers in the industry and led the high performance computing architecture practice in the Asia-Pacific region. Deepak is a graduate of the National University of Singapore, earning a B.Eng. in Computer Engineering; the Singapore-MIT Alliance, earning a S.M. in Computer Science; and the Yale School of Management, earning an M.B.A. John M. Jack actively consults startups and is a board partner at Andreessen Horowitz. Most recently, JJ was the CEO of Fortify Software, which was acquired by Hewlett-Packard in 2010 and was the market leader in protecting enterprises from the threats posed by security flaws in business-critical software applications. Prior to this, JJ was the CEO of Covalent (acquired by VMware), the COO of The Vantive Corporation (acquired by PeopleSoft) and held executive positions at Sybase Inc. JJ is on the boards of CipherCloud, ClearSlide, AlienVault and Cenzic.

uk: вхід без авторизації


Panel - Recognize Awards

uk: Комп'ютерні науки

description: DEF CON is proud to announce the 3rd annual DEF CON awards ceremony, renamed the DC Recognize Awards. These awards are given to deserving individuals in the community, industry, and media.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: From the NSA's PRISM and metadata programs to IMSI catchers, location tracking to surveillance drones, and warrantless wiretapping to the AP's emails -- this has been the year of surveillance. Come join the American Civil Liberties Union as we unravel the thicket of new technologies and laws that allow the U.S. government to surveil Americans in more intrusive ways than ever before. We will explore the latest news and trends in surveillance, reasons to despair, grounds to be hopeful, and ways in which you can help the ACLU's fight against government overreaching. Catherine Crump (@CatherineNCrump) s a Staff Attorney with the ACLU's Speech, Privacy and Technology Project. She specializes in free speech and privacy litigation, particularly regarding the impact of new technologies on First and Fourth Amendment rights. She is lead counsel in the ACLU's challenge to the government's suspicionless searches of laptops at the international border, and is litigating a series of cases challenging the government's claim it can track the location of people's cell phones without a warrant. Christopher Soghoian (@csoghoian) is the Principal Technologist with the ACLU's Speech, Privacy and Technology Project. He completed his Ph.D. at Indiana University in 2012, which focused on the role that third party service providers play in facilitating law enforcement surveillance of their customers. In order to gather data, he has made extensive use of the Freedom of Information Act, sued the Department of Justice, and recorded phone company executives bragging about their surveillance practices. Kade Crockford (@onekade) is director of the Technology for Liberty program at the ACLU of Massachusetts, where she quarterbacks the ACLU of Massachusetts' work challenging the growing surveillance state and defending core First and Fourth Amendment and due process rights. Kade is currently working on a long term project to document and challenge the militarization and federalization of state and local law enforcement, focusing on the procurement and deployment of advanced surveillance and weapons systems, towards the end of bringing local police back under local control. She built and maintains the dedicated privacy website www.PrivacySOS.org, which hosts the Privacy Matters blog. Alex Abdo (@AlexanderAbdo) is a staff attorney in the ACLU's National Security Project, where he litigates cases concerning the expansive surveillance policies of the post-9/11 era. For example, he was counsel in the ACLU's recent Supreme Court challenge to the NSA's warrantless wiretapping program; he is currently challenging the NSA's collection of all Americans' telephony metadata; and he is suing for release of the government's secret interpretation of Section 215 of the Patriot Act. Nicole Ozer is the Technology and Civil Liberties Policy Director at the ACLU of California. She works on the intersection of new technology, privacy, and free speech and developed the organization's online privacy campaign, Demand Your dotRights (www.dotrights.org). Nicole graduated magna cum laude from Amherst College, studied comparative civil rights history at the University of Cape Town, South Africa, and earned her J.D. with a Certificate in Law and Technology from Boalt Hall School of Law, University of California Berkeley. Before joining the ACLU, Nicole was an intellectual property attorney at Morrison & Foerster LLP. Nicole was recognized by San Jose Magazine in 2001 for being one of 20 "Women Making a Mark" in Silicon Valley.

uk: вхід без авторизації

name: Panel - The ACLU Presents NSA Surveillance


uk: Комп'ютерні науки

description: Security Enhancements for Android (SEAndroid) enables the use of SELinux in Android in order to limit the damage that can be done by malicious apps, trying to make exploitation harder. Some OEMs are trying hard to implement extra mitigations in their devices, especially those aiming to reach the enterprise market. We will present some issues that are found in devices currently implementing SEAndroid, and demonstrate how vendors FAIL in properly implementing SEAndroid protection. Pau Oliva (@pof) is a Mobile Security Engineer with viaForensics. He has previously worked as R+D Engineer in a Wireless Provider. His passion for smartphones started back in 2004 when he had his first PocketPC phone with the Windows Mobile operating system and started reverse engineering and hacking HTC devices. He has been actively researching security aspects on the Android operating system since its debut with the T-Mobile G1 on October 2008. Pau is co-author of Wiley's Android Hacker's Handbook.

uk: вхід без авторизації

name: Defeating Security Enhancements (SE) for Android


uk: Комп'ютерні науки

description: The problem with security appliances is verifying that they are as good as the marketing has lead you to believe. You need to spend lots of money to buy a unit, or figure out how to obtain it another way; we chose eBay. We now have a hardened, encrypted, AES 256 tape storage unit and a mission, break it every way possible! We're going to dive into the finer points of the pain required to actually evaluate and disassemble a harden security appliance. We'll be delving into such fun topics as epoxy melting, de-soldering, ROM chip reading, FGPA configuration recreation, Verilog decoding, recovering the various key strands that keep the device/data secure, and any other topics we end up straying into. Phorkus (Mark Carey) (@PeakSec) is a professional Security Engineer with over 18 years of experience in the areas of Information Technology, Rapid Development Lifecycle, Long Term Development Lifecycle, Computer Security, and Research/Development Innovation. He is a partner in Peak Security Inc (www.peaksec.com) where he serves as a Principal Security Consultant and Chief Scientist. Mark has developed many security tools used throughout the corporate and government sectors. Mark has co-authored Network Auditing with Nessus (second edition), and has published internal white-papers for many government agencies. Facebook Evilrob (Rob Bathurst) is a Security and Network Engineer with over 12 years of experience with large multi-national network architecture and security engineering. His focus is on network security architecture, tool development, and high-assurance device reverse engineering. Rob has published multiple internal corporate and government whitepapers across multiple security domains, written a book on Hacking OS X, and is currently working on his Master's Degree at the University of Oxford.

uk: вхід без авторизації

name: Hacking Embedded Devices: (Doing Bad Things to Good Hardware)


Pwn'ing You(r) Cyber Offenders

uk: Комп'ютерні науки

description: It is commonly believed that Offensive Defense is just a theory that is difficult to be used effectively in practice, but that is not entirely true... During my talk along with a new service emulation technique, that will render standard port scanner results nearly useless and leave your attackers with an arduous analysis, I will focus on practical (automated) exploitation of a hackers' offensive toolbox. A few interesting attack vectors against software taken from the Internet will be presented. It turns out you can get pwn'ed even through your Nmap scripts if you are not careful enough. Piotr Duszynski (@drk1wi) is a Senior Security Consultant at Trustwave Spiderlabs. With more than 6 years of official experience in the security field, his main interest were always around breaking stuff and finding its true purpose. Currently he is mostly focused on web application security and security research. Apart from that he enjoys crazy road trips around the world, free diving and good music.

uk: вхід без авторизації


The Road Less Surreptitiously Traveled

uk: Комп'ютерні науки

description: Anonymously driving your own vehicle is becoming unattainable with the proliferation of automatic license plate readers (ALPRs) now coming into wide-spread use. Combined with always-on electronic toll tags, smart phone traffic apps and even plain cell phones are adding to this problem. There is little public disclosure of this tracking and little legislation limiting the length of time data is retained, even if it is not involved in any investigation. History, laws, funding, detection, and their technological limitations, will be explored in this talk. pukingmonkey (@pukingmonkey) has been noodling around UNIX for a short three decades, has been attending DEF CON for a bit over a decade, during which time he has won three black badges. He is presently an IT Director in healthcare informatics, but has worked in technology research, and the financial services sector. Those that attend the DC shoot know him as the one that brings the loudest and largest bore to the event.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Apple has successfully pushed both its mobile and desktop platforms into our homes, schools and work environments. With such a dominant push of its products into our everyday lives it comes as no surprise that both of Apple's operating systems, OSX and iOS should fall under attack by malware developers and network intruders. Numerous organizations and Enterprises who have implemented BYOD (bring your own device) company policies have seemingly neglected the security effort involved in protecting the network infrastructure from these potential insider threats. The complexity of analyzing Mach-O (Mach object file format) binaries and the rising prevalence of Mac-specific malware has created a real need for a new type of tool to assist in the analytic efforts required to rapidly identify malicious content. In this paper we will introduce Mach-O Viz, a Mach-O Interactive Data Visualization tool that lends itself to the role of aiding security engineers in quickly and efficiently identifying potentially malicious Mach-O files on the network, desktop and mobile devices of connected users. Remy Baumgarten (@anrctraining) is a security developer and researcher for ANRC, a fast growing market leader in computer security training and consulting. He is highly skilled in reverse engineering and malware analysis on various platforms including Windows, OSX, Linux and iOS. He is also a low level programmer on various platforms. Before joining ANRC Mr. Baumgarten was a Technical Lead on the Malware Team and the mobile expert on iOS at Booz Allen Hamilton. In his spare time he enjoys delving into various architectures such as AVR, ARM and x86_64.

uk: вхід без авторизації

name: Mach-O Malware Analysis: Combatting Mac OSX iOS Malware with Data Visualization


uk: Комп'ютерні науки

description: This talk is about the ways the many components of governments interact and respond to challenging and anomalous events--highly relevant to hacking by all definitions and at all levels. If you donít know the lay of the land, you can not engage in appropriate research and reconnaissance, counter-measures, and operations. The proliferation of reliable reports of unidentified flying objects from the 1940s forward represented just such a challenge. The phenomenon was anomalous, well-documented, and certainly challenging because, as Major General John Samford said, "credible people have seen incredible things." The UFO History Group includes some of the best researchers in the field. Richard Thieme was privileged to be invited to join the group and their project which resulted, after nearly 5 years of work, in "UFOs and Government: A Historical Inquiry," an outstanding work of historical scholarship that nevertheless reads like a fascinating detective story. In almost 600 pages and with nearly 1000 citations, the work illuminates the response of the government since the early 1940s. how and why policies were set, and how they were executed. The book has been recommended by CHOICE, the primary resource for academic libraries, for inclusion by libraries at all levels because the book stands out as "an exception" in a field filled with speculation (there is virtually none in this book). Other reviews say, "this is the best book about the UFO phenomena that was ever written" and "UFOs and Government is a triumph of sober, conscientious scholarship unlikely to be equaled for years to come." You have never heard a talk like this -- about a subject that has been ridiculed and marginalized intentionally for sixty years as a matter of policy and politics. As Don Quixote said, "insanity is seeing things as they really are." This speech uses UFO phenomena as dye in the arteries of "how things really are." Richard Thieme (@neuralcowboy) has established a reputation for edgy thinking, the mindset of a hacker, and radical clarity ("insanity is seeing things as they really are," said Don Quixote). Jeff Moss said of him, "His ability to be open minded. conspiratorial, ethical and subversive at the same time is inspiring." Clint Brooks, Asst. Deputy Director of NSA (ret) said, "Thieme takes us to the edge of cliffs we know are there but rarely visit." He is an author and professional speaker focused on the deeper implications of technology, religion, and science for twenty-first century life. He has published hundreds of articles, dozens of short stories, three books with more coming, and has delivered hundreds of speeches. A novel, FOAM, is in progress and ìA Richard Thieme Reader,î collecting fiction and non-fiction, interviews and book reviews, will be published in 2013. Thieme speaks professionally about the challenges posed by new technologies and the future, how to redesign ourselves to meet these challenges, and creativity in response to radical change. He has spoken for numerous hacker, security and intel conferences around the world. He recently spent a day at NSA doing a speech, a panel, and a discussion. His column, "Islands in the Clickstream," was distributed to thousands of subscribers in sixty countries before collection as a book in 2004. When a friend at the NSA told him, "The only way you can tell the truth [that we discuss during a decade-long project on intelligence and ethics] is through fiction," he returned to writing short stories, one result of which is "Mind Games," a collection of nineteen stories. Other edgy realities are referenced in the recently published and critically extolled "UFOs and Government: A Historical Inquiry" to which he contributed, a 5-year research project using material from inside the military and intelligence communities to document government responses to the phenomena from WW2 to the present.

uk: вхід без авторизації

name: The Government and UFOs: A Historical Inquiry


uk: Комп'ютерні науки

description: DARPA, 2011, sponsored a contest named UAVForge which challenged teams to build a prototype unmanned aerial vehicle (UAV). Mission: "UAV must be small enough to fit in a soldier's rucksack and able to fly to, perch & stare from useful locations for several hours near targets of interest to provide real-time (visual) persistent surveillance." Long story short: 140 teams participated, no one won. Crashes, remote piloting, & electronics problems all took their toll. Flash forward to 2013 - Technology has improved significantly. Reading the UAVForge story, I was fascinated by the concept of "perch and stare" surveillance. I wondered if this technique could be extended from visual to wireless network discovery & exploitation? Jan. 2013, DJI Innovations introduced a quadcopter known as the Phantom. Phantom quickly gained a reputation as the most stable platform for use in aerial photography and other, small electronics. Phantom uses a GPS autopilot and a "return to home" capability in case the flight goes wrong. So, I decided to become a proud Phantom owner. I built and now fly wireless missions using 2 payloads: [1] Wispy spectrum analyzers, and [2] an Internet-accessible WiFi Pineapple (Hak5). In this presentation you will learn how to successfully outfit & fly a quadcopter equipped with tiny computers, plus utilize wireless survey & exploitation tools. Three missions will be covered: site survey, in-flight wifi discovery, plus extended roof-top wifi pineapple operation. Ricky HIll is a principal consultant at Tenacity Solutions, a security firm located in Reston, VA. Mr. Hill's research interests include wireless hacking and SCADA security. Both areas where he's performed challenging and novel work for the last 10 years on various defense contracts in the Washington D.C. area. When not occupied with the daytime job, he can be found outdoors flying R/C helicopters, balloons and other toys, (or just relaxing by the lake). A 3x DEF CON speaker and 13 yr. attendee, heís been to every DEF CON since 2000.

uk: вхід без авторизації

name: Phantom Network Surveillance UAV / Drone


uk: Комп'ютерні науки

description: Full spectrum computer network (active) defense mean more than simply "hacking back". We've seen a lot of this issue lately. Orin Kerr and Stewart Baker had a lengthy debate about it online. New companies with some high visibility players claim they are providing "active defense" services to their clients. But all-in-all, what does this really mean? And why is it that when you go to your attorneys, they say a flat out, "No". This presentation examines the entire legal regime surrounding full spectrum computer network (active) defense. It delves into those areas that are easily legal and looks at the controversial issues surrounding others. As such we will discuss technology and sensors (ECPA and the service provider exception); information control and management (DRM); and, "active defense" focusing on honeypot, beacons, deception (say hello to my little friend the Security and Exchange Commission); open source business intelligence gathering (CFAA, economic espionage; theft of trade secrets); trace back and retrieval of stolen data (CFAA). Past presentations have shown much of what is taken away is audience driven in response to their questions and the subsequent discussion. And, as always, I try to impress upon computer security professionals the importance of working closely with their legal counsel early and often, and of course "Clark's Law" - explain the technical aspects of computer security to your attorneys at a third grade level so they can understand it and then turn around and explain it to a judge or jury at a first grade level. Robert Clark has enjoyed working numerous federal legal jobs for the past two decades. He is the former Cybersecurity Information Oversight & Compliance Officer for the Assistant Secretary of Cybersecurity and Communications, Department of Homeland Security and former legal advisor to the Navy CIO; United States Computer Emergency Readiness Team; and, the Army's Computer Emergency Response Team. In these positions he has provided advice on all aspect of computer network operations. He interacts regularly with many government agencies and is a past lecturer at Black Hat; DEF CON; Stanford Center for Internet and Society and the Berkman Center for Internet & Society at Harvard University -Four TED-TECH Talks 2011; SOURCE Boston 2010; the iapp; and, the DoD's Cybercrimes Conference. He is thrilled to be returning to DEF CON this year.

uk: вхід без авторизації

name: Legal Aspects of Full Spectrum Computer Network (Active) Defense


uk: Комп'ютерні науки

description: The largest manufacturer of laptops, one of the largest consulting firms, and a big data behemoth all walk into a bar... His research explores many self-inflicted gaps that continue to plague even the largest companies. These gaps are often seen as trivial and ignored, thus making all of their DNS investments lead to a false sense of security. Too much effort and trust go into vendor solutions when 'common sense' and 'due diligence' were never deliverables requested in the RFP. Before we invest in securing our domains, it may be wise to ensure we own them. Before we harden our resolvers to prevent poisoning, maybe we should ensure our clients are querying what is expected. Before we make operational decisions about how client resolver settings should be configured, maybe should consider the consequences to DNS behavior. Before we call DNS secure, maybe we should understand what it is doing. Robert Stucke (@bobx) has 14 years of professional experience in information security. He has lead security consulting teams, worked with multiple fortune 50 clients, served as architect, developer, incident responder, and chief antagonist. As an independent researcher, he has developed custom solutions for large clients revolving around DNS intelligence and is constantly looking for new ways to use and abuse the resources many companies tend to neglect. Many of his tools are considered the cornerstone of fortune 50 security operation centers for detecting and mitigating advanced targeted attacks.

uk: вхід без авторизації

name: DNS Has Been Found To Be Hazardous To Your Health: Use With Caution


uk: Комп'ютерні науки

description: Rumor has it that the Tor network is a CIA honeypot, that all relays are malicious, and that only bad people use Tor to do bad things online. How much of this is true? How much can we say about the safety of the network? The safety of the Tor network has been a much discussed topic ever since the onion routing network was deployed in September 2002. This talk aims to answer the following questions: (1) How much diversity does the network really have?, (2) Who runs the relays in the Tor network?, and (3) What is being done about malicious relays? Runa A. Sandvik (@runasand) is a developer for the Tor Project. Her work for the Tor Project includes forensic analysis of the Tor Browser Bundle and QA testing of new releases, as well as project management, user support, frequent traveling, and training. Runa has worked for the Tor Project since 2009 and has given talks to a number of different audiences, including activists, law enforcement, and university students.

uk: вхід без авторизації

name: Safety of the Tor network: a look at network diversity, relay operators, and malicious relays


The Bluetooth Device Database

uk: Комп'ютерні науки

description: As of 2013, it is estimated that there are now billions of bluetooth devices deployed worldwide. The goal of the Bluetooth Database Project is to track and freely distribute real time sightings and statistics of these wide spread devices. The data collected from these devices can be used to answer questions pertaining to various topics, such as device geolocation, device proliferation, population analysis, device misconfigurations, and an assortment of other security related analytics. During this presentation I will go over the current community driven, distributed, real time, client/server architecture of the project. I will show off some of analytics that can be leveraged from the projects data sets. Finally, I will be releasing various open source open source bluetooth scanning clients (Linux, iOS, OSX). These clients are easily installable across various operating systems and can be used to systematically contribute data to the project. Ryan Holeman (@hackgnar) resides in Austin Texas where he works as a senior software developer for Ziften Technologies. He has a Masters of Science in Software Engineering. He has published papers though ICSM and ICPC and spoken at various security conferences including DEF CON and Black Hat. His spare time is mostly spent digging into various network protocols and shredding local skateparks.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: One of the top types of Android malware are trojans that claim to provide a useful service, but instead send SMS messages to premium shortcodes, charging the victims and putting money directly into the attackers' hands. We've seen a steady increase in this type of malware over the past years, and recently we've seen an increase in sophistication of obfuscation and distribution techniques as well. By investigating certain families of malware over time, we've seen encryption, code level obfuscation, on-demand build systems, and weekly code release cycles become more common. It became clear that there was significant organization and investment of both time and money behind several of these malware families, so we began following leads to find out how far the rabbit hole goes. This presentation will show key findings and methods of this investigation into top Android malware distributors operating in Russia and the surrounding region. The investigation includes the discovery of 10's of thousands of bot-controlled twitter accounts spreading links to this type of SMS fraud malware, tracing distribution through thousands of domains and custom websites, and the identification of multiple "affiliate web traffic monetization" websites based in Russia which provide custom Android SMS fraud malware packaging for their "affiliates". During this investigation we have mapped out an entire ecosystem of actors, each providing their own tool or trade to help this underground community thrive. Come out to this talk to find out how just how much effort and manpower is invested in defrauding Android users through this type of SMS trojan malware, and the types of organizations that are behind it. Ryan W. Smith (@ryanwsmith13) is a Senior Research and Response Engineer at Lookout, and has been an actively making and breaking software systems for the past 11 years. With a tendency to jump into anything sufficiently interesting and challenging, his projects range from automated x86 reverse engineering to large scale network attack graph analytics. As a chronic community contributor, Ryan may have been seen speaking at any number of Honynet Project, OWASP, AHA, or UT COMSOC events. Tim Strazzere is a Lead Research and Response Engineer at Lookout Mobile Security. Along with writing security software, he specializes in reverse engineering and malware analysis. Some interesting past projects include having reversing the Android Market protocol, Dalvik decompilers and memory manipulation on mobile devices.

uk: вхід без авторизації

name: DragonLady: An Investigation of Russian SMS Fraud


Data Evaporation from SSDs

uk: Комп'ютерні науки

description: Files on magnetic hard drives remain on the drive even after they are deleted, so they can be recovered later with forensic tools. Sometimes SSDs work the same way, but under other conditions they erase this latent data in a "garbage collection" process. Understanding when and how this happens is important to forensic investigators and people who handle confidential data. I'll explain the purpose of garbage collection, and how it is affected by the operating system, SSD model, BIOS settings, TRIM, and drive format. I'll demonstrate SSD data evaporation on a MacBook Air and a Windows system, using my "evap" tool (available for everyone to use) that makes it easy to test SSDs for data evaporation. Sam Bowne (@sambowne) has been teaching computer networking and security classes at CCSF since 2000. He has given talks at DEF CON, BayThreat, LayerOne, Toorcon, and lightning talks at HOPE on Ethical Hacking, and taught classes and seminars at many other schools and teaching conferences. He has a PhD and a lot of industry certifications, but still no CISSP.

uk: вхід без авторизації


Evil DoS Attacks and Strong Defenses

uk: Комп'ютерні науки

description: On the attack side, this talk will explain and demonstrate attacks which crash Mac OS X, Windows 8, Windows Server 2012, and Web servers; causing a BSOD or complete system freeze. The Mac and Windows systems fall to the new IPv6 Router Advertisement flood in thc-ipv6-2.1, but only after creating a vulnerable state with some "priming" router advertisements. Servers fail from Sockstress--a brutal TCP attack which was invented in 2008, but still remains effective today. On the defense side: the inside story of the DDoS that almost Broke the Internet. In March 2013, attackers launched an attack against Spamhaus that topped 300Gbps. Spamhaus gave us permission to talk about the details of the attack. While CloudFlare was able to fend off the attack, it exposed some vulnerabilities in the Internet's infrastructure that attackers will inevitably exploit. If an Internet-crippling attack happens, this is what it will look like. And here's what the network needs to do in order to protect itself. Sam Bowne (@sambowne) has been teaching computer networking and security classes at CCSF since 2000. He has given talks at DEFCON, BayThreat, LayerOne, Toorcon, and lightning talks at HOPE on Ethical Hacking, and taught classes and seminars at many other schools and teaching conferences. He has a PhD & lot of industry certs but still no CISSP. Matthew Prince (@eastdakota) is the co-founder & CEO of CloudFlare, the web performance and security company. Matthew wrote his first computer program at age 7 when his mom would sneak him in to university computer science courses. After attending law school, he worked as an attorney for one day before jumping at the opportunity to be a founding member of a tech startup. He hasn't looked back. CloudFlare is Matthew's third entrepreneurial venture. CloudFlare was named a 2012 Technology Pioneer by the World Economic Forum and selected by the Wall Street Journal as the Most Innovative Internet Technology company for the last two years running. Today, CloudFlare accelerates and protects more than 120 billion page views for over a million customers and more than 1.5 billion web visitors every month. Matthew holds a degree in English and Computer Science from Trinity College. He graduated with highest honors from the Harvard Business School where he was a George F. Baker Scholar and was awarded the Dubliner Prize for Entrepreneurship. He earned a JD from the University of Chicago and is a member of the Illinois Bar. He teaches technology law as an adjunct professor at the John Marshall Law School where he serves on the Board of Advisors for the Center for Information Technology and Privacy Law. He is also the co-creator of Project Honey Pot, the largest community of webmasters tracking online fraud and abuse. On the side, Matthew is a certified ski instructor, a former mountain guide, and a regular attendee of the Sundance Film Festival.

uk: вхід без авторизації


Man In The Middle ALL THE IPv6 THINGS!

uk: Комп'ютерні науки

description: Back in 2011, Alec Waters demonstrated how to overlay a malicious IPv6 network on top of an IPv4-only network, so that an attacker can carry out man-in-the-middle attacks on IPv4 traffic and subvert the assumed end to end security model. This attack is potentially powerful but requires involves a complex series of manual system configuration and setup activities, including the use of experimental and since-deprecated techniques. In addition, technology updates rendered Waters' implementation of the attack ineffective on certain platforms, such as Windows 8. We reviewed the attack and tried it against current operating systems. We found configuration updates were needed to make it work against Windows 8 hosts and have packaged our setup into a script called "Sudden Six" to make launching the attack quick and painless. This attack now works against a variety of different platforms and operating systems, which will allow you to man-in-the-middle IPv6 traffic in record time. This talk will discuss how the attack works as well as discuss our automation strategy and some pitfalls we uncovered. The "Sudden Six" configuration utility will be released and a demonstration of the attack against Windows 8 will be provided. Scott Behrens (@HelloArbit) is currently employed as a senior security consultant at Neohapsis and an adjunct professor at DePaul University. An avid coder and researcher, he has contributed to a number of open source tools for both attack and defense. Scott Behrens is the co-developer of NeoPI, a framework to aid in the detection of obfuscated malware. Scott also co-developed BBQSQL, a rapid blind sql injection exploitation framework. Scott has presented security research at DEF CON, DerbyCon, Security Forum Hagenberg, Security B-sides Chicago, and ISACA Milwaukee. Scott has also published security white papers for InformationWeek magazine, the Infosec Institute, and the Neohapsis blog. Brent Bandelgar is an Associate Security Consultant at Neohapsis, focused on delivering network penetration testing, application security assessments, and security architecture. Prior to Neohapsis, Brent was a member of the Apple Consultants Network delivering managed IT services and custom solutions centered on the Apple Mac OS X and iOS platforms. Brent has extensive background in developing and supporting Web applications in PHP as well as tools in Bash and Python. Brent Bandelgar holds a Master's of Science in Network Security from DePaul University as well as the Apple Certified System Administrator and Mobile Technical Competency certifications from Apple, Inc.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Some data is too sensitive or volatile to store on systems you own. What if we could store it somewhere else without compromising the security or availability of the data, while leveraging intended functionality to do so? This presentation will cover the methodology and tools required to create a distributed file store built on top of a JavaScript botnet. This type of data storage offers redundancy, encryption, and plausible deniability, but still allows you to store a virtually unlimited amount of data in any type of file. They can seize your server -- but the data's not there! Sean Malone has been building and breaking networks and applications for the last 12 years, and he has a diverse practical and academic background in information technology and security. As a Principal Consultant and the primary engagement manager for FusionX, Sean provides clients across all verticals with sophisticated adversary simulation assessments and strategic security guidance. Sean is a key member of the FusionX internal research and development team and his custom security assessment utilities are used in a majority of FusionX engagements. SeanTMalone.com

uk: вхід без авторизації

name: HiveMind: Distributed File Storage Using JavaScript Botnets


uk: Комп'ютерні науки

description: This talk will discuss the next logical step from dumb fuzzing to breeding exploits via machine learning & evolution. Using genetic algorithms, this talk will take simple SQL exploits and breed them into precision tactical weapons. Stop looking at SQL error messages and carefully crafting injections, let genetic algorithms take over and create lethal exploits to PWN sites for you! soen (@soen_vanned) is a reverse engineer and exploit developer for the hacking team V&. As member of the team, he has participated and won Open Capture the Flag DC 16, 18, and 19. Soen also participated in the DDTEK competition in DEF CON 20. 0xSOEN@blogspot.com

uk: вхід без авторизації

name: Evolving Exploits Through Genetic Algorithms


uk: Комп'ютерні науки

description: Remember that scene in Hackers where Jonny Lee Miller and Angelina Jolie get a bunch of hackers to attack Fisher Steven's network through vulnerabilities that they find while flying (literally) through Fisher's network? Even though it had no basis in reality at the time, it was still pretty awesome. This presentation will be like that, except real. This highly demo-focused presentation will unleash the next generation of web application visualization and security flaw detection. Created as part of DARPA's Cyber Fast Track, we have developed a completely awesome way of visualizing, in 3D, how massive numbers of web applications across the Internet are interconnected. This visualization engine provides a simple yet beautiful view of web applications and their vast, sprawling interconnections, all the while incorporating web application vulnerabilities into the visual metadata. Teal Rogers is a dedicated maker and software designer who has been advancing existing products through innovative new interfaces for years. Between being a brilliant imagineer, rogue inventor, warrior-poet, master of surprise, and student of the arcane he has managed to design and sell the highest quality laser gloves on the market. More recently, he has been inexorably drawn to the nascent power of the 3rd dimension. Alejandro Caceres is a computer network operations engineer focused on network offense software development and web application penetration testing and security. He is particularly interested in using distributed computing and offensive security principles to create cool/new/revolutionary open source and free applications with a global impact.

uk: вхід без авторизації

name: The dawn of Web 3.0: website mapping and vulnerability scanning in 3D, just like you saw in the movies


Closing Ceremonies

uk: Комп'ютерні науки

description: The Dark Tangent and GOONS end the conference with closing ceremonies and awards.

uk: вхід без авторизації


Prowling P2P Botnets After Dark

uk: Комп'ютерні науки

description: Peer-to-peer botnets have become the backbone of the cybercrime ecosystem. Due to their distributed nature, they are more difficult to understand and contain than traditional botnets. To combat this problem, we have developed the open-source framework *prowler* for peer-to-peer botnet tracking and node enumeration. It combines efficient crawling strategies with the ability to plug in implementations for custom application layer protocols. In this talk, attendees will learn how to use prowler to reconnoiter and track peer-to-peer botnets. We will show some real-world examples, interpret the results, and discuss pitfalls and challenges. We will then examine how these results can be used in attempts to attack and take over peer-to-peer botnets. Tillmann Werner works at CrowdStrike where his duties include analyzing targeted threats, developing defence strategies and prototyping analysis tools for the company. He specializes in reverse engineering, honeypot technologies and containment strategies for large-scale attacks. As a member of the Honeynet Project, Tillmann is actively involved with the global IT security community and is a regular speaker on the international conference circuit.

uk: вхід без авторизації


Made Open: Hacking Capitalism

uk: Комп'ютерні науки

description: The game is Capitalism. The rule makers are the banks, corporations and governments. This presentation is about playing a game that is rigged by the rule makers, and winning in such fashion that the game is never the same. If you like breaking things and building them back up, or are a person, please at least watch this at a later time. I forgive you for not attending, but you will not forgive yourself for missing it. Todd Bonnewell is a person with a message. Nothing Todd has done or said in his professional past in more important than the message. Todd works for the people at MadeOpen.com.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: GoPro or GTFO: A Tale of Reversing an Embedded System


De Anonymizing Alt Anonymous Messages

uk: Комп'ютерні науки

description: In recent years, new encryption programs like Tor, RedPhone, TextSecure, Cryptocat, and others have taken the spotlight - but the old guard of remailers and shared inboxes are still around. Alt.Anonymous.Messages is a stream of thousands of anonymous, encrypted messages, seemingly opaque to investigators. For the truly paranoid, there is no communication system that has better anonymity - providing features and resisting traffic analysis in ways that Tor does not. Or so is believed. After collecting as many back messages as possible and archiving new postings daily for four years, several types of analysis on the contents of alt.anonymous.messages will be presented and several ways to break sender and receiver anonymity explained. Messages will be directly and statistically correlated, communication graphs drawn, and we'll talk about what challenges the next generation of remailers and nymservs face, and how they should be designed. Tom Ritter is interested in nearly all aspects of cryptography, privacy, anonymity, and pseudonymity. He contributes to http://crypto.is and tries to explain the difference between Onion Routing and Mixing to as many people as he can. He is located corporeally in New York City, virtually at http://ritter.vg, and meta-physically has been lost for quite some time.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Lair is an open-source project developed for and by pentesters. Built on Meteor and Node.js with a dash of Python, Lair is a web application that normalizes, centralizes, and manages diverse test data from a number of common tools including Nmap, Nessus, Nexpose, and Burp. Unlike existing alternatives, Lair encourages team-based collaboration by automatically pushing updates to team members in real time. Paired with it's workflow and documentation management, Lair offers a single solution for performing a detailed, thorough penetration test individually or as a team in a manner that has not been done before. Tom Steele (@_tomsteele) hails from Seattle Washington where he works as a Security Consultant at FishNet Security. The dynamic nature of his current role allows him to touch many areas of the offensive security spectrum. When not working he can be found gaming and creating tools to solve complex problems. Dan Kottmann As a consultant in FishNet Security's security assessment practice, Dan performs social engineering and network and wireless penetration tests. Dan has roughly nine years of consulting experience and five years of professional experience in the security industry.

uk: вхід без авторизації

name: Collaborative Penetration Testing With Lair


uk: Комп'ютерні науки

description: Kill 'em All — DDoS Protection Total Annihilation! TONY MIU TECHNICAL DIRECTOR, BLOODSPEAR RESEARCH GROUP With the advent of paid DDoS protection in the forms of CleanPipe, CDN / Cloud or whatnot, the sitting ducks have stood up and donned armors... or so they think! We're here to rip apart this false sense of security by dissecting each and every mitigation techniques you can buy today, showing you in clinical details how exactly they work and how they can be defeated. Essentially we developed a 3-fold attack methodology: stay just below red-flag rate threshold, mask our attack traffics inconspicuous, emulate the behavior of a real networking stack with a human operator behind it in order to spoof the correct response to challenges, ??? PROFIT! We will explain all the required look-innocent headers, TCP / HTTP challenge-response handshakes,JS auth bypass, etc. etc. in meticulous details. With that knowledge you too can be a DDoS ninja! Our PoC attack tool "Kill-em-All" will then be introduced as a platform to put what you've learned into practice, empowering you to bypass all DDoS mitigation layers and get straight through to the backend where havoc could be wrought. Oh and for the skeptics among you, we'll be showing testing results against specific products and services. As a battle-hardened veteran in the DDoS battlefield, Tony "MT" Miu has garnered invaluable experiences and secrets of the trade, making him a distinguished thought leader in DDoS mitigation technologies. At Nexusguard, day in day out he deals with high-profile mission-critical clients, architecturing for them full-scale DDoS mitigation solutions where failure is not an option. He has presented at DEF CON 20 and AVTokyo 2012 a talk titled "DDoS Black and White Kungfu Revealed", and at the 6th Annual HTCIA Asia-Pacific Conference a workshop titled "Network Attack Investigation". With "Impossible is Nothing" as his motto, Dr. Lee never fails to impress with his ingenious implementation prowess. With years of SOC experience under his belt, systematic security engineering and process optimization are his specialties. As a testament to his versatility, Dr. Lee has previously presented in conferences across various disciplines including ACM VRCIA, ACM VRST, IEEE ICECS and IEEE ECCTD. Materials: https://www.defcon.org/images/defcon-21/dc-21-presentations/Mui-Lee/DEFCON-21-Miu-Lee-Kill-em-All-DDoS-Protection-Total-Annihilation-Updated.pdf https://www.defcon.org/images/defcon-21/dc-21-presentations/Mui-Lee/DEFCON-21-Miu-Lee-Kill-em-All-DDoS-Protection-Total-Annihilation-WP-Updated.pdf https://www.defcon.org/images/defcon-21/dc-21-presentations/Mui-Lee/Extras-Updated.zip

uk: вхід без авторизації


HTTP Time Bandit

uk: Комп'ютерні науки

description: While web applications have become richer to provide a higher level user experience, they run increasingly large amounts of code on both the server and client sides. A few of the pages on the web server may be performance bottlenecks. Identifying those pages gives both application owners as well as potential attackers the chance to be more efficient in performance or attack. We will discuss a tool created to identify weaknesses in the web application by submitting a series of regular requests to it. With some refinement and data normalizations performed on the gathered data, and then performing more testing based on the latter, it is possible to pinpoint the single most (CPU or DB) resource-consuming page of the application. Armed with this information, it is possible to perform more efficient DOS/DDOS attacks with very simple tools. The presentation will be accompanied by demos of the tool performing testing and attacking on various targets. The tool will be published for the interested researchers to play with. Vaagn Toukharian is Principal Engineer for Qualys's Web Application Scanner. Was involved with security industry since 1999. Experience includes work on Certification Authority systems, encryption devices, large CAD systems, Web scanners. Outside of work interests include Photography, and Ironman Triathlons. Tigran Gevorgyan was born in Yerevan, Armenia. Graduated from Yerevan State University with honors in 1996. Immigrated to USA in 1999. Worked in various companies in network security field, such as Network Associates, Imperito Networks and Qualys.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Malicious attackers and penetration testers alike are drawn to the ease and convenience of small, disguise-able attacker-controlled devices that can be implanted physically in a target organization. When such devices are discovered in an organization, that organization may wish to perform a forensic analysis of the device in order to determine what systems it has compromised, what information has been gathered, and any information that can help identify the attacker. Also, attacker-implanted penetration testing software and hardware may also be the target of counter-attack. Malicious attackers may compromise penetration testers' devices in order to surreptitiously gather information across multiple targets and pentests. The very tools we rely on to test security may provide an attractive attack surface for third parties. In this talk, procedures for forensic examination and zero-day vulnerabilities that lead to remote compromise of the Pwn Plug will be discussed and demonstrated as a case study. Possible attack scenarios will be discussed. Wesley McGrew (@McGrewSecurity) is an assistant research professor at Mississippi State University's Computer Security Research Center, where he recently earned a Ph.D. in computer science for his research in vulnerability analysis of SCADA HMI systems. He also lectures for the MSU National Forensics Training Center, which provides free digital forensics training to law enforcement and wounded veterans. In the spring 2013 semester, he began teaching a self-designed course on reverse engineering to students at MSU, using real-world, high-profile malware samples, as part of gaining NSA CAE Cyber Ops certification for MSU. Wesley has presented at Black Hat USA and DEF CON, and is the author of penetration testing and forensics tools that he publishes through his personal/consultancy website, McGrewSecurity.com.

uk: вхід без авторизації

name: Pwn The Pwn Plug: Analyzing and Counter-Attacking Attacker-Implanted Devices


uk: Комп'ютерні науки

description: With the abundance of cloud storage providers competing for your data, some have taken to offering services in addition to free storage. This presentation demonstrates the ability to gain unlimited cloud storage by abusing an overlooked feature of some of these services. Zak Blacher is currently pursuing a Masters of Mathematics in Computer Science, and expects to be graduating at the end of August. He has previously completed a Bachelors of Computer Science, and a Masters of Science in Computer Science, having worked with the FIVES research group. He has held internships on the platform team at Sandvine Inc, and digital security team at Compuware Corp. Social Media: IRC: chalk on #wolf @ espernet

uk: вхід без авторизації

name: Transcending Cloud Limitations by Obtaining Inner Piece: with De-Pack Choppa


Hacking Driverless Vehicles

uk: Комп'ютерні науки

description: Are driverless vehicles ripe for the hacking? Autonomous and unmanned systems are already patrolling our skies and oceans and being tested on our streets and highways. All trends indicate these systems are at an inflection point that will show them rapidly becoming commonplace. It is therefore a salient time for a discussion of the capabilities and potential vulnerabilities of these systems. This session will be an informative and light-hearted look at the current state of civil driverless vehicles and what hackers or miscreants might do to mess with them. Topics covered will include common sensors, decision profiles and their potential failure modes that could be exploited. With this talk Zoz aims to both inspire unmanned vehicle fans to think about robustness to adversarial and malicious scenarios, and to give the paranoid false hope of resisting the robot revolution. He will also present details of how students can get involved in the ultimate sports events for robot hacking, the autonomous vehicle competitions. Zoz is a robotics interface designer and rapid prototyping specialist. He is a co-founder of Cannytrophic Design in Boston and CTO of BlueSky in San Francisco. As co-host of the Discovery Channel show 'Prototype This!' he pioneered urban pizza delivery with robotic vehicles, including the first autonomous crossing of an active highway bridge in the USA, and airborne delivery of life preservers at sea from an autonomous aircraft. He also hosts the annual AUVSI Foundation student autonomous robot competitions such as Roboboat and Robosub.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Our world is instrumented with countless sensors. While many are outside of our direct control, there is an incredible amount of publicly available information being generated and gathered all the time. While much of this data goes by unnoticed or ignored it contains fascinating insight into the behavior and trends that we see throughout society. The trick is being able to identify and isolate the useful patterns in this data and separate it from all the noise. Previously, we looked at using sites such as Craigslist to provide a wealth of wonderfully categorized information and then used that to answer questions such as "What job categories are trending upward?", "What cities show the most (or the least) promise for technology careers?", and "What relationship is there between the number of bikes for sale and the number of prostitution ads?" After achieving initial success looking at a single source of data, the challenge becomes to generate more meaningful results by combining separate data sources that each views the world in a different way. Now we look across multiple, disparate sources of such data and attempt to build models based on the trends and relationships found therein. The initial inspiration for this work was a fantastic talk at DC13, "Meme Mining for Fun and Profit". It also builds upon a similar talk I presented at DC18. And once again seeks to inspire others to explore the exploitation of such publicly available sensor systems. Daniel Burroughs first became interested in computer security shortly after getting a 300 baud modem to connect his C64 to the outside world. After getting kicked off his favorite BBS for "accidently" breaking into it, he decided that he needed to get smarter about such things. Since that time he has moved on to bigger and (somewhat) better things. These have included work in virtual reality systems at the Institute for Simulation and Training at the University of Central Florida, high speed hardware motion control software for laser engraving systems, parallel and distributed simulation research at Dartmouth College, distributed intrusion detection and analysis at the Institute for Security Technology Studies, and the development of a state-wide data sharing system for law enforcement agencies in Florida. Daniel was an associate professor of engineering at the University of Central Florida for 10 years prior to his current position as the Associate Technology Director for the Center for Law Enforcement Technology, Training, & Research. He also is a co-founder of Hoverfly Technologies, an aerial robotics company, and serves on the board of directors for Familab -- a hackerspace located in Orlando. He is also the proud owner of two DefCon leather jackets won at Hacker Jeopardy at DEF CON 8 & 9 (as well as few hangovers from trying to win more).

uk: вхід без авторизації

name: Open Source Data Analysis and Trend Monitoring


Warum hilft es Bewegung zu hören?

uk: Комп'ютерні науки

@language: de

uk: вхід без авторизації

name: Moderation Skorupka, Sascha (Leitung, Regie, Redaktion)

Leibniz Universität Hannover (LUH)

addressCountry: DE

addressLocality: Hanover

addressRegion: Lower Saxony


uk: Комп'ютерні науки

description: For some time it has been possible to discover the inner workings of microprocessors with the help of a microscope and some nasty chemicals such as fuming nitric acid. However, unless you have access to a university or work science lab, this is beyond the reach of most hackers, and, even it were to be attempted, difficult and potentially extremely dangerous. In this talk we will go through our own adventures in tackling the issue from the point of view of the back-room hacker/researcher, and how we have solved many of the problems using only tools and devices that were freely and cheaply available from online sources such as Ebay. There is also the secondary problem of what to do with the chip once you've decapped it. For example: if you've taken microscopic images of a masked ROM, in theory you can extract the code, but in practice you're looking at thousands of tiny dots, each of which represent a 0 or a 1, which, once correctly read and compiled into HEX, will represent the original byte code. Many projects (e.g. MAME) have used crowd-sourcing as a means of converting the images by eye, but we will present a software tool that semi-automates this process and we'll demonstrate how what was once the works of tens if not hundreds of hours can be reduced to a few minutes.

uk: вхід без авторизації

name: Hostile Hardware reverse engineering by chip de-capping and analysys


Dude, WTF in my car?

uk: Комп'ютерні науки

description: The ECU tuning market is weird. There is little help from people in it, and most of the equipment is expensive. Well, not anymore! After hacking some equipment worth thousands of dollars, a new toy was born. Seed/Key algos broken, RSA bustedÖ We will learn all about Bosch EDC15 and EDC16 car ECUs. How they communicate, what protocols they use, their security and why it is worth hacking them. There will be a demonstration of a tool that does all of these, and costs less than $25 to build. Alberto Garcia Illera (@algillera) is a 25 year old who is passionate about hacking and social engineering. Alberto studied mathematics and computer systems in Spain and has spent the past several years working as a professional penetration tester. Alberto has presented at several seminars where he has helped teach hacking techniques to large companies such as Microsoft, the Spanish government and the cyberterrorism Spanish police department. At DEF CON 20 in Las Vegas, Alberto has presented a talk titled "How to hack all the transport networks of a country" that had a great repercussion. He has also spoken at ZeroNights in Moscow, BlackHat in Abu Dhabi and recently in Infiltrate in Miami. Javier Vazquez Vidal AKA Bi0H4z4rD is a hardware security specialist. He has been involved in several reversing projects that go from a simple IP camera to the well known PS3. He has worked for Airbus Military among other companies. He studied Electromechanics and Telecommunications, developing a passion for electronics and technology since his youth. At this time, he will be presenting his first public work, the ecu tool.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Distributed computing is sexy. Don't believe us? In this talk we'll show you, on a deep, practical level and with lots of (mostly Python) code, how a highly automated and effective computer network attack could be crafted and enhanced with the help of distributed computing over 'Big Data' technologies. Our goal is to demystify the concept of using distributed computing for network attacks over an open source distributed computing cluster (Hadoop). By the end of this highly demo-focused talk you'll have an understanding of how an attacker could use three of our open source custom-written distributed computing attack tools, or easily build their own, to do whatever it is that they're into (we don't judge). Alejandro Caceres (@DotSlashPunk) is a software developer, web application penetration tester, and security researcher. His main interest is in the nexus between distributed computing and network/application attacks. He is the founder of the PunkSPIDER project, presented at ShmooCon 2013, which is an open source project to fuzz the entire Internet's web applications using a Hadoop cluster. He's also the owner of Hyperion Gray, a software development company focused on open source projects in the area of distributed computing as it relates to security. He didn't know how to work in shamelessly mentioning the DARPA Cyber Fast Track research project he is also working on (Web 3.0, also being presented at DEF CON 21), so he just wrote it in at the end of the bio. He is very classy.

uk: вхід без авторизації

name: Conducting Massive Attacks With Open Source Distributed Computing