uk: Комп'ютерні науки

description: Dependency Injection is one of those terms that advanced programmers throw out with an expectation and assumption of full understanding on the part of the receiver. However, I constantly get asked by attendees, students, and clients to please recommend a good DI product and show them how to use it; and when I proceed to start talking about the subject, it becomes immediately apparent that many don't even know what they're asking about. It's easy to get infatuated by a cool buzz phrase, specially when you hear so many others using it. But to truly understand something you need to start by understanding the problem spaces that it is trying to solve. It’s important to learn the concepts behind DI so you can write software that can be properly tested. So let's bring you totally up to speed then. In this session, I'll explain dependency injection from concept to implementation, and use raw code samples to show you how it works and what problems it solves. I’ll demonstrate how writing abstracted code can help you test your applications much better, whether or not use a DI container. Then I'll get into what a DI container is and some of the characteristics and features it offers. I’ll finish by showing you implementation examples in three different platforms.

uk: вхід без авторизації

name: End-to-End Dependency Injection & Writing Testable Software


Matt Heath

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Microservice architectures allow us to decompose domain logic into small services with a bounded context, which allows us to gain simplicity within services at the expense of complexity in the interactions between services. However any distributed system operating at scale will experience failure, and this interaction complexity makes dealing with failure harder. This is especially important when requests may traverse many systems, and failures of a single component may cascade through several more. In this talk we look at a number of common patterns from simple usage of concurrency primitives and timeouts to control and throttle concurrency, to more complex patterns such as the CircuitBreaker which can be used to prevent cascading failures; increasing the reliability of our systems.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Handling Failure in Microservice Architectures

Norwegian Developers Conference (NDC)

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


High-Quality Front End

uk: Комп'ютерні науки

description: All too often front-end JavaScript code has been considered a second class citizen, and when treated without due care and attention it can be buggy and hard to maintain. This attitude is changing though, and thanks to the rapid growth in popularity of JavaScript as a first-class language, there is a large and expanding ecosystem of tools that a developer should know to make their client-side code as “clean” as the rest of their stack. This talk aims to introduce and discuss how to implement modularisation, functional idioms and testing in JavaScript in an idiomatic way, to allow you to code JavaScript to a higher quality and, ultimately, more sustainably.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Having timezone issues, international flights and dealing drastically different cultural norms? Working with teams distributed across the world provides fascinating insight and comes with incredible challenges. Scaling company culture is tough enough when most of your company is in the same office, but when you’re split over multiple continents it can seem like a monumental task. In this talk we’ll break down the cultural challenges facing distributed teams, consider cultural communication and look at some solutions.

uk: вхід без авторизації

name: How to deal with culture divide- Internal Advocacy with Distributed Teams


uk: Комп'ютерні науки

description: Do you have a great knowledge about C#? Maybe you’ve already built a great mobile app on Windows Phone or Windows 8 or even Windows 10? Would you like to be able to use your knowledge to build an Android app without having to resort to other languages or IDEs? This is possible using Xamarin! In this session, Gill Cleeren will take you through the creation of your first Android application: Joe’s Coffee Store. Along the way, you will learn the basic concepts of Android such as Activities and see how we can use these from Xamarin.Android. We’ll need to connect with services to get access to data and we’ll learn how to navigate in the app. You’ll see we can do this all of this directly from Visual Studio. We will finish the session by looking at how we can deploy the application to the Google Play Store so it’s ready for our users!

uk: вхід без авторизації

name: Building your first real-world Android app using Xamarin in just 60 minutes


IoT - Gold Rush or Wild West

uk: Комп'ютерні науки

description: IoT sits, not unfairly, at the peak of this years Gartner's "Hype for Emerging Technology". This talk tries to cut through the marketing bullshit and attempt to build a taxonomy for what should, and more importantly, what shouldn't be considered a 'Thing' on the Internet. Is examines both the competing infrastructure technologies and the upcoming pseudo-standards. Hopefully by the end you'll be less confused, or at least understand why you're confused!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: JavaScript's first-class functions are the basis for nearly everything in the language, including methods and constructors. In this talk, we'll explore functions that consume and return functions, and see how they can be used to build expressive programs that hew closely to JavaScript's natural style, while taking advantage of ES6/ECMAScript 2015’s new features.

uk: вхід без авторизації

name: JavaScript Combinators, the “Six” Edition


uk: Комп'ютерні науки

description: If you ever built, or considered building an application for Office you are probably familiar with Visual Studio Tools for Office (VSTO). Now, beginning with the 2013 iteration we have moved to the "Add-in model" for Office applications and that is a good thing. Now we can use our front-end web development skills to deliver Office Add-ins. In this session we will build solutions that will give our Office users tools that can take advantage of the new APIs along with other endpoints integrated into the environment they use every day. Learn how to build Office Add-ins using the same skills we use for SharePoint, web development, Windows and mobile apps, and use the power of the Office 365 platform and the web to deliver contextually relevant information. Deliver solutions that can be used on Windows, iOS and soon Android and MacOS devices. Deliver a huge amount of business value with surprisingly little effort.

uk: вхід без авторизації

name: Make Friends and Influence People by Building Office Add-ins


uk: Комп'ютерні науки

description: Node.js is a compelling platform that is quickly spreading from startups to the enterprise. Node.js strategically unites developers of all backgrounds through the common language of JavaScript. Why should you learn Node.js and where do you start? You will come away from this talk with the evidence to support Node.js, and tools you need to be productive. We will walk through a typical workflow of creating and debugging a web application. You will learn how easy it is to deploy, including Microsoft Azure. We'll also look at popular frameworks and modules, and other learning resources to give you the best start.

uk: вхід без авторизації

name: Node.js Crash Course (for .NET Developers)


uk: Комп'ютерні науки

description: At Jet.com, we've based our architecture around cloud-based event-driven microservices, and over the last several months, have schooled ourselves on what works and what doesn't. This session will walk you through the lessons we have learned on our way to developing our platform.

uk: вхід без авторизації

name: Patterns and practices for real-world event-driven microservices


Continuous Delivery of Mobile Apps

uk: Комп'ютерні науки

description: Quality and fast feedback on mobile is a challenge! Developing mobile apps requires dealing with multiple platforms, OS versions, form-factors and resolutions, varying hardware capabilities and network conditions. At the same time, users have extremely high expectations for the mobile experience and will promptly punish with bad App Store reviews when disappointed. User expectations are set by fast-moving consumer apps such as Facebook, YouTube and Google Maps which deliver fast, responsive, quality apps with frequent release cycles. At Xamarin, we believe that the way to higher quality and faster mobile release cycles is continuous delivery. In this talk, we show how to setup a continous delivery pipeline for a small mobile app. We show you how fast (and fun) it is to write automated tests and to automatically run them in various deployments with each commit. We discuss some of the challenges that mobile developers face in establishing the "walking skeleton" deployment pipeline for mobile apps. The example pipeline is complemented with a few small but real-life case studies of companies who successfully have implemented continuous delivery for mobile.

uk: вхід без авторизації


Polyglot Persistence

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Node.js is a vibrant and passionate community, pushing the boundaries and exploring the best ways to build applications. This has resulted in some amazing frameworks but has also encouraged some awful anti-patterns and pain points that have completely failed and will happily bite developers building on top of the platform. This session will highlight the anti-patterns of Node.js, such as Callback Hell, and describe how to approach applications based on the experience and battles Ben has fought.

uk: вхід без авторизації

name: Real World Lessons on the Pain Points of Node.js Applications


C# Language Internals

uk: Комп'ютерні науки

description: Ever wanted to know how you favorite C# language features come to live? Then this is your chance to get a guided tour through the jungle of IL code, JIT compilation, CLR internals, and more. Your guide won't bring any slides and will just be armed with Visual Studio, the C# compiler, WinDbg, and SOS.

uk: вхід без авторизації


Service Discovery for .NET developers

uk: Комп'ютерні науки

description: So you built your shiny new microservice, and now you want to deploy and have other code talk to it. But how will other code find it or even know that it exists? And if you recognize that one of anything is a risk to your availability, how you can enable clients to find the instance of your service that is running. For many people today the answer is a wiki documents machines and instances, and config files bind one service to another with failover involving an operator manually changing the config and rebooting the service.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Traditional static middleware servers do not fit a cloud-native, micro service model. Rapid container provisioning, software defined networking, and scaling policies now demand spinning up discrete infrastructure services on demand. Chris will present a next generation integration and application hosting environment that will free DevOps from expensive static deployments and glacial refresh cycles.

uk: вхід без авторизації

name: Steampunk App Servers in a Container Age


uk: Комп'ютерні науки

description: The Internet of Things (IOT) has been subject to a lot of Hype, but it is here now and ready to be used. What it needs are great developers to pick up the mantle. So come along and find out how you can take on the challenge of IOT. This session will cover... Developing for the Internet of Things both from a device perspective and in the cloud. Looking at areas to use IOT outside of hobbyist areas and how to look at IOT in a new way to help build new types of solutions. From the Devices side this session will be looking at how to build great connected devices and from the Cloud side it will include a breakdown of the best ways to integrate and deliver meaningful insight into your IOT swarm of devices.

uk: вхід без авторизації

name: The Internet of Things - Thought about it? Now try it


Behind the Scenes of C# 6.0

uk: Комп'ютерні науки

description: C# 6.0 has a potpourri of new convenient language features. In this talk, we’ll not only have a look at how to use each of those, but we’ll also look under the covers by browsing the Roslyn source code. Ever thought compiler source code is frightening to look at? No worries, your tour guide is ready to show you the inner beauty of the C# compiler!

uk: вхід без авторизації


Project Rider

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: For quite some time, webdevelopers outside of the .NET space have been using tools to handle their front end resources in a better way, by using task runners and things like that. Until now, most .NET devs have left that up to Visual Studio and ASP.NET. At least if we generalize a little. However, with the release of ASP.NET 5, those features are being removed from Visual Studio, and replaced by native Node and Gulp/Grunt integration, something that will change the way we build things on the web in the future. Are you feeling a little unsure of what this means? Not 100% sure what Gulp and Grunt is? Feeling a little lost when people start talking about Node, npm and Bower? Why not go to this talk and get an understanding of the fundamentals of this new process presented to you in a quick way?

uk: вхід без авторизації

name: What do you mean “a front-end build pipeline”!


uk: Комп'ютерні науки

description: The .NET Core CLI is coming soon and will replace DNX as the underpinnings of ASP.NET 5 while also being *the* command line experience for .NET Core development on all platforms. Come see David Fowler and Damian Edwards explain how this changes ASP.NET 5 (for the better) and what new scenarios it enables in its own right.

uk: вхід без авторизації

name: Saying “Goodbye” to DNX and “Hello!” to the .NET Core CLI


uk: Комп'ютерні науки

description: In this session, veteran author and trainer Wei-Meng Lee will walk you through the process of creating your first Apple Watch application on the latest watchOS 2 recently announced by Apple at WWDC. You will learn how to develop your next killer-app for the Apple Watch and how the various technologies stack up. At the end of the session, you will have a solid understanding of the possibilities afforded by the WatchKit Framework and how it interacts with your iPhone apps.

uk: вхід без авторизації

name: Developing Killer Apple Watch Applications


Play by Play - The C# Q&A, Episode 1

uk: Комп'ютерні науки

description: Jon Skeet of Stack Overflow fame matches up with K. Scott Allen to answer carefully selected questions from Stack Overflow. Moderated by Rob Conery, each of our participants will be given questions about C# ranging from simple LINQ queries to more difficult threading issues and they won’t be allowed to know the other’s answer until we’re on stage. In this session we’ll see how two prominent figures in the .NET community solve various problems.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: You know everything in this talk already, probably. At least, you've almost certainly come across the problems I'm going to describe - and learned how to solve them, possibly after much pain. How can you save your junior engineers (and children, and friends) that pain? This talk will focus on soft skills for technical problems - ways I've found to explain very common problems, whether they're conceptual issues or implementation pitfalls. Let's help the next generation of developers become awesome without getting the same battle scars we all have.

uk: вхід без авторизації

name: Fundamental problems that you all know about now - and how to explain them to junior engineers


uk: Комп'ютерні науки

description: One day we woke up and things were different. Maybe it happened overnight, maybe it took many years. Suddenly we are scripting against thousands of Virtual Machines from the command line while creating things today with JavaScript in the browser that were impossible yesterday. LiveScript becomes JavaScript becomes ES6 and now we're compiling C to JS. Join Scott Hanselman as he explores the relationship between the Cloud and the Browser, many Languages and one Language, how it might all fit together and what might come next.

uk: вхід без авторизації

name: Keynote NDC London 2016: JavaScript, The Cloud, and the Rise of the New Virtual Machine


de: Umweltschutz

uk: Охорона навколишнього середовища

en: Environmental Protection

de: Biologie

uk: Біологія

en: Biology

de: Mathematik, Naturwissenschaften

uk: Математика, природничі науки

en: Mathematics, Natural Sciences

de: Raumplanung

uk: Містобудування та територіальне планування

en: Spatial Planning

description: Lecture by Johannes Heisig, PhD student at the University of Münster.

uk: вхід без авторизації

name: A pan EU compilation of training points with GPS locations of trees and species name


Promises and Generators in ES6

uk: Комп'ютерні науки

description: EcmaScript 6 introduces many new features that will be a great aid to JavaScript developers, and will transform the way we write JavaScript. In this demo-laden talk I have chosen to take a deep dive into the new promise and generator features introduced in ES 6. I will demonstrate how you can leverage promises to remove callback-nesting (hell) and how to write and consume generators using the new yield keyword.

uk: вхід без авторизації


Business Logic: a different perspective

uk: Комп'ютерні науки

description: Although it’s been over a decade since the publication of the DDD “blue book”, there are even older principles that are not nearly as well known and, as a result, developers continue to struggle with logic across client and server tiers. This hasn't gotten any easier with the recent craziness around microservices. Join Udi for a quick run through some of the history of software architecture and see how, together with the application of modern version control techniques, we can come to vastly simpler systems.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Ever wanted your very own browser with proper support for 200 tabs and a built-in Hello Kitty UI? Watch David code the monstrosity live! Using only CSS, HTML and Javascript we'll create a brand new browser with a custom UI and amazing/horrible features. With Node.js and bindings to modern browser engines(Electron, nw.js) we can build desktop applications with web technologies, we can even build browsers where anyone who can program the web can program their browser. This talk will start by looking at just how amazing web-based desktop apps can be and end with building a monster of a browser. Features I'll build in the browser: Amazing sound effects Multiple rows for tabs enabling hundreds of tabs ruining usability Bookmark manager that rejects sites that aren't on Alexa top 100, only the best will do! A PDF reader

uk: вхід без авторизації

name: Browserception - Building our own browser with CSS_HTML and Node.js


uk: Комп'ютерні науки

description: When creating new and innovative products and services, it's becoming more and more important to visualise and test your concepts. Developers are in a unique position with their access to modern toolchains and their ability to actually craft something quickly. In a sense, developers are the new designers. This talk is for developers everywhere whom make something which eventually ends up in the hands of a user. By using modern tools and techniques, we can bridge the gap between design and development and create products which feel amazing.We’ll see how developers create interfaces in some of the worlds most succesful companies. We’ll cover how you can incorporate a modern prototyping workflow in your teams. How developers can optimise their products so designers can do their work and how developers should all know the basics of animation when creating software. Hopefully this talk will inspire you to create interfaces which not only look good, but feel amazing. We will be looking at state of the art prototyping tools, technologies which allows you to both iterate and test faster, and also the basics of animation in code. The talk is hosted by Martin Jensen. Martin has been designing and developing interfaces for a number of years, and spends about the same amount of time coding as he does designing. Martin is now working at Microsoft, building Delve, a new Microsoft product out of Norway.

uk: вхід без авторизації

name: Developing interfaces: Developers are the new designers


uk: Комп'ютерні науки

description: Introduction to the Hafslund AMS project and the chosen architecture, with information sources, handling of massive flows, and usage of cloud computing for analysis - SOA and The common problem with ESB’s, Canonical Data Models, and ETL - Micro Services: A new and better way - but did we forget something? - Data Oriented Architecture - A quick look at how data flows using asynchronous mechanisms and eventual consistency - How to transform tabular data into RDF graphs and connect them - Cleaning of data and matching without common identifiers, using trained statistical algorithms - The SPARQL query language - SDSHARE - how clients subscribe to changes - How different systems can enrich each other - How you can combine DOA with Micro Services - How to relate to this as a programmer - what are the new skillsets? - Looking back at ESB’s and Canonical data models - and how the problems just went away - CASE HAFSLUND: How we solved the AMS challenge with massive amounts of meter readings coming through many channels - CASE *CUSTOMER NAME WITHHELD FOR NOW* How we solved the other client challenge with diverse system domain Finally - How to deal with eventual consistency when you don’t want it - How to deal with information security - How this new integration paradigm can strengthen the customers position towards troublesome vendors (“I OWN the data now - behave or get out”)

uk: вхід без авторизації

name: Hafslund AMS: Drinking from the firehose at a large Internet-of-Things project


uk: Комп'ютерні науки

description: Why are some teams more efficient than others? What are the components of building a great team? How can you contribute to this greatness? In this talk I will give insight to these questions. I will also focus on how every team member can contribute to making the team highly efficient by using and enhancing your relational skills. I will use examples from the norwegian consultancy Webstep and from our projects.

uk: вхід без авторизації

name: How to build and be a part of a highly efficient team


uk: Комп'ютерні науки

description: Board games are fun and good challenges when exploring a new language. The requirements are clear - if only software requirements were as clear - and poses some interesting problems when it comes to implementation of the often quite cunning rules. Imperative, object-oriented and functional languages all provide their own answers on how to implement board game logic. Elixir is a concurrency oriented, functional language. This means new ways of solving the problems. In this talk we will look at how Elixir can be used to implement the logic for the board game classic Acquire. And some of the ideas can even be used for "real-life" problems as well!

uk: вхід без авторизації

name: Implementing the logic for a board game in Elixir


uk: Комп'ютерні науки

description: With the use of Azure Machine Learning based on R, eSmart Systems created long and short term predictions for energy load. Using these predictions, we control heated floors and water heating in households through home automation. The solution is entirely cloud based and is alive and running on the islands of Hvaler outside Fredrikstad, Norway. Join this session to see a reallife story of IoT, Azure and Machine Learning – a story of practical use of all the buzzwords and how it actually helps the utility lower costs.

uk: вхід без авторизації

name: IoT and Machine Learning, a true story of a Smart Grid


JavaScript Forensics

uk: Комп'ютерні науки

description: Something terrible happened here. Traces of errors litter the floor; memory leaking from cracks in the ceiling. Someone lost their object context in the corner. Everything reeks of jank. In this session, a JavaScript error tracking expert breaks down a series of common and complex crimes against web applications. You’ll leave the session armed with techniques and tools to detect, diagnose, and fix your JavaScript web applications. Bring your bugs and let’s fix up our web.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: - A Recipe For A Happy Software Development Team - Michał Śliwoń: Making software developers happy is hard. They're smart, they put a lot of energy and emotion in what they do and their road to becoming better is full of obstacles: slow computers, a need to do guesstimates and ongoing Internet debate whether to put a semicolon at the of line or not.We were lucky, things worked for us. After a while spent together, countless rounds of feedback - we found our rhythm. Boiled in uncertainty, heated by questioning everything, topped with a spoonful of team initiatives - our team was ready to be served. We found ourselves happy to be working with each other.I'd like to share with you our recipe for a happy software development team hoping some of the ingredients or procedures will enrich your team as well. - A robot is born - Martin Gravråk: How CAD software, 3D printers and cheap parts from eBay have made designing and building robots a lot easier for the average geek. I’ve spent the last few weeks creating a robot arm from molten plastic. The parts have been modeled in Autodesk Inventor and 3D printed in PLA, assembled and brought to life with lots of servos and an Arduino microcontroller. In this lightning talk I’ll share the mistakes and lessons I’ve learnt from this hobby project. You will learn the basics, see the robot and get some tips for how you can make your own. - Improving web performance - Ronald Mavarez: Have you been in a queue and thought everyone in front is just so slow!!! Its annoying isn't it?. Now imagine that you designed web pages like that, wouldn't you want to fix it! Exactly the same is happening with most web pages where the resources haven't been optimized and in this session we will talk about preventing slow files and loading our code faster. I will show you some small simple but clever optimisations that are quick to implement but will have a big impact in the performance of your web applications. This talk requires some understanding of JavaScript and HTML5. - Composing 3D Objects in WebGL - Sean Trelford: In this live session I will demonstrate the use of a domain-specific language, written in F#, to compose complex 3D scenes live in WebGL. - Making a web-powered MIDI-controled synthesizer - Stian Veum Møllersen: The web is becoming a very interesting platform for creative experimentation. The introduction of the WebMIDIAPI and the capabilities of the WebAudioAPI for creating sounds has opened the doors for musical expressions in a myriad of ways. One such way is to build a simple polyphonic supersaw synthesizer which you can control with a MIDI-enabled interface (such as a tiny keyboard). This is easier than it sounds, and I will show you how. Leaving this talk you will be equipped tostart creating music and explore the creative side of the web.

uk: вхід без авторизації

name: Lightning Talks - Trelford, Mavarez, Gravråk, Śliwoń and Veum Møllersen


uk: Комп'ютерні науки

description: The OWASP Top 10 provides a list of the 10 most critical web application security risks. How do these relate to AngularJS applications? What security vulnerabilities should developers be aware of beyond XSS and CSRF? This session will review the OWASP Top 10 with a front-end development focus on HTML and JavaScript. It will look at patterns to implement and others to consider avoiding. We will also explore several built-in features of AngularJS that help secure your application.

uk: вхід без авторизації

name: ng-owasp: OWASP Top 10 for AngularJS Applications


uk: Комп'ютерні науки

description: Building cross-platform native UIs with one shared codebase was once just a dream. With Xamarin.Forms, this dream is now a reality. Xamarin.Forms allows you to build a native UI for three platforms with one shared C# codebase. Simply put, if you know C# then you already know how to build iOS, Android, and Windows Phone apps. Leverage the .NET Framework to build out your shared business logic including integration with web services and Azure Mobile Services and then build out your shared UI in C# or XAML. Xamarin.Forms also features a built-in two-way data binding, dependency service to help you implement platform-specific code, an advanced cross-platform animation system, support for custom controls, and lots of other powerful features to help you build the best apps possible in the least amount of time. During this session we will cover the Xamarin platform and the brand new Xamarin.Forms library to share even more code across iOS, Android, and Windows Phone. Moreover, we will really focus on the code with several live coding adventures throughout the entire session. When you leave you will have the knowledge to create your first iOS, Android, and Windows Phone mobile apps in C# with Xamarin and Xamarin.Forms.

uk: вхід без авторизації

name: Xamarin.Forms: Native iOS, Android, & Windows apps from ONE C# Codebase


uk: Комп'ютерні науки

description: Immutable data structures will help you regain your sanity when programming - even in JavaScript! In this talk I will explain what immutability is, what it's good for, and how to effectively put it to use in JavaScript. We will see how immutability can truly help reduce complexity in the UI layer, and even improve performance while we're at it. Immutability goes hand in hand with functional programming, but it doesn't have to - no matter what your pereferred programming paradigm is, immutability will improve your code. If reducing complexity is your cup of tea, this talk is for you.

uk: вхід без авторизації

name: You can't change this - Immutable JavaScript


uk: Комп'ютерні науки

uk: вхід без авторизації

name: AI Village - Faults in our Pi Stars: Security Issues and Challenges in Deep Reinforcement Learning


uk: Комп'ютерні науки

uk: вхід без авторизації

name: AI Village - "Secrets are lies, sharing is caring, privacy is theft": An introduction to Machine learning


uk: Комп'ютерні науки

uk: вхід без авторизації

name: AI Village - Detecting hand-crafted social engineering emails with a bleeding-edge neural language model


uk: Комп'ютерні науки

uk: вхід без авторизації

name: AI Village - Summoning Demons: The Pursuit of Exploitable Bugs in Machine Learning


Stimme und Sound

keywords: Tutorial Video Stimme Sprache Sound Audio

de: Chemie

fi: kemia

uk: Хімія

en: Chemistry

fr: Chimie

da: Kemi

es: Química

nl: Scheikunde

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

en: Information and Library Sciences

uk: Математика, природничі науки

de: Geisteswissenschaften

uk: Гуманітарні науки

en: Humanities

@language: de

uk: вхід без авторизації


AI Village - Fawkes Facial Recognition

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: With elected US leadership now openly promoting medical misinformation and conspiracy theories, over 150,000 Americans have died from COVID-related causes. Behind the scenes, misinformation groups are successfully amplifying their social media campaigns by cooperating with one another, national political parties, and digital media monopolies. This talk shares the perspective from Project Domino, an effort to power anti-misinformation interventions by taking an open citizen science approach. First, we will provide a security analytics view of the operations by misinformers, including how they collaborate. Second, we discuss technical and systemic gaps that misinformers are exploiting, and where open source citizen science fits in. Finally, we share some of the enabling technologies for open misinformation data science (DIY tech around Jupyter, StreamLit, RAPIDS, Graphistry, …) and emerging relevant data methods (BERT/FAISS, UMAP, GPU graph analytics, …). As a result, we have been able to help misinformation researchers and reporters tackle higher scales and get better results. Surprisingly, we are optimistic as we layer on tools for use by regular citizens, leaders of at-risk communities, and other organizations.

uk: вхід без авторизації

name: AI Village - Project Domino Citizen: Data Science Against COVID misinfo


uk: Комп'ютерні науки

description: Research attacking ML-based image classifiers is common, but it is less frequent to see a study on how someone can bypass ML-based malware detection. In 2019, we organized a contest where participants had to modify Windows malware in a way where the provided three ML engines do not detect it. However, the modified sample is still functionally equivalent to the original binary. As it turned out, it is not that hard to come up with a generic solution which can bypass all three engine. In this presentation, we will discuss the details of the contest, some of the techniques used by the participants (packing, overlays, adding sections), and we will present the brand new 2020 competition with updated defensive and offensive tracks. The offensive track starts with DEF CON.

uk: вхід без авторизації

name: AI Village - Machine Learning Security Evasion Competition 2020


uk: Комп'ютерні науки

description: It's no question that modern advances in AI and Deep Learning technologies have allowed organizations to greatly scale their defensive capabilities. Between detecting evolving threats, automating discovery, fighting dynamic attacks, and even freeing up time for IT professionals; AI-fueled automation has been a boon for system defenders. But before we get too comfortable, we need to remember that there is another side to this fight. In this talk, we'll take a look at how AI technologies are enhancing adversarial capabilities and how challenges in defensive machine learning are opening up new attack surfaces.

uk: вхід без авторизації

name: AI Village - Hacking with Skynet: AI Powered Adversaries


uk: Комп'ютерні науки

uk: вхід без авторизації

name: AI Village - Babys First 100 ML sec Words


uk: Комп'ютерні науки

description: Normally concept or dataset drift is unquantifiable in practice. The only ways to calculate it are with optimal transport techniques that take O(n^4). The proxies some ML practitioners use are unreliable when applied to security. This talk presents a way to calculate a concept drift number that takes O(log n). It is faster than most inference, so can be put inline in an ML pipeline. Also, as the structure used to calculate the drift is so cheap we can apply it per-user as an extremely effective defense against attacks.

uk: вхід без авторизації

name: AI Village - Calculating Drift, Fast with Goko


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: “Stell Dir vor, es ist 2020 und Open Access läuft immer noch nicht.“

Universität Bielefeld

addressCountry: DE

addressLocality: Bielefeld

addressRegion: North Rhine-Westphalia


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Plan S in der institutionellen Strategie


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Transformationserfahrungen von Herausgeber*innen von Open-Access-Zeitschriften


Kann man dreidimensional scannen?

uk: вхід без авторизації

name: Moderation Skorupka, Sascha (Leitung, Regie, Redaktion)

Leibniz Universität Hannover (LUH)

addressLocality: Hanover

addressRegion: Lower Saxony


uk: Комп'ютерні науки

uk: вхід без авторизації

name: AI Village - Workshop - Adversarial Machine Learning Attacking AMSI Providers


uk: Комп'ютерні науки

description: Machine Learning is gaining popularity in the area of cyber security with the growth of connected network devices that leads to an increase in the amount of data being handled for security monitoring. This paper proposes a framework that facilitates security monitoring on different entities at large scale, the so- called Spectrum. We address the production issues and challenges of Spectrum.

uk: вхід без авторизації

name: AI Village - Spectrum: An End-to-End Framework for ML-based Threat Monitoring and Detection


uk: Комп'ютерні науки

description: In this talk, we will introduce the most comprehensive offensive VoIP security tool ever developed, Mr.SIP (comprehensive version). We will make a live attack demonstration using Mr.SIP in our security laboratory. Furthermore, we will also introduce novel SIP-based attacks using the vulnerabilities we found in the SIP retransmission mechanism and reflection logic. Mr.SIP is developed to assist security experts and system administrators who want to perform security tests for VoIP systems and to measure and evaluate security risks. It quickly discovers all VoIP components and services in a network topology along with the vendor, brand, and version information, detects current vulnerabilities, configuration errors. It provides an environment to assist in performing advanced attacks to simulate abuse of detected vulnerabilities. It detects SIP components and existing users on the network, intervenes, filters and manipulates call information, develops DoS attacks, breaks user passwords, and can test the server system by sending irregular messages. Status-controlled call flow and ability to bypass anomaly systems stand out as Mr.SIP’s unique aspects. It also has strengths and competencies in terms of advanced fake IP address generation, fuzzing, password cracker, interactive inter-module attack kit, and MiTM features.In this talk, we will introduce the most comprehensive offensive VoIP security tool ever developed, Mr.SIP (comprehensive version). We will make a live attack demonstration using Mr.SIP in our security laboratory. Furthermore, we will also introduce novel SIP-based attacks using the vulnerabilities we found in the SIP retransmission mechanism and reflection logic. Mr.SIP is developed to assist security experts and system administrators who want to perform security tests for VoIP systems and to measure and evaluate security risks. It quickly discovers all VoIP components and services in a network topology along with the vendor, brand, and version information, detects current vulnerabilities, configuration errors. It provides an environment to assist in performing advanced attacks to simulate abuse of detected vulnerabilities. It detects SIP components and existing users on the network, intervenes, filters and manipulates call information, develops DoS attacks, breaks user passwords, and can test the server system by sending irregular messages. Status-controlled call flow and ability to bypass anomaly systems stand out as Mr.SIP’s unique aspects. It also has strengths and competencies in terms of advanced fake IP address generation, fuzzing, password cracker, interactive inter-module attack kit, and MiTM features.

uk: вхід без авторизації

name: Practical VoIP Penetration Testing Using Mr. SIP: Pro: SIP-Based Audit and Attack Tool


uk: Комп'ютерні науки

description: Question and Answer Session for Ismail Melih Tas and Kubilay Ahmet Kucuk - Practical VoIPUC Hacking w Mr SIP

uk: вхід без авторизації

name: Practical VoIP/UC Hacking Using Mr. SIP: Q&A


Office Drama on macOS: Q&A

uk: Комп'ютерні науки

description: Talk startet ab 1:30

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Node.js is widely used for developing both server-side and desktop applications. It provides a cross-platform execution environment for JavaScript programs. Due to the increasing popularity, the security of Node.js is critical to web servers and desktop clients. We present a novel attack method against the Node.js platform, called hidden property abusing (HPA). The new attack leverages the widely-used data exchanging feature of JavaScript to tamper critical program states of Node.js programs, like server-side applications. HPA entitles remote attackers to launch serious attacks, such as stealing confidential data, bypassing security checks, and launching denial of service attacks. To help developers detect the HPA issues of their Node.js applications, we develop a tool, named LYNX, that utilizes hybrid program analysis to automatically reveal HPA vulnerabilities and even synthesize exploits. We apply LYNX on a set of widely-used Node.js programs and identify 13 previously unknown vulnerabilities. LYNX successfully generates 10 severe exploits. We have reported all of our findings to the Node.js community. At the time of paper writing, we have received the confirmation of 12 vulnerabilities and got 12 CVEs assigned. Moreover, we collaborated with an authoritative public vulnerability database to help them use a new vulnerability notion and description in related security issues. The talk consists of four parts. First, we will introduce recent offensive research on Node.js. Second, we will introduce HPA by demonstrating an exploit on a widely-used web framework. Third, we will explain how to leverage program analysis techniques to automatically detect and exploit HPA. In the end, we will have a comprehensive evaluation which discusses how we identified 13 HPA 0days with the help of our detection method.

uk: вхід без авторизації

name: Discovering Hidden Properties to Attack NodeJS Ecosystem: Q&A


Whispers Among the Stars: Q&A

uk: Комп'ютерні науки

description: Question and answer session for James Pavur - Whispers Among the Stars

uk: вхід без авторизації


Mainframe Surrogat Chains: Q&A

uk: Комп'ютерні науки

description: Question and answer session for Jake Labelle - Getting Shells on zOS with Surrogat Chains

uk: вхід без авторизації


Hacking the Hybrid Cloud: Q&A

uk: Комп'ютерні науки

description: Question and answer session for Sean Metcalf - Hacking the Hybrid Cloud

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Question and answer session for Jiska Classen and Francesco Gringoli - Spectra

uk: вхід без авторизації

name: Spectra: New Wireless Escalation Targets: Q&A


uk: Комп'ютерні науки

description: Questions and answer session for Shlomi Oberman, Moshe Kol, Ariel Schon - The Ripple20

uk: вхід без авторизації

name: The Ripple20 Vulnerabilities Haunt Hundreds of Millions: Q&A


uk: Комп'ютерні науки

description: Question and answer session for Patrick Kiley - Reverse Engineering the Tesla Battery Management System Q&A

uk: вхід без авторизації

name: Reverse Engineering the Tesla Battery Management System: Q&A


uk: Комп'ютерні науки

description: Question and Answer session for Paul Marrapese - Abusing P2P to Hack 3 Million Cameras

uk: вхід без авторизації

name: Abusing P2P to Hack 3 Million Cameras: Q&A


DNSSECTION: Q&A

uk: Комп'ютерні науки

description: Question and answer session for HadreHadrien Barral , Rémi Géraud Stewart - DNSSECTION

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Question and answer session for Jack Baker - Finding and Exploiting Bugs in Multiplayer Game Engines

uk: вхід без авторизації

name: Finding and Exploiting: Bugs in Multiplayer Game Engines: Q&A


uk: Комп'ютерні науки

description: Question and answer session for Peleg Hadar and Tomer Bar - After Stuxnet Printing still the Stairway to Heaven

uk: вхід без авторизації

name: A Decade After Stuxnet's Printer Vulnerability: Printing is still the Stairway to Heaven: Q&A


uk: Комп'ютерні науки

description: Question and answer session for Michael Stay - How we recovered XXX,000 in Bitcoin from a zip file

uk: вхід без авторизації

name: How we recovered XXX,000 in Bitcoin from an zip file: Q&A


When TLS Hacks You: Q&A

uk: Комп'ютерні науки

description: Question and answer session for Joshua Maddux - When TLS Hacks You

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Question and Answer session for Cooper Quintin - Detecting Fake 4G Base Stations in Real Time

uk: вхід без авторизації

name: Detecting Fake 4G Base Stations in Real Time: Q&A


uk: Комп'ютерні науки

description: question and answer session for Gal Zror - Don't Ruck Us Again

uk: вхід без авторизації

name: Don't Ruck Us Again: The Exploit Returns: Q&A


uk: Комп'ютерні науки

description: Question and Answer Session for Erik Hunstad - Domain Fronting is Deal Long Live Domain Fronting

uk: вхід без авторизації

name: Domain Fronting is Dead Long Live Domain Fronting: Q&A


Ask the EFF: Meet the EFA: Q&A

uk: Комп'ютерні науки

description: Question and Answer session for Ask the EFF: Meet the EFA

uk: вхід без авторизації


D0 N0 H4RM: Q and A

uk: Комп'ютерні науки

description: Question and Answer Session for Christian “quaddi” Dameff MD and panel - D0 N0 H4RM

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Question and Answer session for Bill Demirkapi - Demystifying Modern Windows Rootkits

uk: вхід без авторизації

name: Demystifying Modern Windows Rootkits: Q&A


uk: Комп'ютерні науки

description: Question and Answer Session for Elie Bursztein - A Hacker's Guide to Reducing Side Channel Attack Surfaces

uk: вхід без авторизації

name: A Hacker's Guide to Reducing Side Channel Attack Surfaces: Q&A


uk: Комп'ютерні науки

description: Question and Answer session for Christopher Wade - Beyond Root Custom Firmware For Embedded Mobile Chipsets

uk: вхід без авторизації

name: Beyond Root: Custom Firmware For Embedded Mobile Chipsets: Q&A


uk: Комп'ютерні науки

description: Question and Answer Session for Dylan Ayrey and Allison Donovan - Lateral Movement and Privilege Escalation

uk: вхід без авторизації

name: Lateral Movement and Privilege Escalation in GCP: Q&A


uk: Комп'ютерні науки

description: Question and Answer session for Bill Graydon - Exploiting Key Space Vulnerabilities in the Physical World

uk: вхід без авторизації

name: Exploiting Key Space Vulnerabilities in Locks: Q&A


uk: Комп'ютерні науки

description: Question and Answer session for Alvaro Muñoz and Oleksandr Mirosh - Room For Escape Scribbling Outside The Lines of Template Security

uk: вхід без авторизації

name: Room For Escape: Scribbling Outside The Lines: Q&A


uk: Комп'ютерні науки

description: Question and Answer session for Ayoul3 - Only Takes a Spark - Popping a Shell on 1000 Nodes

uk: вхід без авторизації

name: Only Takes a Spark: Popping a Shell on 1000 Nodes: Q&A


uk: Комп'ютерні науки

description: In 2010, Stuxnet, the most powerful malware in the world revealed itself, causing physical damage to Iranian nuclear enrichment centrifuges. In order to reach Iran's centrifuges, it exploited a vuln in the Windows Print Spooler service and gain code execution as SYSTEM. Due to the hype around this critical vuln, we (and probably everyone else) were pretty sure that this attack surface would no longer exist a decade later. We were wrong… The first clue was that 2 out of 3 vulns which were involved in Stuxnet were not fully patched. That was the case also for the 3rd vuln used in Stuxnet, which we were able to exploit again in a different manner. It appears that Microsoft has barely changed the code of the Print Spooler mechanism over the last 20 years. We investigated the Print Spooler mechanism of Windows 10 Insider and found two 0-day vulns providing LPE and DoS (First one can also be used as a new persistence technique)

uk: вхід без авторизації

name: A Decade After Stuxnet's Printer Vulnerability: Printing is still the Stairway to Heaven


Hacking the Hybrid Cloud

uk: Комп'ютерні науки

description: Most companies have moved into the cloud and on-premises applications and systems remain. This configuration is reasonably referred to as "hybrid"; in the cloud and not at the same time. Hybrid cloud requires integration and communication between the remaining on-prem infrastructure and the new(er) cloud services. This talk describes several scenarios that appear to subvert typical security and protections which involve federation configuration, Identity Access Management (IAM), and interaction between SaaS and IaaS in the Microsoft Cloud.

uk: вхід без авторизації


When TLS Hacks You

uk: Комп'ютерні науки

description: Lots of people try to attack the security of TLS. But what if we use TLS to attack other things? It's a huge standard, and it turns out that features intended to make TLS fast have also made it useful as an attack vector. Among other things, these features provide a lot of flexibility for Server-Side Request Forgery (SSRF). While past work using HTTPS URLs in SSRF has relied upon platform-specific bugs such as SNI injection, we can go further. In this talk, I present a novel, cross-platform way of leveraging TLS to target internal services. Uniquely, these attacks are more effective the more comprehensively a platform supports modern TLS, so won't go away with library upgrades. It is also unlikely that the TLS spec will change overnight at the whim of a random security researcher. Instead, we need to walk through scenarios and dispel common assumptions so the audience can know what to look out for. Of course, the best way to do so is with demos!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Wireless coexistence enables high-performance communication on platforms with a small form factor despite overlapping frequency bands. On-chip coexistence is essential to combine wireless technologies, and manufacturers implement various proprietary solutions. This presentation demonstrates multiple attacks on two coexistence features of Broadcom and Cypress Wi-Fi/Bluetooth combo chips. Various popular devices that were released over a decade are affected, such as the Google Nexus 5 and iPhone 6, but also the newest iPhone 11 and Samsung Galaxy S20. On the analyzed chips, Wi-Fi and Bluetooth run on separate processing cores, but various information leaks and even code execution become possible through their coexistence interfaces. As these escalations concern an internal chip interface, the operating system cannot prevent them. However, coexistence exploitation widens the possibilities to escalate into drivers and the operating system on top.

uk: вхід без авторизації

name: Spectra: New Wireless Escalation Targets


uk: Комп'ютерні науки

description: In recent years, deep-learning based side-channel attacks have been proven to be very effective and opened the door to automated implementation techniques. Building on this line of work, this talk explores how to take the approach a step further and showcases how to leverage the recent advance in AI explainability to quickly assess which parts of the implementation is responsible for the information. Through a concrete set by step example, we will showcase the promise of this approach, its limitations, and how it can be used today.

uk: вхід без авторизації

name: A Hacker’s Guide to Reducing Side Channel Attack Surfaces Using Deep Learning


uk: Комп'ютерні науки

description: Qualcomm Snapdragon SoC integrates multiple subsystems, each one is customized for a particular application domain. Compute digital-signal processor (cDSP) is a subsystem which allows a mobile device to process simple sets of data with high performance on low power. In the talk we will show that this little studied proprietary subsystem has many security problems that open the door to malicious Android applications for PE and DoS attacks of the device. For security reasons, the cDSP is licensed for programming by OEMs and by a limited number of third-party software vendors. The code running on DSP is signed by Qualcomm. However, we will demonstrate how an Android application can bypass Qualcomm’s signature and execute privileged code on DSP, and what further security issues this can lead to. Hexagon SDK is the official way for the vendors to prepare DSP related code. We discovered serious bugs in the SDK that have led to the hundreds of hidden vulnerabilities in the Qualcomm-owned and vendors’ code. The truth is that almost all DSP executable libraries embedded in Qualcomm-based smartphones are vulnerable to attacks due to issues in the Hexagon SDK. We are going to highlight the auto generated security holes in the DSP software and then exploit them.

uk: вхід без авторизації

name: Pwn2Own Qualcomm Compute DSP: for Fun and Profit


uk: Комп'ютерні науки

description: Rooting a smartphone is often considered the ultimate method to allow a user to take complete control of their device. Despite this, many smartphones contain hardware which is closed off to any modification. This talk aims to show how this hardware can be reverse engineered in order to bypass its protections and further expand its functionality. Using proprietary NFC Controllers as an example, we will cover analysis of the protocols used by the chips, how the firmware protections could be broken, and how custom firmware could be developed and deployed to the phone with no hardware modifications. This will include methodologies for analyzing weaknesses in firmware update protocols, leveraging the Unicorn CPU Emulator to bypass debugging restrictions, and techniques for reverse engineering the hardware capabilities of an unknown chip in order to implement custom features. This will end with demonstration of a smartphone with passive NFC sniffing capabilities and expanded tag emulation functionality.

uk: вхід без авторизації

name: Beyond Root: Custom Firmware for Embedded Mobile Chipsets


uk: Комп'ютерні науки

description: Space is changing. The number of satellites in orbit will increase from around 2,000 today to more than 15,000 by 2030. This briefing provides a practical look at the considerations an attacker may take when targeting satellite broadband communications networks. Using $300 of widely available home television equipment I show that it is possible to intercept deeply sensitive data transmitted on satellite links by some of the world's largest organizations. The talk follows a series of case studies looking at satellite communications affecting three domains: air, land, and sea. From home satellite broadband customers, to wind farms, to oil tankers and aircraft, I show how satellite eavesdroppers can threaten privacy and communications security. Beyond eavesdropping, I also discuss how, under certain conditions, this inexpensive hardware can be used to hijack active sessions over the satellite link. The talk concludes by presenting new open source tools we have developed to help researchers seeking to improve satellite communications security and individual satellite customers looking to encrypt their traffic. The talk assumes no background in satellite communications or cryptography but will be most interesting to researchers interested in tackling further unsolved security challenges in outer space.

uk: вхід без авторизації

name: Whispers Among the Stars: Perpetrating (and Preventing) Satelllite Eavesdropping Attacks


uk: Комп'ютерні науки

description: Now more than ever, digital communication and collaboration are essential to the modern human experience. Shared digital content is everywhere and Content Management Systems (CMS) play a crucial role allowing users to design, create, modify and visualize dynamic content. In our research we discovered multiple ways to achieve Remote Code Execution (RCE) on CMS platforms through which an attacker can take full control of the resources your organization relies on. Using a Microsoft SharePoint server as our main CMS attack surface, we combined flaws in its implementation and design with framework and language specific features to find six unique RCE vulnerabilities. In addition, we discovered ways to escape template sandboxes of the most popular Java Template engines and achieved RCE in many products including: Atlassian Confluence, Alfresco, Liferay, Crafter CMS, XWiki, Apache OfBiz, and more. We will analyze how these products and frameworks implement security controls and review the various techniques that we used to bypass them. We will describe all the vulnerabilities we uncovered in detail and show working demos of the most interesting attacks. Finally, we will present our general review methodologies for systems with dynamic content templates and provide practical recommendations to better protect them.

uk: вхід без авторизації

name: Room for Escape: Scribbling Outside the Lines of Template Security


uk: Комп'ютерні науки

description: ATMs are networked computers that dispense cash, so naturally they’re uniquely interesting devices to examine. We all remember ATM jackpotting from a decade ago. Unfortunately, it doesn’t look like ATM security has improved for some common models since then. We present our reverse engineering process for working with an ATM and modifying its firmware. For this, we became our own "bank" by creating software that's able to speak the obscure protocols used by ATMs. For working with the device software at a low level, we restored JTAG access, defeated code signing, and developed custom debugging tools. We then leveraged this research to discover two 0-day network-based attacks, which we will demonstrate live. The first vulnerability takes advantage of the ATM’s remote administration interface, which can lead to arbitrary code execution and total device compromise. The second vulnerability is in the OEM’s implementation of a common middleware for ATM peripherals. This allows for command injection and jackpotting of ATMs over the network. The high barrier to entry for even legally opening up one of these devices has left a lot of attack surface area unchecked. Through this talk, we want to shed light on the state of ATM security and encourage the security community to continue to challenge ATM vendors to do better.

uk: вхід без авторизації

name: Applied Cash Eviction through ATM Exploitation


Don't Be Silly: It's Only a Lightbulb

uk: Комп'ютерні науки

description: A few years ago, a team of academic researchers showed how they can take over and control smart lightbulbs, and how this in turn allows them to create a chain reaction that can spread throughout a modern city. Their research brought up an interesting question: aside from triggering a blackout (and maybe a few epilepsy seizures), could these lightbulbs pose a serious risk to our network security? Could attackers somehow bridge the gap between the physical IoT network (the lightbulbs) and even more appealing targets, such as the computer network in our homes, offices or even our smart cities? We’re here to tell you the answer is: Yes. Join us as we take a deep dive into the world of ZigBee IoT devices. Continuing from where the previous research left off, we go right to the core: the smart hub that acts as a bridge between the IP network and the ZigBee network. And let me tell you this, this harsh embedded environment is surely not on our side. With a maximal message size of less than 128 bytes, complex state machines and various strict timing constraints, this challenge is going to be tough. After a long journey, we finally made it. By masquerading as a legitimate ZigBee lightbulb, we were able to exploit vulnerabilities we found in the bridge, which enabled us to infiltrate the lucrative IP network using a remote over-the-air ZigBee exploit.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Welcome to DEF CON Safe Mode! DT welcomes you, tells you how we got here and what we're trying to do and then Lostboy tells you all about mixtapes and myster...

uk: вхід без авторизації

name: Welcome to DEF CON Safe Mode and Badge Talk


DNSSECTION: A practical attack on DN

uk: Комп'ютерні науки

description: Domain Name System (DNS) is an ubiquitous and essential component of the Internet. It performs translations between identifiers and resources (mostly domain names and computers, but not only), yet remains often invisible to the user. But DNS is not harmless: although not intended to be a general purpose database, it has been extended to incorporate additional types of information. Including information that should not be there. In this talk we show how to exploit DNSSEC zone walking to perform advanced recon operations, on a real case, namely to obtain client private information from a large European cloud provider. This constitutes the first practical zone walking attack at such a scale. Using this exploit we collected a substantial amount of private information, enough to share some interesting statistics. By the end of this talk, you will have everything you need to know to perform similar attacks -- and resist them.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: 4G based IMSI catchers such as the Hailstorm are becoming more popular with governments and law enforcement around the world, as well as spies, and even criminals. Until now IMSI catcher detection has focused on 2G IMSI catchers such as the Stingray which are quickly falling out of favor. In this talk we will tell you how 4G IMSI Catchers might work to the best of our knowledge, and what they can and can't do. We demonstrate a brand new software project to detect fake 4G base stations, with open source software and relatively cheap hardware. And finally we will present a comprehensive plan to dramatically limit the capabilities of IMSI catchers (with the long term goal of making them useless once and for all).

uk: вхід без авторизації

name: Detecting Fake 4G Base Stations in Real Time


uk: Комп'ютерні науки

description: Imagine being able to get together with a few of your co-workers, look at your office keys and derive a building master key. Or you may not have any working key at all: you could impression the lock, or use one of the many ways we’ll present in this talk to put together little bits of information from a lock to create a working key. We apply information theory - the concept behind the “entropy” of a password - in an easy to understand way to show how every little bit of information about a system can be used to defeat it. The audience will be able to pull any key out of their pocket and understand how it works and how an attacker can create it covertly, and open whatever lock it is for, or even a lock it isn’t for, that shares the same system. We’ll explain how to produce either a single final key, or a set small enough to economically brute force - and release a software tool to let anyone quickly try out all possibilities in an easy-to-visualize way. Finally, we will discuss possible solutions to these problems and introduce vulnerabilities our research has uncovered in high-security systems like Medeco, Abloy, and Mul-T-Lock - including releasing a set of only 159 possible top level master key codes for certain large Medeco mastered systems.

uk: вхід без авторизації

name: Exploiting Key Space Vulnerabilities in Locks


uk: Комп'ютерні науки

description: This is the story of how we found and exploited a series of critical vulnerabilities (later named Ripple20) affecting tens or hundreds of millions of IoT devices across all IoT sector conceivable - industrial controllers, power grids, medical, home, networking, transportation, enterprise, retail, defense, and a myriad of other types of IoT devices, manufactured and deployed by the largest American and international vendors in these fields. These vulnerabilities were found in a TCP/IP software library located at the very beginning of a complex supply chain and have lurked undetected for at least 10 years, likely much more. Over the past two decades this library has spread around the world by means of direct use as well as indirectly, through ""second hand"" use, rebranding, collaborations, acquisitions and repackaging, having been embedded and configurated in a range of different ways. Many of the vendors indirectly selling and using this library were not aware of their using it. Now that they know, the patch propagation dynamics are very complex and may not be possible in some cases. This library is a little known, but widely used, embedded library developed by Treck Inc.known for its high reliability, performance, and configurability. Its features make it suitable for real-time operating system usage and low-power devices. Despite being used by many large, security-aware vendors, these vulnerabilities lay dormant and undiscovered - while actors of all types could have discovered these vulnerabilities by finding one of several bugs in any of the components, exposing hundreds of others immediately. This would provide a field day of affected devices for the picking. In this presentation, we will discuss one of the vulnerabilities in technical depth, demonstrating an RCE exploit on a vulnerable device. We will explain how the vulnerabilities became so widespread, and what we still don’t know. We will speculate as to why these vulnerabilities survived for so long and show why some vendors are worse affected than others.

uk: вхід без авторизації

name: Hacking the Supply Chain: The Ripple20 Vulnearabilities Haunt Hundreds of Millions of Critical Devices


Demystifying Modern Windows Rootkits

uk: Комп'ютерні науки

description: This talk will demystify the process of writing a rootkit, moving past theory and instead walking the audience through the process of going from a driver that says "Hello World" to a driver that abuses never-before-seen hooking methods to control the user-mode network stack. Analysis includes common patterns seen in malware and the drawbacks that come with malware in kernel-mode rather than user-mode. We'll walk through writing a rootkit from scratch, discussing how to load a rootkit, how to communicate with a rootkit, and how to hide a rootkit. With every method, we'll look into the drawbacks ranging from usability to detection vectors. The best part? We'll do this all under the radar, evading PatchGuard and anti-virus.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Node.js is widely used for developing both server-side and desktop applications. It provides a cross-platform execution environment for JavaScript programs. Due to the increasing popularity, the security of Node.js is critical to web servers and desktop clients. We present a novel attack method against the Node.js platform, called hidden property abusing (HPA). The new attack leverages the widely-used data exchanging feature of JavaScript to tamper critical program states of Node.js programs, like server-side applications. HPA entitles remote attackers to launch serious attacks, such as stealing confidential data, bypassing security checks, and launching denial of service attacks. To help developers detect the HPA issues of their Node.js applications, we develop a tool, named LYNX, that utilizes hybrid program analysis to automatically reveal HPA vulnerabilities and even synthesize exploits. We apply LYNX on a set of widely-used Node.js programs and identify 13 previously unknown vulnerabilities. LYNX successfully generates 10 severe exploits. We have reported all of our findings to the Node.js community. At the time of paper writing, we have received the confirmation of 12 vulnerabilities and got 12 CVEs assigned. Moreover, we collaborated with an authoritative public vulnerability database to help them use a new vulnerability notion and description in related security issues. The talk consists of four parts. First, we will introduce recent offensive research on Node.js. Second, we will introduce HPA by demonstrating an exploit on a widely-used web framework. Third, we will explain how to leverage program analysis techniques to automatically detect and exploit HPA. In the end, we will have a comprehensive evaluation which discusses how we identified 13 HPA 0days with the help of our detection method.

uk: вхід без авторизації

name: Discovering Hidden Properties to Attack Node js Ecosystem


uk: Комп'ютерні науки

description: Tesla released the P85D in 2014. At that time the vehicle came with "insane mode" acceleration with a 0-60 time of 3.2 seconds. Later in July of 2015, Tesla announced "Ludicrous mode" that cut the 0-60 time down to 2.8 seconds. This upgrade was offered both new and as a hardware and firmware change to the existing fleet of P85D vehicles. Since then, Tesla has released newer ludicrous vehicles. What makes the P85D upgrade unique was how the process required changes to the vehicle's Battery Management System(BMS). The 'BMS' handles power requests from the drive units of the car. I was able to reverse engineer this upgrade process by examining the CAN bus messages, CAN bus UDS routines and various firmware files that I extracted from a car. I also decrypted and decompiled Python source code used for diagnostics to determine that the process involved replacing the contactors and fuse with higher current versions as well as modifying the current sensing high voltage "shunt" inside the battery pack. I then performed this process on an actual donor P85D. I bricked the car in the process, forcing me to pay to have it towed to another state so I could troubleshoot. I came to understand that the BMS is the deciding module that allows the drive units to have only as much power as the BMS allows. The car is fixed and is faster.

uk: вхід без авторизації

name: Reverse Engineering a Tesla Battery Management System to Increase Power Available


Hacking Traffic Lights

uk: Комп'ютерні науки

description: New systems are connected to the internet every day to make our lives easier or more comfortable. We are starting to see connected traffic and smart traffic lights innovations to improve traffic flow, safety and comfort. With smart systems entering and controlling our physical world, ethical hacking such systems to find possible ways of manipulation becomes even more important to society. In the Netherlands there are some public innovations where traffic light systems are being connected to smartphone apps. We have looked at these innovations to see if these systems could be manipulated and how manipulation could benefit an attacker. Specifically, we found a way in two different platforms, that allows us to successfully fake a continuous flow of bicyclists that turns the cyclist traffic light instantly green or decreases the time to green. More than 10 municipalities in the Netherlands connected a part of their cyclist traffic lights to the affected platforms. It was possible to perform these hacks from any remote location, which allows someone to remotely influence the traffic at scale. The hack results in turning the cyclists lights to green, while other lights on the intersection will turn to red. The regular security systems that make sure lights are not turned green simultaneously stays intact. There are similar projects that turn the car traffic lights green for ambulances or trucks. If an attacker succeeds to exploit these projects with a similar attack, he could remotely influence the car traffic lights directly.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Unreal Engine 4 and Unity3D dominate the multiplayer gaming landscape. They're also complicated pieces of software written in C and C++. In this talk, Jack will share the results of months of bug hunting in multiplayer game networking protocols. Be prepared for memory disclosures, speedhacks, and WONTFIX vulnerabilities.

uk: вхід без авторизації

name: Finding and Exploiting: Bugs in Multiplayer Game Engines


Abusing P2P to Hack 3 Million Cameras

uk: Комп'ютерні науки

description: To a hacker, making a bug-ridden IoT device directly accessible to the Internet sounds like an insanely bad idea. But what's *truly* insane is that millions of IoT devices are shipping with features that expose them to the Internet the moment they come online, even in the presence of NAT and firewalls. P2P, or “peer-to-peer”, is a convenience feature designed to make the lives of users easier, but has the nasty side effect of making attackers’ lives easier as well. Come for the story of how supply chain vulnerabilities in modern IP cameras, baby monitors, and even alarm systems are putting millions at risk for eavesdropping and remote compromise. We'll talk about the hoards of IoT devices that exist outside of Shodan's reach and the botnet-like infrastructure they rely on. Learn how to find P2P networks and how to exploit them to jump firewalls, steal camera passwords over the Internet, and correlate devices to physical addresses. We'll demonstrate how to snoop on someone's video simply by using your own camera – and how someone may be snooping on your video, too.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Printer Spooler service, one of the important services in Microsoft Windows, has existed for more than 25 years. It runs at highest privilege level, unsandboxed, does networking, and dynamically loads third-party binaries. What could possibly go wrong? In this talk, we will walk you through an incredibly fun bug we have discovered in printer spooler service. It can be exploited both locally and remotely, escapes sandbox, executes arbitrary code, and also elevates to SYSTEM. While Microsoft managed to develop the most restrictive sandbox for Microsoft Edge, this bug easily goes through it like it's a sieve. We will talk in detail the implementation of this ancient service, the method we used to discover and exploit the bug, and also throw in some tips and tricks for logic bugs in between.

uk: вхід без авторизації

name: Evil Printer: How to Hack Windows Machines with Printer Protocol


D0 N0 H4RM: Healthcare Security

uk: Комп'ютерні науки

description: It is certainly a time of discovery- though the truths revealed by the COVID-19 crisis can be bitter and bleak. At a time when all attention is focused on the ERs and ICUs that make up the battle’s front lines, it is easy to cast aside old warnings to focus solely on the clinical war. But the need for safety and security only increases in the face of a pandemic- and healthcare cybersecurity is no different. From testing to ventilators, every facet of our response to COVID-19 depends on trustworthy and reliable technology. D0 No H4rm- DEF CON’s continuing conversation on healthcare returns for another up close (but not too close) and personal dialogue between hackers at the top of their fields- from the halls of the FDA to the cutting edge of medical devices security research for an all-encompassing look at what we need to focus on in the age of COVID. Moderated by physician hackers quaddi and r3plicant, this perennially packed event aims to recruit the talent, ingenuity, and vision of the DEF CON family for the challenges we face both now and after the immediate crisis passes.

uk: вхід без авторизації


Bytes In Disguise

uk: Комп'ютерні науки

description: Non-Volatile Memory. EVERY computer has it, from the chip that stores your BIOS to the controller that runs your laptop trackpad and even your new fancy USB-C monitor. These small nooks of storage can be (ab)used by anyone to store data or code without causing any side effects and none would be the wiser. We will show you more than one example of how this is possible and walk through everything you need to know to do it, too. In this talk, we will describe how to hide persistence in these obscure memory chips using simple tools that we are releasing as open source. We will show multiple ways to accomplish this without detection. On the defensive front, we’ll discuss what can be done to detect and lock down systems.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Don`t Be Silly: It's Only a Lightbulb: Q&A


uk: Комп'ютерні науки

description: From the researchers who brought to you ""Don't Ruck Us Too Hard"" comes a brand new follow-up research. This summer! We will show that all of Ruckus Wireless ""ZoneDirector"" and the ""Unleashed"" devices are still vulnerable. This follow-up research includes six new vulnerabilities, such as command injection, information leakage, credentials overwrite, and stack overflow and XSS. With these vulnerabilities, we were able to achieve two new and different pre-auth RCEs. Combined with the first research, that is five entirely different RCEs in total. We also found that Ruckus did not fix some of the vulnerabilities from the first research correctly, and they are still exploitable by using a very neat payload :). Other cool stuff about this research: We will share a new Ghidra script we used to map the critical sections in the webserver binary that were later found vulnerable. We managed to fingerprinted Universities and Organizations that were vulnerable from the internet. BlackHat uses Ruckus Wireless for Wi-Fi solutions.

uk: вхід без авторизації

name: Don't Ruck Us Again: The Exploit Returns


Office Drama on macOS

uk: Комп'ютерні науки

description: On the Windows platform, macro-based Office attacks are well understood (and frankly are rather old news). However on macOS, though such attacks are growing in popularity and are quite en vogue, they have received far less attention from the research and security community. In this talk, we will begin by analyzing recent documents that contain macro-based attacks targeting Apple's desktop OS, highlighting the macOS-specific exploit code and payloads. Though sophisticated APT groups are behind several of these attacks, (luckily) these malicious documents and their payloads are constrained by recent application and OS-level security mechanisms. However, things could be far worse! To illustrate this claim, we'll detail the creation of a powerful exploit chain, that begins with CVE-2019-1457, leveraged a new sandbox escape and ended with a full bypass of Apple's stringent notarization requirements. Triggered by simply opening a malicious (macro-laced) Office document, no other user interaction was required in order to persistently infect even a fully-patched macOS Catalina system! To end the talk, we'll discuss various prevention and detection mechanisms that could thwart each stage of the exploit chain, as well as that aim to generically provide protection against future attacks!

uk: вхід без авторизації


Mainframe Surrogat Chains

uk: Комп'ютерні науки

description: z/OS allows a user to submit a job as another user without a password with the surrogat class. However, z/OS systems often have hundreds of thousands of users and have been running for decades. This means that it is very likely that from a low priv user there is a surrogat chain that will give you special (z/OS' root). RACF (z/OS' Security), does not allow users to view the security of resources to which they do not have access. This means that manually enumerating a chain required you to submit a reverse shell each time you wanted to move up the chain. This will take a long time with 200k users. Gator (my tool), submits a batch job that will call a REXX program which will output the user's privs and the current surrogat chain of that user. It will then list all of that user’s surrogat privs, and call the same batch job as before, but running as those users. Gator also provides a macro that will generate a CATSO (similar to a meterpreter shell), for any of the users in the surrogat chain. Gator can also be exported to a GraphVis python program, which will display the users information and chain as a network of nodes.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Domain fronting, the technique of circumventing internet censorship and monitoring by obfuscating the domain of an HTTPS connection was killed by major cloud providers in April of 2018. However, with the arrival of TLS 1.3, new technologies enable a new kind of domain fronting. This time, network monitoring and internet censorship tools are able to be fooled on multiple levels. This talk will give an overview of what domain fronting is, how it used to work, how TLS 1.3 enables a new form of domain fronting, and what it looks like to network monitoring. You can circumvent censorship and monitoring today without modifying your tools using an open source TCP and UDP pluggable transport tool that will be released alongside this talk.

uk: вхід без авторизації

name: Domain Fronting is Dead, Long Live Domain Fronting: Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise


uk: Комп'ютерні науки

description: Google Cloud’s security model in many ways is quite different from AWS. Spark jobs, Cloud Functions, Jupyter Notebooks, and more default to having administrative capabilities over cloud API's. Instead of defaulting to no capabilities, permissions are granted to default identities. One default permission these identities have is called actAs, which allows a service by default to assume the identity of every service account in its project; many of which typically have role bindings into other projects and across an organization's resources. This means by default many API's and identities can compromise large swaths of an organization by moving laterally by impersonating or gaining access to other identities. This can all be done without dropping a single implant on a machine. In this talk we'll demonstrate several techniques to perform identity compromise via the ActAs permission, privilege escalation, lateral movement, and widespread project compromise in Google Cloud. As well as release tools for exploitation. Next we'll show what detection capabilities are possible in the Google Cloud ecosystem, by showing Stackdriver logs that correspond with our exploitation techniques, and showing limitations in what's available. We'll also release tools and queries that can be used for detection . As well as insight to how we have attempted to tackle this problem at scale. Lastly we'll go over remediation efforts you can take as a Google Cloud customer, and show how difficult it can be to secure yourself against these attacks. We will release tools that can be used to harden your organization, and walk through user stories and anecdotes of what this process looks at scale within our organization.

uk: вхід без авторизації

name: Lateral Movement & Privilege Escalation in GCP


uk: Комп'ютерні науки

description: Due to the well-known vulnerabilities in traditional authentication methods through users, passwords and tokens; biometric systems began to be widely implemented in millions of devices with the aim of having a more practical authentication system for users and -supposedly- more robust in terms of security. Security researchers were not far behind and started to analyze the security of these biometric controls. In recent years, different techniques have been presented to bypass the authentication of, for example, the smartphones that began to implement these systems. What is new in this talk? avoiding focusing on a particular device, we have gone deeper studying the operation of the sensors implemented in different biometric systems (Optical, Capacitive, Ultrasonic, Facial, etc.) and consequently, we discovered new techniques to bypass them. Through this talk, we will show how to fool biometric sensors by the enhanced grease attacks and, even better, the techniques to succeed at bypassing these controls using 3D printing.

uk: вхід без авторизації

name: Bypassing Biometric Systems with 3D Printing


uk: Комп'ютерні науки

description: Apache Spark is one of the major players if not the leader when it comes to distributed computing and processing. Want to use machine learning to build models and uncover fraud, make predictions, estimate future sales or calculate revenue ? Whip out a 200 nodes cluster on Spark and you are good to go. This talk will show you how to get a shell on each one of these nodes! We are talking about systems that, by design, have access to almost every datastore in the company (S3, Cassandra, BigQuery, MySQL, Redshift, etc.). This is game over for most companies. I will also release a tool that will help pentesters pwn Spark clusters, execute code and even bypass authentication (CVE-2020-9480).

uk: вхід без авторизації

name: Only Takes a Spark: Popping a Shell on 1000 Nodes


uk: Комп'ютерні науки

uk: вхід без авторизації

name: LCA and the Service Industry – an Introduction

name: Eidgenössische Technische Hochschule Zürich (ETH Zürich)

addressCountry: CH

addressLocality: Zurich

addressRegion: Zurich


de: Geowissenschaften (ohne Geographie)

uk: Науки про Землю(крім географії)

en: Geosciences (excl. Geography)

uk: Математика, природничі науки

description: Large datasets e.g. large rasters or vectors can not be easily processed in R, mainly because of the RAM and storage limitations. In addition, within a High Performance Computing environment we are interested in running operations efficiently in parallel (e.g. using snowfall, future or similar packages), so that the total computing time can be minimized. Within the landmap package several functions are now available to tile large rasters and then run processing by applying custom based function per tile in parallel. This is at the order of magnitude more complex than running functions on the complete object, hence in a step-by-step tutorial I will try to explain how to make your own custom functions and combine R, GDAL, SAGA GIS and QGIS to run processing and eventually also Cloud-Optimized GeoTIFFs to share large datasets.

uk: вхід без авторизації

name: Step-by-step tutorial to optimization of geocomputing (tiling and parallelization) with R


uk: Комп'ютерні науки

description: Every year the Blue Team Village hosts OpenSOC. A unique defense CTF meant to teach and test practical incident response skills in an environment that's as close to "the real thing" as it gets. This year BTV wanted to do more. We know that some Blue Teamers might be unfamiliar with some of the tools used by OpenSOC. And we didn't want that to keep anyone from playing this incredible defense simulation. So this year we are dedicating all day Thursday to demo the various OpenSOC tools, before OpenSOC starts on Friday. These are tools like Graylog, Moloch, Zeek, Osquery, and others that Blue Teamers rely on every day to defend their networks against attackers. That means that after you LEARN the tools, you can PLAY the OpenSOC CTF, and then take that knowledge back to your own Blue Team to DO the work of defending your network.

uk: вхід без авторизації

name: Blue Team Village - Moloch: An Introduction Into OPENSOC CTF TOOLS


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Blue Team Village - Suricata: OPENSOC CTF Tool Demo


uk: Комп'ютерні науки

description: Every year the Blue Team Village hosts OpenSOC. A unique defense CTF meant to teach and test practical incident response skills in an environment that's as c...

uk: вхід без авторизації

name: Blue Team Village -Thinkst Canary Breach Detection: Canary and Canary tokens


uk: Комп'ютерні науки

description: On 27 June 2017, a piece of malware raced across the globe and took out many organisations including some that were similar to the one I was employed at. But we were safe and, in fact, not worried at all. All thanks to clever use of spreadsheets. In this talk, given entirely within Excel (yes, really) I go through the methods used to protect the organisation from this malware. If a talk given entirely in Excel sounds boring - you haven't seen this talk.

uk: вхід без авторизації

name: Blue Team Village - Fighting a Virus with a Spreadsheet


uk: Комп'ютерні науки

description: Cyber threat intelligence, in the past, has primarily focused on extracting, preparing, and analyzing indicators of compromise for digital forensics and incident response, the security operations center, and other teams. This talk proposes that cyber threat intelligence analysts extract indicators of emulation and include them in their threat reports for red team operations, adversary emulation, and purple team exercises. Learn how to extract Indicators of Emulation in Windows-based malware for high-value adversary emulation and purple team exercises based upon org specific data. Cyber threat intelligence plays a pivotal role in collecting and analyzing data to produce intelligence for an organization. Most of the cyber threat intelligence reports include indicators of compromise that various teams, such as incident response, hunt, and security operations, consume; however, there is limited intelligence in most threat reports geared towards adversary emulation. As cyber threat intel teams mature through using their internal attack data to produce intelligence, it becomes necessary to determine how to build out existing capabilities and provide additional value to other teams in the organization. Cyber threat intelligence analysts can contribute to adversary emulation and purple team exercises through extracting indicators of emulation to include in their threat intelligence reports for a realistic emulation of the adversary.

uk: вхід без авторизації

name: Blue Team Village - Indicators Of Emulation


uk: Комп'ютерні науки

description: This presentation will cover research which explores the methods in which all levels of attackers can work with exploiting the UEFI memory space as well as methods for monitoring & enumerating this data haven and the associated access difficulties. I will also demonstrate some scripting and Python code that leverages Windows hosted elements to both exploit, enumerate and monitor this safe space for everyone to play with. The exploitaiton of UEFI memory has previously only been thought of as something that is used for rootkits or advanced/targeted offensive operations. However, offensive actors and researchers have shown that they are willing to exploit this area with increasing ease. This presentation goes one step further and highlights the extremely basic level of computer knowledge needed to exploit this in current Windows OS, one-click and copy-paste scripts being able to generate the same results. However, the presentation also highlights solutions to monitor/access/analyze issues for this reclusive data set which allows active threats to be scrutinized and detection & preventative methods developed for both local and remote security solutions.

uk: вхід без авторизації

name: Blue Team Village - OuterHaven: UEFI Memory Space Waiting To Be Misused


uk: Комп'ютерні науки

description: DDR is an IDA plugin that instruments binaries using the DynamoRIO framework. In this presentation we will show you best practices how to reverse engineer malware with DDR. The talk will discuss the internals of DDR and show you by demonstration, the advantages of the tool. The DDR plugin can easily resolve the majority of dynamic values for registers and memory locations which are usually missed in a static analysis. It can help to find jump locations such as “call eax” or interesting strings such as “PE” which are decoded at runtime. The tool can be used to dump interesting buffers, and gives the opportunity to patch the binary at runtime to bypass anti-analysis techniques. In this presentation we will show you best practices for working with this tool, and the many ways in which it can facilitate malware analysis.

uk: вхід без авторизації

name: Blue Team Village - Reversing with Dynamic Data Resolver (DDR): Best Practice


Blue Team Village - Intro

uk: Комп'ютерні науки

description: Intro

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In the summer of 2019, I attended DEFCON for the first time and spent my days lingering around the Blue Team Village. Two weeks after I returned, our largest client was breached. A malicious actor remotely installed keyloggers on over a hundred computers. After a marathon of logs and OSINT, I traced the bad guy to his house. I offered a dossier with everything I’d found to the local Cyber Crime unit, leading to a full confession and finally, the release of the suspect for circumstances I’m not authorized to know. This talk discusses an internal breach of a non-profit organization. A delicate mix of politics, technical challenge and pressure, this event fundamentally shifted my career. A strange log file triggered a closer look at some servers. Within minutes, we had realized a massive breach had taken place. We found a keylogger installed on over a hundred computers. After a little digging, we found an unknown username referenced in a handful of Teamviewer connection logs. Teamviewer was uninterested in helping us without an international warrant of some kind. Through a day of parsing log files (no, we don’t have SIEM, IDS or IPS at this client), OSINT and the confidence I’d gained from finding a tribe at the BTV, I was able to identify the person responsible and gain insight into a real-world breach. A search warrant was executed, devices were nabbed for forensics and the detective secured a full confession. I was told there was ‘No Question', this was the person responsible, a client from the very organization that had been hit. Some time later, after some political meetings between the parties involved, it was determined that a charge would not be levied against the malicious actor for reasons I have yet to be told. The organization is still actively under attack via weekly spear-phishing and whaling. After six weeks, the organization allowed the confirmed suspect back into the fold, accessing programs within the umbrella of the agency and within reach of the very systems he used to gain his foothold. This is a vital topic to Blue Teamers. The real-world implications of a breach aren’t clear or fair and it’s all up to you.

uk: вхід без авторизації

name: Blue Team Village - No Question: Teamviewer, Police and Consequence


uk: Комп'ютерні науки

description: Our panel of experts will discuss lessons learned from their experiences on the front lines of incident response. What happens during a breach? What are common mistakes victims make? What are key steps you can take to prepare for the worst? How can you best secure your organization today?

uk: вхід без авторизації

name: Blue Team Village - Incident Response Panel


Blue Team Village - 0365 Squatting

uk: Комп'ютерні науки

description: 0365 Squatting is a python tool created to identify that domains before the attack start. The tool can create a list of typo squatted domains based on the domain provided by the user and check all the domains against O365 infrastructure, (these domains will not appear on a DNS request). At the same time, this tool can also be used by red teams and bug hunters, one of the classic attacks is the domain takeover based on the tool findings.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Blue Team Village - Kibana: OPENSOC CTF Tool Demo


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Blue Team Village - Graylog: OPENSOC CTF Tool Demo


uk: Комп'ютерні науки

description: Automated adversary simulation is often perceived as a hard, dangerous and complicated program to implement and run. Fear no longer, our methodology and tooling will let you test and measure your defenses throughout your production environment to test not only your detection rule’s resilience but the whole event pipeline as well as your team’s response procedures. In this talk, we’ll share with the audience the open source tools we built and the methodology we use that will allow them to hit the ground running at nearly no cost.

uk: вхід без авторизації

name: Blue Team Village - Purple On My Mind: Setting up a Cost Effective Automated Adversary Simulation Program


uk: Комп'ютерні науки

description: Since the advancement of security features released in PowerShell version 5, Red Team folks are forced to not use PowerShell to have successful and undetectable engagements. Some of them even push the boundary and created their own Not-PowerShell tools and released it to the public. As a Blue Teamer, this means we need to reinforce our perimeter against these tools. This talk will uncovers some of the popular Not-PowerShell tools followed by how the blue teams can still spot these tools and build detection on it. This talk will look into several not-powershell tools and craft several detection tactics based on their mechanism. We will utilize common logging tools, Sysmon and Windows Logs (Integrated to SIEM). We will start with Introduction and will quickly go through the common mechanism used by the not-powershell tools Tools we are going to look at are: - InvisiShell - NoPowerShell - PowerShdll - PowerLessShell - And some other tools with similar mechanism After getting familiar with the mechanisms, we will put our blue hat back and see what artifacts left by these tools and build reliable detection for each mechanisms leaving small room for false positives. At the end of the day, the blue team will be awarded with some queries (also known as rules or use cases) that they can use and deploy at their own SIEM solution.

uk: вхід без авторизації

name: Blue Team Village - Detecting The Not PowerShell Gang


uk: Комп'ютерні науки

description: Learn. Play. Do We then demonstrate some of the major features that you can use to rapidly investigate, triage and contain adversaries on your network. Every year the Blue Team Village hosts OpenSOC. A unique defense CTF meant to teach and test practical incident response skills in an environment that's as close to "the real thing" as it gets. This year BTV wanted to do more. We know that some Blue Teamers might be unfamiliar with some of the tools used by OpenSOC. And we didn't want that to keep anyone from playing this incredible defense simulation. So this year we are dedicating all day Thursday to demo the various OpenSOC tools, before OpenSOC starts on Friday. These are tools like Graylog, Moloch, Zeek, Osquery, and others that Blue Teamers rely on every day to defend their networks against attackers. That means that after you LEARN the tools, you can PLAY the OpenSOC CTF, and then take that knowledge back to your own Blue Team to DO the work of defending your network.

uk: вхід без авторизації

name: Blue Team Village - Velociraptor: OPENSOC CTF Tool Demo