Raisuke Miyawaki

Japanese Language Slides Only

Shunichi Arai
Thinking Techie's Social Responsibility - Lessons Fom Winny Case

Japanese Language Slides Only

Chris Eagle
Attacking Obfuscated Code with IDA Pro

tool

Riley "Caezar" Eller
Capture the Flag Games: Measuring Skill with Hacking Contests

Gerhard Eschelbeck
The Laws of Vulnerabilities for Internal Networks

Joe Grand
Understanding Hardware Security

notes

David Litchfield
Oracle PL/SQL Injection

Johnny Long
You got that with GOOGLE?

Hisamichi Okamura
Cybercrime Treaty and Legal Environment of Japanese Computer Crime and Laws

Japanese Language Slides Only

Russ Rogers
The Keys to the Kingdom: Understanding Covert Channels of Communication

Daiji Sanai & Hidenobu Seki
Optimized Attacking for NTLM2 Session Response

Japanese Language Slides Only

Yuji Ukai
Environment Dependencies in Windows Exploitation

Charl van der Walt-Sensepost
When the Tables Turn

Paul Simmonds, Global Information Security Director (CISO), Jericho Forum/ICI Plc.
Deperimeterisation: This Decade's Security Challenge

Nitesh Dhanjani & Justin Clarke
Hacking Without Re-inventing the Wheel

Rakan El-Khalil
Information Hiding in Executable Binaries

Seth Fogie
Pocket PC Abuse

tools (.zip)

Sarah Gordon
Antivirus Security Software Tests

Cameron Hotchkies
Blind SQL Injection Automation Techniques

tools & references

Dan Kaminsky
The Black Ops of DNS

Brett Moore
Shoot the Messenger

Michael Shema
Web Application Session Strength

Ralf Spenneberg
IKE-Test

tool

Panel
The Black Hat Testimonies

Panel
Web Application Security Crossfire

Computer Forensics & Log Analysis

Peter Feaver & Kenneth Geers
Cyber Jihad and the Globalization of Warfare

Curtis Kret
Nobody’s Anonymous—Tracking Spam and Covert Channels

Kevin Mandia
The Evolution of Incident Response

Rebecca Mercuri, Ph.D & Bev Harris
Managing Election Data: The California Recall

K.K. Mookhey
Evasion and Detection of Web Application Attacks

Michael Raggo
Steganography, Steganalysis, & Cryptanalysis

Deep Knowledge

Tzi-cker Chiueh
Program Semantics-Aware Intrusion Detection

Chris Eagle
Attacking Obfuscated Code with IDA Pro

FX
Vulnerability Finding in Win32—A Comparison

Halvar Flake
Diff, Navigate, Audit

David Maynor
Trust No-one, Not Even Yourself OR The Weak Link Might Be Your Build Tools

Handouts

Handouts

tool

tool

Policy, Management, and the Law

Brad Bolin
Information Security Law Update

Gerhard Eschelbeck
The Laws of Vulnerabilities for Internal Networks

Jennifer Granick
Legal Liability and Security Incident Investigation

Panel
Hacker Court ’04: Pirates of the Potomac

Panel
Hacking with Executives

Privacy & Anonymity

Dr. Alessandro Acquisti
Privacy, Economics and Immediate Gratification

Roger Dingledine
Putting the P back in VPN

Adam Laurie & Martin Herfurt
BlueSnarfing The Risk From Digital Pickpockets

mgp

Johnny Long
You got that with GOOGLE?

paper + tool

Bruce Potter & Brian Wotring
Tracking Prey in the Cyberforest

tool

Len Sassaman
The Anonymity Toolkit

Patrick Chambet
Google Attacks

Patrick Chambet
Managing MSIE Security in Corporate Networks by Creating Custom Internet Zones

Himanshu Dwivedi
Insecure IP Storage Networks

James C. Foster
Managing Hackers

Sarah Gordon
Privacy: Do As I Say...Not as I Do

Chris Hurley
WorldWide WarDrive 4

Gregory S. Miles & Travis Schack
Introduction to the Global Security Syndicate

Robert Morris
The Future of History

Laurent Oudot
Digital Active Self Defense

Andrew Stevens
How Next Generation Application Proxies Protect Against The Latest Attacks & Intrusions

Jeff Waldron
Introduction to the Certification and Accreditation Process (C&A) Within the US Government

David Worth
Cryptographic Port-Knocking

Zero Day Attack

Thorsten Holz & Maximillian Dornseif
NoSEBrEaK - Defeating Honeynets

David Litchfield
All New Ø-Day

Saumil Udayan Shah
Defeating Automated Web Assessment Tools

Derek Soeder, Ryan Parmeh, Yuji Ukai
Advanced Return Address Discovery using Context-Aware Machine Code Emulation

Eugene Tsyrklevich
Attacking Host Intrusion Prevention Systems

Zero Day Defense

Phillip Hallam-Baker
Phishing— Committing Fraud in Public

Dominique Brezinski
Acting in Milliseconds-Why Defense Processes Need to Change

.zip of html

Jamie Butler & Greg Hoglund
VICE - Catch the Hookers!

tool

Sensepost
When the Tables Turn

Peter Silberman & Richard Johnson
A Comparison Buffer Overflow Prevention Implementations & Weaknesses

Stefano Zanero
Detecting 0-days Attacks With Learning Intrusion Detection Systems

Paul Simmonds, Global Information Security Director (CISO), Jericho Forum/ICI Plc.
De-Perimeterisation: Border Security Is Obsolete- The Security Challenge For This Decade

Jamie Butler
DKOM (Direct Kernel Object Manipulation)

Patrick Chambet & Eric Larcher
Security Patches Management On A Windows Infrastructure

Job de Haas
Reverse Engineering ARM Based Devices

resource files (.zip)

Luc Delpha & Maliha Rashid
Smartphone Security Issues

white paper

Eric Detoisien & Eyai Dotan
Old win32 Code For A Modern, Super-Stealth Trojan

demo (.zip)

Eli O
Security Within A Development Lifecycle

Gergely Erdelyi
Hide 'n' Seek? Anatomy of Stealth Malware

white paper

FX
Practical Win32 and UNICODE Exploitation

Nicolas Fischbach
Building an Early Warning System in a Service Provider Network

Joe Grand
Introduction to Embedded Security

Joe Grand
Introduction to Mobile Device Insecurity

the grugq
The Art of Defiling: Defeating Forensic Analysis on Unix File Systems

Seth Hardy
Pseudorandom Number Generation, Entropy Harvesting, and Provable Security in Linux

Larry Korba
Privacy Rights Management Using DRM: Is This A Good Idea?

David Litchfield
Oracle PL/SQL Injection

Russ Rogers
The Keys to the Kingdom – Understanding Covert Channels

SensePost
When the Tables Turn

Saumil Udayan Shah
HTTP Fingerprinting and Advanced Assessment Techniques

Eugene Tsyrklevich
Dynamic Detection and Prevention of Race Conditions in File Accesses

raceprot tool (.tgz)

Paul Wouters
Windows WaveSEC Deployment

Wavesec for Windows

Stefano Zanero
Detecting Ø-days Attacks With Learning Intrusion Detection Systems