Black Hat USA Briefings

Black Hat USA Briefings

Black Hat USA Training

Black Hat USA Training

Black Hat USA Schedule

Black Hat USA Schedule

Black Hat USA Sponsors

Black Hat USA Sponsors

Black Hat USA Special Events

Black Hat USA Special Events

Black Hat USA Venue

Black Hat USA Venue

Schedule

Briefings | Wednesday July 25

0800

Breakfast

Sponsored By:

Sponsor Hall Hours: 0800 - 1930

0850

Welcome & Introduction to Black Hat USA 2012 by Jeff Moss

Augustus Ballroom

0900

Keynote by Shawn Henry: CHANGING THE SECURITY PARADIGM....TAKING BACK YOUR NETWORK AND BRINGING PAIN TO THE ADVERSARY

Augustus Ballroom

1000

Break

Track ROOM	Defining the Scope Augustus III + IV	Upper Layers Augustus I + II	Lower Layers Augustus V + VI	Mobile - Vincenzo Iozzo* Palace I	Defense - Shawn Moyer* Palace II	Breaking Things - Chris Rohlf* Palace III	Gnarly Problems Romans I - IV	Applied Workshop I Florentine	Applied Workshop II Pompeian
1015	Smashing the Future for Fun and Profit Jeff Moss & Bruce Schneier & Adam Shostack &Marcus Ranum & and Jennifer Granick	Smashing the Future for Fun and Profit Jeff Moss & Bruce Schneier & Adam Shostack &Marcus Ranum & and Jennifer Granick	Smashing the Future for Fun and Profit Jeff Moss & Bruce Schneier & Adam Shostack &Marcus Ranum & and Jennifer Granick	Advanced ARM Exploitation Stephen Ridley & Stephen Lawler	SexyDefense - Maximizing the home-field advantage Iftach Ian Amit	A Stitch in Time Saves Nine: A Case of Multiple Operating System Vulnerability Rafal Wojtczuk	File Disinfection Framework: Striking Back at Polymorphic Viruses Mario Vuksan & Tomislav Pericin	WORKSHOP: <GHZ or Bust: Black Hat Atlas	WORKSHOP: Advanced Chrome Extension- Leveraging API Powers for The Better Evil Kyle Osborn & Krzysztof Kotowicz

1115

Coffee Service

Sponsored By:

Track ROOM	Defining the Scope Augustus III + IV	Upper Layers Augustus I + II	Lower Layers Augustus V + VI	Mobile - Vincenzo Iozzo* Palace I	Defense - Shawn Moyer* Palace II	Breaking Things - Chris Rohlf* Palace III	Gnarly Problems Romans I - IV	Applied Workshop I Florentine	Applied Workshop II Pompeian
1145	BlackOps Dan Kaminsky	Google Native Client-Analysis of a Secure Browser Plugin Sandbox Chris Rohlf	How The Analysis of Electrical Current Consumption of Embedded Systems Could Lead to Code Reversing? Yann Allain & Julien Moinard	Scaling Up Baseband Attacks: More (Unexpected) Attack Surface Ralf-Philipp Weinmann	The Defense RESTs: Automation and APIs for Improving Security David Mortman	Exploiting The Jemalioc Memory Allocator: Owning Firefox's Heap Patroklos Argyroudis & Chariton Karamitas	Confessions of a WAF Developer: Protocol-Level Evasion of Web Application Firewalls Ivan Ristic	WORKSHOP: <GHZ or Bust: Black Hat con't Atlas	WORKSHOP: Advanced Chrome Extension- Leveraging API Powers for The Better Evil con't Kyle Osborn & Krzysztof Kotowicz

1245

Lunch

Sponsored By:

Track ROOM	Defining the Scope Augustus III + IV	Upper Layers Augustus I + II	Lower Layers Augustus V + VI	Mobile - Vincenzo Iozzo* Palace I	Defense - Shawn Moyer* Palace II	Breaking Things - Chris Rohlf* Palace III	Gnarly Problems Romans I - IV	Applied Workshop I Florentine	Applied Workshop II Pompeian
1415	CuteCats.exe and the Arab Spring Morgan Marquis-Boire The Last Gasp of the Industrial Air-Gap... Eireann Leverett STIX: The Structured Threat Information eXpression Sean Barnum	ModSecurity as Universal Cross-Platform Web Protection Tool Greg Wroblewski & Ryan Barnett HTExploit Bypassing Htaccess Restrictions Maximiliano Soler & Matias Katz Libinjection: A C library for SQLi Detection and Generation Through Lexical Analysis of Real World AttacksTurbo Nick Galbreath	Looking into the Eye of the Meter Don Weber	Don't Stand So Close To Me: An Analysis of the NFC Attack Surface Charlie Miller	Control-Alt-Hack(TM): White Hat Hacking for Fun and Profit (A Computer Security Card Game) Tadayoshi Kohno & Tamara Denning & Adam Shostack	The Info Leak Era on Software Exploitation Fermin J. Serna	Torturing OpenSSL Valeria Bertacco	WORKSHOP: Code Reviewing Web Application Framework Based Applications (Struts 2, Spring MVC, Ruby on Rails (Groovy on Grails), .NET MVC) Abraham Kang	WORKSHOP: Linux Interactive Exploit Development with GDB and PEDA Long Le

1515

Break

Track ROOM	Defining the Scope Augustus III + IV	Upper Layers Augustus I + II	Lower Layers Augustus V + VI	Mobile - Vincenzo Iozzo* Palace I	Defense - Shawn Moyer* Palace II	Breaking Things - Chris Rohlf* Palace III	Gnarly Problems Romans I - IV	Applied Workshop I Florentine	Applied Workshop II Pompeian
1530	Errata Hits Puberty: 13 Years of Chagrin Jericho	PRNG: Pwning Random Number Generators (in PHP applications) George Argyros & Aggelos Kiayias	Windows 8 Heap Intervals Chris Valasek & Tarjei Mandt	Probing Mobile Operator Networks Collin Mulliner	Intrusion Detection Along the Kill Chain: Why Your Detection System Sucks and What to do About It John Flynn	Are You My Type? Breaking.net Sandboxes Through Serialization James Forshaw	WebTracking For You Gregory Fleischer	WORKSHOP: Code Reviewing Web Application Framework Based Applications (Struts 2, Spring MVC, Ruby on Rails (Groovy on Grails), .NET MVC) con't Abraham Kang	WORKSHOP: Linux Interactive Exploit Development with GDB and PEDA con't Long Le

1630

Coffee Service

Sponsored By:

Track ROOM	Defining the Scope Augustus III + IV	Upper Layers Augustus I + II	Lower Layers Augustus V + VI	Mobile - Vincenzo Iozzo* Palace I	Defense - Shawn Moyer* Palace II	Breaking Things - Chris Rohlf* Palace III	Gnarly Problems Romans I - IV	Applied Workshop I Florentine	Applied Workshop II Pompeian
1700	The Myth of Twelve More Bytes: Security on the Post-Scarcity Internet Alex Stamos & Tom Ritter	Owning Bad Guys {and Mafia} with Javascript Botnets Chema Alonso	Ghost is in the Air(Traffic) Andrei Costin	Adventures in Bouncer Land Nicholas Percoco & Sean Schulte	Exploit Mitigation Improvements in Windows 8 Matt Miller & Ken Johnson	PinPadPwn Nils & Rafael Dominguez Vega	Here Be Backdoors: A Journey Into the Secrets of Industrial Firmware Ruben Santamarta	WORKSHOP: Code Reviewing Web Application Framework Based Applications (Struts 2, Spring MVC, Ruby on Rails (Groovy on Grails), .NET MVC) con't Abraham Kang	From the Iriscode to the Iris: A New Vulnerability of Iris Recognition Systems Javier Galbally

1800

Reception

Sponsored by our Diamond, Platinum and Gold level sponsors

* Denotes track chair