Trainings July 30 - August 2 CISO
Summit August 2 Briefings August 3 Arsenal August 3 Sponsored Sessions August 3 Sponsored Workshops August 3 Briefings August 4 Arsenal August 4 Sponsored Sessions August 4 Sponsored Workshops August 4

Briefings | August 3

08:00

Breakfast
BROUGHT TO YOU BY BLACK HAT USA DIAMOND SPONSOR - Qualys

08:50

Welcome & Introduction to Black Hat USA 2016Jeff Moss Oceanside Ballroom 08:50 - 09:00
 

09:00

The Hidden Architecture of our Time: Why This Internet Worked, How We Could Lose It, and the Role Hackers PlayDan Kaminsky Oceanside Ballroom 09:00 - 10:00
 

10:00

Coffee Service
BROUGHT TO YOU BY BLACK HAT USA DIAMOND SPONSOR - Tenable Network Security

10:20

A Retrospective on the Use of Export CryptographyDavid Adrian South Seas GH 10:20 - 11:10
 
Abusing Bleeding Edge Web Standards for AppSec GloryBryant Zadegan & Ryan Lester Lagoon K 10:20 - 11:10
 
Augmenting Static Analysis Using Pintool: AblationPaul Mehta South Seas IJ 10:20 - 11:10
 
Beyond the MCSE: Active Directory for the Security ProfessionalSean Metcalf Mandalay Bay GH 10:20 - 11:10
 
Breaking Payment Points of Interaction (POI)Nir Valtman & Patrick Watson Mandalay Bay BCD 10:20 - 11:10
 
Can You Trust Me Now? An Exploration into the Mobile Threat LandscapeJosh Thomas South Seas CDF 10:20 - 11:10
 
Capturing 0day Exploits with PERFectly Placed Hardware TrapsCody Pierce & Matt Spisak & Kenneth Fitch Jasmine Ballroom 10:20 - 11:10
 
HTTP/2 & QUIC - Teaching Good Protocols To Do Bad ThingsCatherine (Kate) Pearce & Carl Vincent South Seas ABE 10:20 - 11:10
 
The Linux Kernel Hidden Inside Windows 10Alex Ionescu Mandalay Bay EF 10:20 - 11:10
 

11:10

Coffee Service
BROUGHT TO YOU BY BLACK HAT USA DIAMOND SPONSOR - LogRhythm

11:30

$hell on Earth: From Browser to System CompromiseMatt Molinyawe & Jasiel Spelman & Abdul-Aziz Hariri & Joshua Smith Mandalay Bay EF 11:30 - 12:20
 
A Journey from JNDI/LDAP Manipulation to Remote Code Execution Dream LandAlvaro Munoz & Oleksandr Mirosh Jasmine Ballroom 11:30 - 12:20
 
Applied Machine Learning for Data Exfil and Other Fun TopicsMatt Wolff & Brian Wallace & Xuan Zhao South Seas CDF 11:30 - 12:20
 
Exploiting Curiosity and Context: How to Make People Click on a Dangerous Link Despite Their Security AwarenessZinaida Benenson South Seas ABE 11:30 - 12:20
 
Hackproofing Oracle eBusiness SuiteDavid Litchfield Lagoon K 11:30 - 12:20
 
Measuring Adversary Costs to Exploit Commercial Software: The Government-Bootstrapped Non-Profit C.I.T.L.Mudge . & Sarah Zatko South Seas GH 11:30 - 12:20
 
Memory Forensics Using Virtual Machine Introspection for Cloud ComputingTobias Zillner Mandalay Bay BCD 11:30 - 11:55
 
Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLSSean Devlin & Hanno Böck & Aaron Zauner & Philipp Jovanovic South Seas IJ 11:30 - 12:20
 
Subverting Apple Graphics: Practical Approaches to Remotely Gaining RootLiang Chen & Qidan He & Marco Grassi & Yubin Fu Mandalay Bay GH 11:30 - 12:20
 

12:20

Lunch
BROUGHT TO YOU BY BLACK HAT USA DIAMOND SPONSOR - FireEye

13:50

Adaptive Kernel Live Patching: An Open Collaborative Effort to Ameliorate Android N-Day Root ExploitsYulong Zhang & Tao Wei Jasmine Ballroom 13:50 - 14:40
 
CANSPY: A Platform for Auditing CAN DevicesJonathan-Christofer Demay & Arnaud Lebrun South Seas CDF 13:50 - 14:40
 
Certificate Bypass: Hiding and Executing Malware from a Digitally Signed ExecutableTom Nipravsky South Seas IJ 13:50 - 14:15
 
Drone Attacks on Industrial Wireless: A New Front in Cyber SecurityJeff Melrose Lagoon K 13:50 - 14:40
 
GATTacking Bluetooth Smart Devices - Introducing a New BLE Proxy ToolSlawomir Jasek South Seas GH 13:50 - 14:15
 
HEIST: HTTP Encrypted Information can be Stolen Through TCP-WindowsTom Van Goethem & Mathy Vanhoef South Seas ABE 13:50 - 14:40
 
Secure Penetration Testing Operations: Demonstrated Weaknesses in Learning Material and ToolsWesley McGrew Mandalay Bay EF 13:50 - 14:40
 
Towards a Holistic Approach in Building Intelligence to Fight CrimewareDhia Mahjoub & Mykhailo Sakaly & Thomas Mathew Mandalay Bay BCD 13:50 - 14:40
 
Xenpwn: Breaking Paravirtualized DevicesFelix Wilhelm Mandalay Bay GH 13:50 - 14:40
 

14:40

Break

15:00

1000 Ways to Die in Mobile OAuthYuan Tian & Eric Chen & Shuo Chen & Yutong Pei & Robert Kotcher & Patrick Tague South Seas ABE 15:00 - 15:50
 
AMSI: How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does ItNikhil Mittal Mandalay Bay GH 15:00 - 15:50
 
An Insider's Guide to Cyber-Insurance and Security GuaranteesJeremiah Grossman Lagoon K 15:00 - 15:50
 
Does Dropping USB Drives in Parking Lots and Other Places Really Work?Elie Bursztein Mandalay Bay EF 15:00 - 15:50
 
I Came to Drop Bombs: Auditing the Compression Algorithm Weapon CacheCara Marie South Seas GH 15:00 - 15:25
 
Into The Core - In-Depth Exploration of Windows 10 IoT CorePaul Sabanal South Seas IJ 15:00 - 15:50
 
Intra-Process Memory Protection for Applications on ARM and x86: Leveraging the ELF ABISergey Bratus & Maxwell Koo & Julian Bangert Jasmine Ballroom 15:00 - 15:50
 
Pwning Your Java Messaging with Deserialization VulnerabilitiesMatthias Kaiser Mandalay Bay BCD 15:00 - 15:50
 
Recover a RSA Private Key from a TLS Session with Perfect Forward SecrecyMarco Ortisi South Seas CDF 15:00 - 15:50
 

15:50

Smoothie Social
BROUGHT TO YOU BY BLACK HAT USA Platinum Plus Sponsors

16:20

Access Keys Will Kill You Before You Kill the PasswordLoic Simon Mandalay Bay EF 16:20 - 16:45
 
Account Jumping, Post Infection Persistency & Lateral Movement in AWSDan Amiga & Dor Knafo Mandalay Bay GH 16:20 - 17:10
 
Breaking Kernel Address Space Layout Randomization (KASLR) with Intel TSXYeongjin Jang & Sangho Lee & Taesoo Kim South Seas IJ 16:20 - 17:10
 
Captain Hook: Pirating AVs to Bypass Exploit MitigationsUdi Yavo & Tomer Bitton Jasmine Ballroom 16:20 - 17:10
 
Crippling HTTPS with Unholy PACItzik Kotler & Amit Klein Mandalay Bay BCD 16:20 - 17:10
 
Design Approaches for Security AutomationPeleus Uhley Lagoon K 16:20 - 17:10
 
GreatFET: Making GoodFET Great AgainMichael Ossmann South Seas GH 16:20 - 17:10
 
Using EMET to Disable EMETAbdulellah Alsaheel & Raghav Pande South Seas ABE 16:20 - 17:10
 
Viral Video - Exploiting SSRF in Video ConvertersNikolay Ermishkin & Maxim Andreev South Seas CDF 16:20 - 17:10
 

17:10

Networking Break
BROUGHT TO YOU BY BLACK HAT USA Platinum Sponsors

17:30

AVLeak: Fingerprinting Antivirus Emulators for Advanced Malware EvasionAlexei Bulazel South Seas GH 17:30 - 18:00
 
Brute-Forcing Lockdown Harddrive PIN CodesColin O'Flynn Jasmine Ballroom 17:30 - 18:00
 
Building a Product Security Incident Response Team: Learnings from the HivemindKymberlee Price Mandalay Bay BCD 17:30 - 18:00
 
Cyber War in Perspective: Analysis from the Crisis in UkraineKenneth Geers South Seas ABE 17:30 - 18:00
 
Security Through Design - Making Security Better by Designing for PeopleJelle Niemantsverdriet Mandalay Bay GH 17:30 - 18:00
 
Side-Channel Attacks on Everyday ApplicationsTaylor Hornby South Seas CDF 17:30 - 18:00
 
The Risk from Power Lines: How to Sniff the G3 and Prime Data and Detect the Interfere AttackLei Ji & Yunding Jian South Seas IJ 17:30 - 18:00
 
Unleash the Infection Monkey: A Modern Alternative to Pen-TestsOfri Ziv Mandalay Bay EF 17:30 - 18:00
 
Watching Commodity Malware Get Sold to a Targeted ActorIsrael Barak Lagoon K 17:30 - 18:00
 

17:30

Business Hall Reception
BROUGHT TO YOU BY BLACK HAT USA Diamond and Platinum Plus Sponsors