Black Hat USA 2009 Briefings & Training has ended

Create Your Own Event

Black Hat USA 2009 Briefings & Training

8:00am PDT

Breakfast

9:00am PDT

Keynote Augustus Ballroom

10:00am PDT

Dino Dai Zovi: Macsploitation with Metasploit Florentine 1-2-3-4 John McDonald & Chris Valasek: Practical Windows Heap Exploitation Augustus Ballroom 5-6 FX: Router Exploitation Roman Ballroom Rod Beckstrom: Beckstrom's Law Milano Ballroom 1-2-3-4 Wolfgang Kandek: The Laws of Vulnerabilities 2.0 Pompeiian Ballroom Billy Hoffman & Matt Wood: Veiled - A Browser Based Darknet Milano Ballroom 5-6-7-8 Peter Kleissner: Stoned Bootkit Augustus Ballroom 1-2 Michael Tracy, Chris Rohlf, & Eric Monti: Ruby for Pentesters Augustus Ballroom 3-4

10:20am PDT

Mike Kershaw: Kismet and MSF Florentine 1-2-3-4

10:40am PDT

Chris Gates: Breaking the 'Unbreakable' Oracle with Metasploit Florentine 1-2-3-4

11:00am PDT

11:15am PDT

Nathan Hamiel & Shawn Moyer: Weaponizing the Web Augustus Ballroom 5-6 Aaron LeMasters & Michael Murphy: Rapid Enterprise Triaging Roman Ballroom Dmitri Alperovitch: Fighting Russian Cybercrime Mobsters Milano Ballroom 1-2-3-4 Peter Silberman & Steve Davis: Metasploit Autopsy - Reconstructing the Crime Scene Florentine 1-2-3-4 Bob West: CSO Panel - Black Hat Strategy Meeting Pompeiian Ballroom Andrea Barisani & Daniele Bianco: Sniff keystrokes with Lasers / Voltmeters Milano Ballroom 5-6-7-8 Dino Dai Zovi: Advanced Mac OS X Rootkits Augustus Ballroom 1-2 Michael Eddington: Demystifying Fuzzers Augustus Ballroom 3-4

12:30pm PDT

Lunch Forum Ballroom

1:45pm PDT

Moxie Marlinspike: More Tricks for Defeating SSL Augustus Ballroom 5-6 Graeme Neilson: Netscreen of the Dead Roman Ballroom Tiffany Rad & James Arien: Your Mind - Legal Status, Rights and Securing Yourself Milano Ballroom 1-2-3-4 Egypt: Using Guided Missiles in Drive-Bys - Automatic Browser Fingerprinting Florentine 1-2-3-4 Eli O : Analyzing Security Research in the Media Pompeiian Ballroom Nitesh Dhanjani: Psychotronica Milano Ballroom 5-6-7-8 Erez Metula: Managed Code Rootkits Augustus Ballroom 1-2 Eduardo Vela Nava & David Lindsay: Our Favorite XSS Filters and How to Attack Them Augustus Ballroom 3-4

3:15pm PDT

I)ruid: MSF & Telephony Florentine 1-2-3-4 Mark Dowd, Ryan Smith & David Dewey: The Language of Trust Augustus Ballroom 5-6 Dan Kaminsky: Something to do with Network Security? Roman Ballroom Cormac Herley: Economics and the Underground Economy Milano Ballroom 5-6-7-8 Amit Yoran: DC Panel - Update from Washington Pompeiian Ballroom Steve Topletz, Jonathan Logan & Kyle Williams: Global Spying Milano Ballroom 5-6-7-8 Jeff Williams: There's a Fox in the Henhouse Augustus Ballroom 1-2 Stefan Esser: State of the Art Post Exploitation in Hardened PHP Environments Augustus Ballroom 3-4

3:50pm PDT

Val Smith, Colin Ames & David Kerb: MetaPhish pt. 1 Florentine 1-2-3-4

4:30pm PDT

4:45pm PDT

Thomas Ptacek, David Goldsmith & Jeremy Rauch: Hacking Capitalism '09 Augustus Ballroom 5-6 Andrew Fried, Paul Vixie & Christopher Lee: Internet Special Ops Roman Ballroom Jennifer Granick: Computer Crime Year in Review Milano Ballroom 1-2-3-4 Val Smith, Colin Ames & David Kerb: MetaPhish pt. 2 Florentine 1-2-3-4 Rich Mogul: VC Panel - Security Business Strategies During a Recession Pompeiian Ballroom Alessandro Acquisti: I just found 10 Million SSNs Milano Ballroom 5-6-7-8 Alexander Tereshkin & Rafal Wojtczuk: Introducing Ring -3 Rootkits Augustus Ballroom 1-2 Riley Hassell: Exploiting Rich Content Augustus Ballroom 3-4

6:00pm PDT

Gala Reception Johnny Long: Me to We Florentine Ballroom Pwnie Awards Roman Ballroom

8:00am PDT

Breakfast

8:50am PDT

Keynote 2 Augustus Ballroom

10:00am PDT

Alfredo Ortega: Deactivate the Rootkit Roman Ballroom Ales Stamos, Andrew Becherer & Nathan Wilcox: Cloud Computing Models Augustus Ballroom 3-4 Rafal Wojtczuk & Alexander Tereshkin: Attacking Intel® Bios Milano Ballroom 5-6-7-8 Zane Lackey & Luis Miras: Attacking SMS Milano Ballroom 1-2-3-4 Hacker Court Pompeiian Ballroom Datagram: Lockpicking Forensics Augustus Ballroom 5-6 Jeongwook Oh: Fight Against 1-Day Exploits Augustus Ballroom 1-2

10:30am PDT

Kevin Stadmeyer: Worst of the Best of the Best Roman Ballroom

11:00am PDT

11:15am PDT

Daniel Raygoza: Automated Malware Similarity Analysis Roman Ballroom Matt Conover: SADE: Injecting agents in to VM guest OS Augustus Ballroom 3-4 Travis Goodspeed: A 16-bit Rootkit and Second Generation Zigbee Chips Milano Ballroom 5-6-7-8 Charlie Miller & Collin Mulliner: Fuzzing the Phone in your Phone Milano Ballroom 1-2-3-4 Hacker Court (continued) Pompeiian Ballroom Jeremiah Grossman & Trey Ford: Mo' Money Mo' Problems Augustus Ballroom 5-6 Nick Harbour: Win at Reversing Augustus Ballroom 1-2

11:40am PDT

Chris Weber: Unraveling Unicode Roman Ballroom

12:30pm PDT

Lunch

1:45pm PDT

Bryan Sullivan: Defensive Rewriting Roman Ballroom Haroon Meer: Clobbering the Cloud! Augustus Ballroom 3-4 Joe Grand, Jacob Appelbaum & Chris Tarnovsky: 'Smart' Parking Meter Implementations, Globalism, and You Milano Ballroom 5-6-7-8 Kevin Mahaffey, Anthony Lineberry & John Hering: Is Your Phone Pwned? Milano Ballroom 1-2-3-4 DHS Roundtable Pompeiian Ballroom Hristo Bojinov, Elie Bursztein & Dan Boneh: Embedded Management Interfaces Augustus Ballroom 5-6 Danny Quist & Lorie Liebrock: Reverse Engineering by Crayon Augustus Ballroom 1-2

2:10pm PDT

Rachel Engel: Gizmo Roman Ballroom

2:45pm PDT

Tony Flick: Hacking the Smart Grid Roman Ballroom

3:15pm PDT

Marc Bevand: MD5 Chosen Roman Ballroom Kostya Kortchinsky: Cloudburst - Hacking 3D and Breaking out of VMware Augustus Ballroom 3-4 Chris Tarnovsky: What the Hell is In there? Milano Ballroom 5-6-7-8 Jesse Burns: Exploratory Android Surgery Milano Ballroom 1-2-3-4 Meet the Feds: Feds vs. Ex-Feds Pompeiian Ballroom Alexander Sotirov & Mike Zusman: Breaking the Security Myths of Extended Validation SSL Certificates Augustus Ballroom 5-6 K. Chen: Reversing and Exploiting an Apple® Firmware Update Augustus Ballroom 1-2

3:40pm PDT

Steve Ocepek: Long-Life Sessions Roman Ballroom

4:05pm PDT

Peter Guerra: How Economics and Information Security Affects Cyber Crime Roman Ballroom

4:30pm PDT

Ice Cream Sundae Social

4:45pm PDT

Michael Brooks: BitTorrent hacks Roman Ballroom Bruce Schneier: Reconceptualizing Security Augustus Ballroom 3-4 Mike Davis: Recoverable Advanced Metering Infrastructure Milano Ballroom 5-6-7-8 Vincenzo Iozzo & Charlie Miller: Post Exploitation Bliss - Loading Meterpreter on a Factory iPhone Milano Ballroom 1-2-3-4 A Black Hat Vulnerability Risk Assessment Pompeiian Ballroom Bill Blunden: Anti-Forensics: The Rootkit Connection Augustus Ballroom 5-6 Mario Vuksan: Fast & Furious Reverse Engineering with TitanEngine Augustus Ballroom 1-2

5:10pm PDT

Mikko Hypponen: The Conficker Mystery Roman Ballroom

5:35pm PDT

Muhaimin Dzulfakar: Advanced MySQL Exploitation Roman Ballroom