Black Hat USA 2010 Conference Videos

The Black Hat Briefings are a series of highly technical information security conferences that bring together thought leaders from all facets of the infosec world – from the corporate and government sectors to academic and even underground researchers. The environment is strictly vendor neutral and focused on the sharing of practical insights and timely, actionable knowledge. Black Hat remains the best and biggest event of its kind, unique in its ability to define tomorrows information security landscape.

In addition to the large number of short, topical presentations in the Briefings, Black Hat also provides hands on, high intensity, multi day Trainings. The Training sessions are provided by some of the most respected experts in the world and many also provide formal certifications to qualifying attendees. Arrangements can also be made to bring Black Hats trainers to your location for private and customized training.

Black Hats decade of leadership attracts the most prestigious names from the full spectrum of security thinkers, and ensures that the conference stays on the leading edge of new security trends as they emerge. Our commitment to delegate feedback also helps keep our presentations aligned to the needs and desires of our delegates.

From its inception in 1997, Black Hat has grown from a single annual conference in Las Vegas to a global conference series with annual events in Abu Dhabi, Barcelona, Las Vegas and Washington DC. It has also become a premiere venue for elite security researchers and the best security trainers to find their audience.

Table of Contents

Welcome & Introduction to Black Hat USA 2010
Keynote Speaker
State of SSL on the Internet: 2010 Survey, Results and Conclusions
Becoming the Six Million Dollar Man
Defenseless in Depth
Need a Hug? Im Secure
Lord of the Bing: Taking Back Search Engine Hacking from Google and Bing
Industrial Bug Mining Extracting, Grading and Enriching the Ore of Exploits
Virtual Forensics
Network Stream Debugging with Mallory
JavaSnoop: How to Hack Anything Written in Java
Exploiting the Forest with Trees
How to Hack Millions of Routers
HTTPS Can Byte Me
Blitzableiter The Release
Hacking Browsers DOM Exploiting Ajax and RIA
Bad Memories
CLOUDINOMICON: Idempotent Infrastructure, Survivable Systems & Bringing Sexy Back to Information Centricity
Secure Use of Cloud Storage
Virtually Pwned: Pentesting Virtualization
Virt ICE: Next Generation Debugger for Malware Analysis
dirtbox: A Highly Scalable x86/Windows Emulator
Drivespoit: Circumventing Automated and Manual Detection of Browser Exploits
Balancing the Pwn Trade Deficit
Social Networking Special Ops: Extending Data Visualization Tools for faster Pwnage
Finger Pointing for Fun, Profit and War?
Getting in Bed with Robin Sage
Optimizing the Security Researcher and CSO Relationship (Video Only)
The Future of DNS Security (Video Only)
One on One Interview (Video Only)
Security Innovation Network: Connecting Buyers, Builders, and the Research Community (Video Only)
Memory Corruption Attacks: The (Almost) Complete History
Theres a Party at Ring0 (and Youre Invited)
Return Oriented Exploitation
Understanding the Low Fragmentation Heap: From Allocation to Exploitation
Advanced AIX Heap Exploitation Methods
The Emperor Has No Clothes: Insecurities in Security Infrastructure
Electricity for Free? The Dirty Underbelly of SCADA and Smart Meters
SCADA and ICS for Security Experts: How to Avoid Cyberdouchery
Black Ops of Fundamental Defense: Web Edition
Wardriving the Smart Grid: Practical Approaches to Attacking Utility Packet Radios
Malware Freak Show 2010: The Client Side Boogaloo
Malware Attribution: Tracking Cyber Spies and Digital Criminals
mod_antimalware: A Novel Apache Module for Containing web based Malware Infections
BlindElephant: WebApp Fingerprinting and Vulnerability Inferencing
Mastering the Nmap Scripting Engine
Panel: CSI: TCP/IP
Panel: Policy, Privacy, Deterrence and Cyber War
Panel: Human Intel
Panel: Ex Fed Confessions
Base Jumping: Attacking GSM Base Station Systems and Mobile Phone Base Bands
More Bugs In More Places: Secure Development On Mobile Platforms
These Arent the Permissions Youre Looking For
Everybody Be Cool This is a Roppery!
App Attack: Surviving the Mobile Application Explosion
WPA Migration Mode: WEP is Back to Haunt You
Extreme Range RFID tracking
Burning Asgard What Happens When Loki Breaks Free
Exploiting Timing Attacks in Widespread Systems
PSUDP: A Passive Approach to Network Wide Covert Communication
Attacking Kerberos Deployments
Understanding the Windows SMB NTLM Weak Nonce Vulnerability
Adventures in Limited User Post Exploitation
Ushering in the Post GRC World: Applied Threat Modeling
Standing on the Shoulders of the Blue Monster: Hardening Windows Applications
New Threats to Privacy
Unauthorized Internet Wiretapping: Exploiting Lawful Intercept
The DMCA & ACTA vs. Academic & Professional Research: How Misuse of this Intellectual Property Legislation Chills Research, Disclosure and Innovation
Attacking Phone Privacy
Carmen Sandiego is On the Run!
Payload Already Inside: Data Re Use for ROP Exploits
Aleatory Persistent Threat
Hacking Java Clients
Harder, Better, Faster, Stronger: Semi Auto Vulnerability Research
SAP Backdoors: A Ghost at the Heart of Your Business
ExploitSpotting: Locating Vulnerabilities Out of Vendor Patches Automatically
Crash Analysis Using BitBlaze
Jackpotting Automated Teller Machines Redux
Blue Screen of the Death is Dead
Semiconductor Security Awareness, Today & Yesterday
pyREtic – Reversing Obfuscated Python Bytecode & Live Python Objects
Voyage of the Reverser: A Visual Study of Binary Species
TitanMist: Your First Step to Reversing Nirvana
NEPTUNE: Dissecting Web Based Malware via Browser and OS Instrumentation
Goodware Drugs for Malware: On The Fly Malware Analysis and Containment
Cloud Security Alliance Summit, Pt.1a
Cloud Security Alliance Summit, Pt.1b
Cloud Security Alliance Summit, Pt.2a (Video Only)
Cloud Security Alliance Summit, Pt.2b
Cloud Security Alliance Summit, Pt.2c
Cloud Security Alliance Summit, Pt.3a
Cloud Security Alliance Summit, Pt.3b
Hacker Court, Pt.1
Hacker Court, Pt.2
Breakout Session: Regional Collegiate Cyberdefense Competition
Your Career =Your Business
Things You Wanted To Know But Were Afraid To Ask About Managing Your Information Security Career
Responsible, Full, Half and Half, Medium Rare: Flavors of Disclosure (Video Only)
Microsoft Powershell Its Time to Own
Breaking Browsers: Hacking Auto Complete
You Will be Billed 90,000 for This Call
The Black Art of Binary Hijacking
Elevation of Privilege: The Easy way to Threat Model
ISC SIE Passive DNS vs. Apache Cassandra
Reverse Engineering with Hardware Debuggers
SprayPAL: How Capturing and Replaying Attack Traffic Can Save Your IDS
Hadoop Security Design? Just Add Kerberos? Really?
ISC DNSDB
USB HID, The Hacking Interface Design
Cache on Delivery
Security is Not a Four Letter Word
Utilizing Code Reuse/Return Oriented Programming in PHP Web Application Exploits
Constricting the Web: Offensive Python for Web Hackers
GWT Security: Dont Get Distracted By Bright Shiny Objects
How I Met Your Girlfriend
Deconstructing ColdFusion
Keeping the Good Stuff In: Confidential Information Firewalling with the CRM114 Spam Filter & Text Classifier
Hacking Oracle From Web Apps
Token Kidnappings Revenge
Hacking and Protecting Oracle Database Vault
Cryptographic Agility: Defending Against the Sneakers Scenario

For the presentations slides, some short videos and extra stuff check their website: http://www.blackhat.com/html/bh us 10/bh us 10 archives.html

Would you like to be a Author?