Black Hat has ended

Create Your Own Event

Black Hat

8:00am PDT

Breakfast Break

8:45am PDT

Welcome & Introduction Black Hat USA 2010 Opening Ceremonies

9:00am PDT

Keynote Day - 1 Opening Ceremonies

9:45am PDT

10:00am PDT

CSA: Cloudersize: A cardio, strength & conditioning program for a firmer, more toned *aaS Day 1 - Special Events ExploitSpotting: Locating Vulnerabilities Out Of Vendor Patches Automatically Day 1 - Reverse Engineering Base Jumping: Attacking GSM Base Station Systems and mobile phone Base Bands Day 1 - Mobile Malware Freak Show 2010: The Client-Side Boogaloo Day 1 - Malware +Fingerprinting The Chinese Cyber Army: An Archaeological Study from 2001 to 2010 Day 1 - Cyber War & Peace WPA Migration Mode: WEP is back to haunt you... Day 1 - Network Optimizing the Security Researcher and CSO Relationship Day 1 - Executive Briefings Payload Already Inside: Data Re-Use for ROP Exploits Day 1 - Programmatic Attacking Kereberos Deployments Day 1 - OS Wars Industrial Bug Mining - Extracting, Grading and Enriching the Ore of Exploits Day 1 - Bug Collecting The Emperor Has No Clothes: Insecurities in Security Infrastructure Day 1 - Infrastructure

10:30am PDT

CSA: Cloudy with a chance of miss-information Day 1 - Special Events

11:00am PDT

Coffee Service Break CSA: Application Security FIndings Day 1 - Special Events

11:15am PDT

Crash Analysis using BitBlaze Day 1 - Reverse Engineering More Bugs In More Places: Secure Development On Moble Platforms Day 1 - Mobile Malware Attribution: Tracking Cyber Spies and Digital Criminals Day 1 - Malware +Fingerprinting Balancing the Pwn Trade Deficit Day 1 - Cyber War & Peace Extreme-range RFID tracking Day 1 - Network Systemic DNS Vulnerabilities and Risk Management: A Discussion with the Experts Day 1 - Executive Briefings Aleatory Persistent Threat Day 1 - Programmatic Understanding the Windows SMB NTLM Weak Nonce vulnerability Day 1 - OS Wars Virtual Forensics Day 1 - Bug Collecting Electricity for Free? The Dirty Underbelly of SCADA and Smart Meters Day 1 - Infrastructure

11:30am PDT

CSA: Security and compliance in the Amazon cloud Day 1 - Special Events

12:00pm PDT

CSA: Hacking the Hypervisor 2010 Day 1 - Special Events

12:30pm PDT

1:30pm PDT

CSA: The Cloud is made of Software Day 1 - Special Events

1:45pm PDT

Jackpotting Automated Teller Machines Redux Day 1 - Reverse Engineering These Aren't the Permissions You're Looking For Day 1 - Mobile mod_antimalware: a novel apache module for containing web-based malware infections Day 1 - Malware +Fingerprinting Social Networking Special Ops: Extending data visualization tools for faster Pwnage Day 1 - Cyber War & Peace Burning Asgard - What happens when Loki breaks free Day 1 - Network Cyber war... Are we at war? And if we are, how should we fight it? Day 1 - Executive Briefings Hacking Java Clients Day 1 - Programmatic Adventures in Limited User Post Exploitation Day 1 - OS Wars Network Stream Debugging with Mallory Day 1 - Bug Collecting SCADA and ICS for Security Experts: How to avoid Cyberdouchery Day 1 - Infrastructure

2:00pm PDT

CSA: The "Unpanel Royal" : The Yin and Yang of Cloud Abuse Day 1 - Special Events

3:00pm PDT

3:15pm PDT

BlindElephant: WebApp Fingerprinting and Vulnerability Inferencing Day 1 - Malware +Fingerprinting Blue Screen Of the Death is dead Day 1 - Reverse Engineering Everybody be cool this is a roppery! Day 1 - Mobile Finger Pointing for Fun, Profit and War? Day 1 - Cyber War & Peace Exploiting timing attacks in widespread systems Day 1 - Network One on One Interview with General (Ret.) Michael V. Hayden Day 1 - Executive Briefings Harder, Better, Faster, Stronger: Semi-Auto Vulnerability Research Day 1 - Programmatic Hacking the Trading Floor Day 1 - OS Wars JavaSnoop: How to hack anything written in Java Day 1 - Bug Collecting Hacker Court Day 1 - Special Events Black Ops Of Fundamental Defense: Web Edition Day 1 - Infrastructure

4:30pm PDT

Coffee Service Break

4:45pm PDT

TBA Day 1 - Reverse Engineering App Attack: Surviving the Mobile Application Explosion Day 1 - Mobile Mastering the Nmap Scripting Engine Day 1 - Malware +Fingerprinting Getting In Bed With Robin Sage Day 1 - Cyber War & Peace PSUDP: A Passive Approach to Network-Wide Covert Communication Day 1 - Network Security Innovation Network Panel: Connecting Buyers, Builders, and the Research Community Day 1 - Executive Briefings SAP Backdoors: A ghost at the heart of your business Day 1 - Programmatic Standing on the shoulders of the blue monster - Hardening Windows applications Day 1 - OS Wars Exploiting the Forest with Trees Day 1 - Bug Collecting Hacker Court Continued Day 1 - Special Events Wardriving the Smart Grid: Practical Approaches to Attacking Utility Packet Radios Day 1 - Infrastructure

6:00pm PDT

Gala Reception + pwnie awards Reception

8:00am PDT

Breakfast Break

8:45am PDT

Keynote Speaker Day 2 Opening Ceremonies

9:45am PDT

10:00am PDT

Microsoft Powershell - It's time to own Day 2 - Turbo Talks Memory Corruption Attacks: The (almost) Complete History... Day 2 - Exploitation CLOUDINOMICON: Idempotent Infrastructure, Survivable Systems & Bringing Sexy Back to Information Centricity Day 2 - Cloud Virtualization How to Hack Millions of Routers Day 2 - Client Side State of SSL on the Internet: 2010 Survey, Results and Conclusions Day 2 - Big Picture CSI: TCP/IP Day 2 - Meet the Feds Utilizing Code Reuse/Return Oriented Programming in PHP Web Application Exploits Day 2 - Web Apps Changing Threats To Privacy: From TIA To Google Day 2 - Privacy pyREtic – Reversing obfuscated Python bytecode & live Python objects Day 2 - Reverse Engineering Redux Breakout Session: Regional Collegiate Cyberdefense Competition Day 2 - Special Events Keeping the Good Stuff In: Confidential Information Firewalling with the CRM114 Spam Filter & Text Classifier Day 2 - Where the Data Lives

10:30am PDT

Breaking Browsers: Hacking Auto-Complete Day 2 - Turbo Talks

11:00am PDT

Coffee Service Break

11:15am PDT

You will be billed $90,000 for this call Day 2 - Turbo Talks There's a party at Ring0 (and you're invited) Day 2 - Exploitation Secure Use of Cloud Storage Day 2 - Cloud Virtualization HTTPS Can Byte Me Day 2 - Client Side Becoming the six-million-dollar man Day 2 - Big Picture Panel: Policy, Privacy, Deterrence and Cyber War Day 2 - Meet the Feds Constricting the Web: Offensive Python for Web Hackers Day 2 - Web Apps Voyage of the Reverser: A Visual Study of Binary Species Day 2 - Reverse Engineering Redux Your Career = Your Business Day 2 - Special Events Hacking Oracle From Web Apps Day 2 - Where the Data Lives Unauthorized Internet Wiretapping: Exploiting Lawful Intercept Day 2 - Privacy

11:45am PDT

Ushering in the Post-GRC World: Applied Threat Modeling Day 2 - Turbo Talks

12:30pm PDT

1:45pm PDT

Elevation of Privilege: The easy way to threat model Day 2 - Turbo Talks Return-Oriented Exploitation Day 2 - Exploitation Virtually Pwned: Pentesting Virtualization Day 2 - Cloud Virtualization Blitzableiter - the Release Day 2 - Client Side Defenseless in Depth Day 2 - Big Picture Human Intel Day 2 - Meet the Feds GWT Security: Don’t get distracted by bright shiny objects Day 2 - Web Apps The DMCA & ACTA vs. Academic & Professional Research: How Misuse of this Intellectual Property Legislation Chills Research, Disclosure and Innovation Day 2 - Privacy TitanMist: Your First Step to Reversing Nirvana Day 2 - Reverse Engineering Redux Things You Wanted To Know But Were Afraid To Ask About Managing Your Information Security Career Day 2 - Special Events Token Kidnapping's Revenge Day 2 - Where the Data Lives

2:15pm PDT

ISC SIE Passive DNS vs. Apache Cassandra Day 2 - Turbo Talks

2:45pm PDT

Reverse Engineering with Hardware Debuggers Day 2 - Turbo Talks

3:00pm PDT

3:15pm PDT

SprayPAL: How capturing and replaying attack traffic can save your IDS Day 2 - Turbo Talks Understanding the Low-Fragmentation Heap: From Allocation to Exploitation Day 2 - Exploitation Virt-ICE: next generation debugger for malware analysis Day 2 - Cloud Virtualization Hacking Browser's DOM - Exploiting Ajax and RIA Day 2 - Client Side Need a hug? I'm secure. Day 2 - Big Picture Panel: Ex-Fed Confessions Day 2 - Meet the Feds How I Met Your Girlfriend Day 2 - Web Apps Attacking phone privacy Day 2 - Privacy Panel: ISSA Day 2 - Special Events Hacking and protecting Oracle Database Vault Day 2 - Where the Data Lives NEPTUNE: Dissecting Web-based Malware via Browser and OS Instrumentation Day 2 - Reverse Engineering Redux

3:45pm PDT

Hadoop Security Design? Just Add Kerberos? Really? Day 2 - Turbo Talks

4:15pm PDT

The Black Art of Binary Hijacking Day 2 - Turbo Talks

4:30pm PDT

Ice Cream Sundae Social Break

4:45pm PDT

USB - HID, The Hacking Interface Design Day 2 - Turbo Talks Advanced AIX Heap Exploitation Methods Day 2 - Exploitation Bad memories Day 2 - Client Side Lord of the Bing: Taking back search engine hacking from Google and Bing Day 2 - Big Picture Meet the Fed's Reception Day 2 - Meet the Feds Deconstructing ColdFusion Day 2 - Web Apps Carmen Sandiego is On the Run! Day 2 - Privacy Goodware drugs for malware: on-the-fly malware analysis and containment Day 2 - Reverse Engineering Redux Cryptographic Agility: Defending Against the Sneakers Scenario Day 2 - Where the Data Lives dirtbox, a highly scalable x86/Windows Emulator Day 2 - Cloud Virtualization

5:15pm PDT

Lifting the fog Day 2 - Turbo Talks

5:45pm PDT

Security is not a four letter word Day 2 - Turbo Talks

6:00pm PDT

Conference Ends Break