If You Can't Open It, You Don't Own It

This talk examines how hardware attacks, broken roots of trust, and supply-chain tampering affect Modern C++ system security. It connects hardware exploitation and software reverse engineering to strategies for designing and hardening C++ systems.

Syllabus

Intro
Thread Hunting Review
Threat Hunting
Zero Trust Environment
Hardware Hacking
Shadow Hammershot
Roots of Trust
Root of Trust
Trust Landscape
Broken Trust
Secure Bootup
Secure Hardware
Trust
Trust Notes
Tools
Takeaways
Joker
Christopher Thomas
Security Model
Sidechannel Attack
Timing
NIST Definition
Hardware
Differential Power Analysis
Differential Fault Analysis
Tempus Scan
Concurrency
WiFi
Logging
Licenses
Questions
Physical Access
Bus Pirate
Firmware Analysis
Software Analysis