Black Hat Courses

Biometrics and Privacy - Time to Faceoff or is that FaceApp

Explore biometric data usage, privacy legislation, and implications in APAC and globally. Learn about government and private sector practices, legal frameworks, and individual rights regarding biometric information.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Attacking and Defending Machine Learning Applications of Public Cloud

Explore techniques for attacking and defending machine learning applications in public cloud environments, focusing on visual classification vulnerabilities and countermeasures.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

Explore techniques for identifying vulnerabilities in embedded firmware, focusing on multi-binary analysis, dynamic and static approaches, and scalable solutions for IoT device security.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Redback - Advanced Static Binary Injection

Explore advanced static binary injection techniques to insert external code into executables, modifying run-time behavior. Learn from experts about this powerful yet underutilized method.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Store-to-Leak Forwarding - There and Back Again

Explore store-to-leak forwarding attacks, their evolution since Meltdown, and implications for data security in modern processors. Learn about new vulnerabilities and mitigation strategies.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Back to the Future - Cross-Protocol Attacks in the Era of 5G

Explore vulnerabilities in mobile network protocols across generations and learn about cross-protocol attacks in 5G networks, presented by security expert Sergey Puzankov.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Page Cache Attacks - Microarchitectural Attacks on Flawless Hardware

Explore microarchitectural attacks on flawless hardware, focusing on page cache vulnerabilities. Learn about state-of-the-art techniques, countermeasures, and implications for system security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

From an URGENT - 11 Vulnerability to a Full Take-Down of a Factory, Using a Single Packet

Demonstration of exploiting URGENT/11 vulnerabilities in industrial controllers to take over an entire factory with a single packet, highlighting cybersecurity risks in automated systems.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Making an Impact from India to the Rest of the World by Building and Nurturing Women Infosec Community

Explore the journey of InfoSecGirls, a community empowering women in cybersecurity, from its origins in India to its global impact, fostering diversity and inclusion in the tech industry.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Demystify Today's Binary Disassembling and How Modern ABI Makes it Easier

Explore modern binary disassembling techniques and tools, understanding their strategies, challenges, and how modern ABI enhances the process. Learn about evaluation results and new approaches in this field.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Win the 0-Day Racing Game Against Botnet in Public Cloud

Explore techniques for capturing 0-day attack payloads automatically in public cloud environments, with real-world examples and insights on model performance and monitoring strategies.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Tracking the Criminal of Fake News Based on a Unified Embedding

Explore a deep learning-based method for authorship analysis to combat fake news, protecting reputations and market stability through advanced tracking techniques.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

The Inside Story - There Are Apps in Apps and Here Is How to Break Them

Explore instant app architecture and attack models, uncovering vulnerabilities in this popular app format. Learn about security implications and potential exploits in click-to-play designs.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

May the Trust be with You - Empowering TrustZone-M with Multiple Trusted Environments

Explore TrustZone-M vulnerabilities and learn about innovative solutions for enhancing security through multiple trusted environments in embedded systems.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Stopping Snake Oil with Smaller Healthcare Providers - Addressing Security with Actionable Plans

Practical strategies for small healthcare providers to protect against cyber threats, focusing on actionable plans and cost-effective solutions to safeguard patient data and prevent ransomware attacks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk