Embedded Device Security Courses and Certifications

media.ccc.de

Gestatten - The Flash - Security von Embedded Systemen pimpen - Wieso? Weshalb? Wow!

Entdecke, wie Flash-Speicher als aktive Sicherheitskomponenten in Embedded-Systemen fungieren - von Arduino-Projekten bis zu industriellen Steuerungen mit Secure Boot und Verschlüsselung.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Conf42

Enhancing Embedded Device Security - Python Implementation

Discover essential strategies and best practices for securing embedded devices, from identifying vulnerabilities to implementing advanced protection measures while optimizing performance and cost-effectiveness.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

TPM Is No Silver Bullet - Pitfalls in Embedded Device Security

Explore TPM limitations in embedded Linux security, covering threat models, disk encryption pitfalls, and alternative approaches for secure system design.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

BSidesMunich

TPM Is No Silver Bullet - Pitfalls In Embedded Device Security

Uncover the limitations of TPM technology and common security pitfalls in embedded device implementations through real-world examples and practical insights.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Low Level Learning

Motherboard Exploits - Hardware-Level Security Vulnerabilities Beyond Your Operating System

Uncover how hackers exploit motherboard vulnerabilities beyond your OS and learn what limited defenses exist against these deep-level hardware attacks.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

Black Hat

Firmware.RE - Firmware Unpacking, Analysis and Vulnerability-Discovery as a Service

Large-scale analysis of firmware images reveals vulnerabilities across embedded systems, highlighting security challenges and the need for improved tools and techniques in firmware analysis.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

OpenSecurityTraining2

Intel Firmware Attack and Defense

Dive into Intel firmware security through hands-on analysis of attack vectors, defense mechanisms, and low-level system architecture including SPI flash, SMM, and PCIe vulnerabilities.

• YouTube
• 8 hours 31 minutes
• Self-Paced
• Free Video

The Internet of Insecure Things - 10 Most Wanted List

Explore top 10 security vulnerabilities in Internet of Things devices, covering privacy concerns, industrial systems, and medical applications. Learn about real-world exploits and potential solutions.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Black Hat

Reverse-Engineering the Supra iBox - Exploitation of a Hardened MSP430-Based Device

Detailed walkthrough of reverse-engineering and exploiting a hardened MSP430-based key storage device, covering firmware extraction, crypto analysis, and various attack techniques.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

Stepping P3wns - Adventures in Full-Spectrum Embedded Exploitation and Defense

Demonstration of embedded device exploitation and defense techniques, showcasing a polyspecies worm and Symbiote defense system for printers, phones, and routers.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

0xdade

Demystifying IMSI Catchers

Uncover the mysteries of IMSI catchers, their functionality, detection methods, and legal implications. Gain insights into cellular network fundamentals and cutting-edge research on unauthorized cell sites.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

BruCON Security Conference

Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing

Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Black Hat

Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses

Explore fault injection attacks on Secure Boot, their impact on embedded systems, and strategies for enhancing defenses through simulation techniques.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

nullcon

Fuzzing Embedded - Trusted Operating Systems Using AFL

Explore fuzzing techniques for Trusted Execution Environments using AFL, focusing on OP-TEE. Learn about challenges, coverage tracking, and creating initial inputs for effective embedded system security testing.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Nifty Tricks and Sage Advice for Shellcode on Embedded Systems

Clever tricks for writing exploits on embedded systems, including tiny shellcode for ARM, memory corruption on 8-bit micros, and developing without debuggers or firmware images.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk