Black Hat USA 2014
112 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Windows Kernel Graphics Driver Attack Surface
Abusing Microsoft Kerberos: Sorry You Guys Don't Get It
MoRE Shadow Walker: The Progression of TLB-Splitting on x86
Computrace Backdoor Revisited
Poacher Turned Gamekeeper: Lessons Learned from Eight Years of Breaking Hypervisors
Understanding TOCTTOU in the Windows Kernel Font Scaler Engine
OpenStack Cloud at Yahoo Scale: How to Avoid Disaster
Why Control System Cyber-Security Sucks…
Capstone: Next Generation Disassembly Framework
The Big Chill: Legal Landmines that Stifle Security Research and How to Disarm Them
A Scalable, Ensemble Approach for Building and Visualizing Deep Code-Sharing Networks
"Nobody is Listening to Your Phone Calls." Really? A Debate and Discussion on the NSA's Activities
Miniaturization
ICSCorsair: How I Will PWN Your ERP Through 4-20 mA Current Loop
Reverse Engineering Flash Memory for Fun and Benefit
Governments As Malware Authors: The Next Generation
Defeating the Transparency Feature of DBI
Internet Scanning - Current State and Lessons Learned
Badger - The Networked Security State Estimation Toolkit
Network Attached Shell: N.A.S.ty Systems that Store Network Accessible Shells
Abuse of CPE Devices and Recommended Fixes
802.1x and Beyond!
Leviathan: Command and Control Communications on Planet Earth
VoIP Wars: Attack of the Cisco Phones
Multipath TCP: Breaking Today's Networks with Tomorrow's Protocols
Evasion of High-End IPS Devices in the Age of IPv6
Mobile Device Mismanagement
Unwrapping the Truth: Analysis of Mobile Application Wrapping Solutions
Researching Android Device Security with the Help of a Droid Army
Understanding IMSI Privacy
A Practical Attack Against VDI Solutions
It Just (Net)works: The Truth About iOS 7's Multipeer Connectivity Framework
Android FakeID Vulnerability Walkthrough
Reflections on Trusting TrustZone
Catching Malware En Masse: DNS and IP Style
Static Detection and Automatic Exploitation of Intent Message Vulnerabilities in Android
Secure Because Math: A Deep-Dive on Machine Learning-Based Monitoring
Sidewinder Targeted Attack Against Android in the Golden Age of Ad Libs
Threat Intelligence Library - A New Revolutionary Technology to Enhance the SOC Battle Rhythm!
PWNIE Awards at Black Hat USA 2014
What Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels!
Prevalent Characteristics in Modern Malware
Creating a Spider Goat: Security with Intel CPU Transactional Memory Support
Reverse-Engineering the Supra iBox: Exploitation of a Hardened MSP430-Based Device
Full System Emulation: Achieving Successful Automated Dynamic Analysis of Evasive Malware
Exposing Bootkits with BIOS Emulation
The New Scourge of Ransomware: A Study of CryptoLocker and Its Friends
GRR: Find All the Badness, Collect All the Things
One Packer to Rule Them All
A Journey to Protect Points-of-Sale
Why You Need to Detect More Than PtH
Investigating PowerShell Attacks
SecSi Product Development
How to Wear Your Password
APT Attribution and DNS Profiling
Bitcoin Transaction Malleability Theory in Practice
Exploiting Unpatched iOS Vulnerabilities for Fun and Profit
Write Once, Pwn Anywhere
Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways
Stay Out of the Kitchen: A DLP Security Bake-Off
Extreme Privilege Escalation on Windows 8/UEFI Systems
Abusing Performance Optimization Weaknesses to Bypass ASLR
Lifecycle of a Phone Fraudster: Exposing Fraud Activity
When the Lights Go Out: Hacking Cisco EnergyWise
Hacking the Wireless World with Software Defined Radio - 2.0
Dynamic Flash Instrumentation for Fun and Profit
From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
Point of Sale System Architecture and Security
Unveiling the Open Source Visualization Engine for Busy Hackers
SAP, Credit Cards, and the Bird that Talks Too Much
Data-Only Pwning Microsoft Windows Kernel
The Devil Does Not Exist - The Role of Deception in Cyber
The Library of Sparta
Digging for IE11 Sandbox Escapes Part 1
The Beast is in Your Memory
Babar-ians at the Gate: Data Protection at Massive Scale
Digging for IE11 Sandbox Escapes Part 2
My Google Glass Sees Your Passwords!
Learn How to Control Every Room at a Luxury Hotel Remotely
A Survey of Remote Automotive Attack Surfaces
The BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP
48 Dirty Little Secrets Cryptographers Don’t Want You To Know
Smart Nest Thermostat: A Smart Spy in Your Home
Protecting Data In-Use from Firmware and Physical Attacks
How Smartcard Payment Systems Fail
Probabilistic Spying on Encrypted Tunnels
I Know Your Filtering Policy Better than You Do
Fingerprinting Web Application Platforms by Variations in PNG Implementations
Pulling Back the Curtain on Airport Security: Can a Weapon Get Past TSA?
Contemporary Automatic Program Analysis
The New Page of Injections Book: Memcached Injections
Call To Arms: A Tale of the Weaknesses of Current Client-Side XSS Filtering
How to Leak a 100-Million-Node Social Graph in Just One Week?
Epidemiology of Software Vulnerabilities: A Study of Attack Surface Spread
Finding and Exploiting Access Control Vulnerabilities in Graphical User Interfaces
Building Safe Systems at Scale - Lessons from Six Months at Yahoo
Attacking Mobile Broadband Modems Like a Criminal Would
Time Trial: Racing Towards Practical Timing Attacks
CloudBots: Harvesting Crypto Coins Like a Botnet Farmer
Pivoting in Amazon Clouds