Hardware Vulnerabilities Courses and Certifications

Exploiting Modern Microarchitectures - Meltdown, Spectre, & Other Hardware Attacks

Explore modern microarchitecture vulnerabilities like Meltdown and Spectre. Learn about hardware attacks, their mitigations, and the industry's approach to balancing performance and security.

• YouTube
• 1 hour 24 minutes
• On-Demand
• Free Video

OWASP Foundation

Exploiting Hardware Glitches and Side Channels in Perfect Software

Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.

• YouTube
• 51 minutes
• On-Demand
• Free Video

IEEE

Are We Susceptible to Rowhammer? An End-to-End Methodology for Cloud Providers

Comprehensive methodology for cloud providers to assess DRAM vulnerability to Rowhammer attacks, including near-optimal instruction sequences and row adjacency mapping techniques for modern Intel platforms.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

AMD Sinkclose: Universal Ring -2 Privilege Escalation

Delve into AMD processor vulnerabilities and SMM security mechanisms, exploring a critical CPU design flaw that enables universal ring -2 privilege escalation through detailed methodology and engineering.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Between Physical and Sofware: Fault Attacks, Side Channels, and Mitigations

Explore software-based fault attacks, including Rowhammer and Plundervolt, and their connections to transient-execution attacks. Implement attacks, learn mitigations, and understand the power of manipulating applications and devices.

• edX
• 10 weeks, 3-4 hours a week
• On-Demand
• Free Online Course (Audit)

secwestnet

Speculative Execution Vulnerabilities: From Spectre to Control Flow Hijack

Comprehensive exploration of speculative execution attacks, from original Spectre to new vulnerabilities. Clear explanations of exploitation challenges and processor vulnerabilities, with insights on high-resolution timers as potential weapons.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Free Video

Black Hat

Behind the Speculative Curtain - The True Story of Fighting Meltdown and Spectre

Insider account of the urgent response to Meltdown and Spectre vulnerabilities, revealing the challenges and decisions faced by cybersecurity experts during a critical disclosure situation.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

Taking DMA Attacks to the Next Level

Unveils a novel, undetectable DMA attack exploiting DDR4 hardware vulnerabilities, enabling arbitrary memory access in live systems using a custom FPGA probe during sleep state.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Black Hat

Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape

Comprehensive exploration of mobile security, examining hardware, software, and network components across platforms to uncover vulnerabilities and discuss protective measures for data and devices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Black Hat

Learn How to Control Every Room at a Luxury Hotel Remotely

Descubre cómo controlar remotamente todos los dispositivos de un hotel de lujo, explorando vulnerabilidades en sistemas de automatización y sus implicaciones para la seguridad hotelera y de los huéspedes.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Black Hat

Smart Nest Thermostat - A Smart Spy in Your Home

Explore security vulnerabilities in Nest thermostats, including hardware-level attacks and potential for remote exploitation. Learn about risks to privacy and home security posed by compromised smart home devices.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Black Hat

Hiding at Depth - Exploring, Subverting and Breaking NAND Flash Memory

Explore NAND Flash vulnerabilities, learn to hide and discover files on mobile devices, and understand implications for digital forensics and device security. Open-source tools for Android demonstrated.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Black Hat

Torturing OpenSSL

Explore hardware vulnerabilities in secure systems through a side-channel attack on RSA signatures, demonstrating how induced faults can compromise software-secure systems and extract private keys.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Drammer - The Making Of

Exploración técnica del ataque Drammer, que aprovecha la vulnerabilidad Rowhammer en dispositivos Android sin permisos de usuario ni fallas de software. Detalla el proceso de desarrollo y los desafíos enfrentados.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Kaspersky

The Evolving Attack Surface

Explore the expanding vulnerabilities in industrial control systems, from traditional security to blockchain, with insights on hardware attacks, supply chain risks, and network hijacking.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk