Control Systems Courses

Black Hat

Teridian SoC Exploitation - Harvard Architecture Smart Grid Systems

Exploitation techniques for Teridian 8051-based SoCs in smart grid systems, covering architecture, security barriers, and methods to gain code execution and firmware access.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Black Hat

Hot Knives Through Butter - Bypassing Automated Analysis Systems

Explores advanced techniques used by malware to evade automated analysis systems, including extended sleep calls, mouse click triggers, and timed activation. Provides insights for security professionals on evolving threats.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

Extreme Privilege Escalation on Windows 8 - UEFI Systems

Explore extreme privilege escalation techniques on Windows 8/UEFI systems, uncovering vulnerabilities in firmware interfaces and demonstrating exploitation methods for elevated system access.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Black Hat

Learn How to Control Every Room at a Luxury Hotel Remotely

Descubre cómo controlar remotamente todos los dispositivos de un hotel de lujo, explorando vulnerabilidades en sistemas de automatización y sus implicaciones para la seguridad hotelera y de los huéspedes.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Black Hat

How Smartcard Payment Systems Fail

Explore vulnerabilities in smartcard payment systems, including protocol flaws, certification issues, and governance problems. Learn about real-world attacks and their implications for EMV adoption.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Black Hat

Finding and Exploiting Access Control Vulnerabilities in Graphical User Interfaces

Explore GUI element misuse as a novel class of access control vulnerabilities. Learn to identify, classify, and exploit GEMs in Windows applications using the GEM Miner tool.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Black Hat

Building Safe Systems at Scale - Lessons from Six Months at Yahoo

Insights on building secure systems for large-scale internet companies, addressing challenges of surveillance, user privacy, and evolving security threats in the digital landscape.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Black Hat

Cellular Exploitation on a Global Scale - The Rise and Fall of the Control Protocol

Explore hidden cellular device controls, their vulnerabilities, and potential for global exploitation. Learn reverse engineering techniques and gain insights into Over-the-Air code execution across major platforms.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Black Hat

Why Control System Cyber-Security Sucks

Explores challenges in industrial control system cybersecurity, critiquing current approaches and advocating for a paradigm shift towards standardized IT practices and people-centric solutions.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Black Hat

Leviathan - Command and Control Communications on Planet Earth

Explore global malicious command and control infrastructure, its impact on cybersecurity, and techniques used by hackers to hide communications within web traffic.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

Bypass Control Flow Guard Comprehensively

Analyze CFG's weaknesses and explore a new technique to bypass it, enabling previously prevented exploit methods and opening avenues for developing more advanced exploit techniques.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Black Hat

How the Wassenaar Arrangement's Export Control of "Intrusion Software" Affects Industry

Experts discuss implications of Wassenaar Arrangement's export control on "intrusion software" for cybersecurity industry, research, and privacy, drawing parallels to 1990s crypto wars.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Black Hat

The Little Pump Gauge That Could - Attacks Against Gas Pump Monitoring Systems

Explore attacks on gas pump monitoring systems, their vulnerabilities, and the motives behind them. Learn about honeypot deployment and prevention strategies.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk