Black Hat USA 2010

Black Hat USA 2010 took place July 24, 2010 through July 29, 2010 (14 years, 3 months ago) at Caesars Palace in Las Vegas, Nevada, USA.

The general admission cost for the conference was $1,695.00^[1].

Presentations

Wednesday, July 28, 2010

10:00 - Optimizing the Security Researcher and CSO Relationship
10:00 - Payload Already Inside: Data Re-Use for ROP exploits
10:00 - Industrial Bug Mining - Extracting, Grading and Enriching the Ore of Exploits
10:00 - Drivesploit: Circumventing both automated AND manual drive-by-download detection
10:00 - Attacking Kerberos Deployments
10:00 - ExploitSpotting: Locating Vulnerabilities Out Of Vendor Patches Automatically
10:00 - Malware Freak Show 2010: The Client-Side Boogaloo
10:00 - The Emperor Has No Clothes: Insecurities in Security Infrastructure
10:00 - Base Jumping: Attacking GSM Base Station Systems and Mobile Phone Base Bands
10:00 - WPA Migration Mode: WEP is back to haunt you…
11:15 - Crash Analysis using BitBlaze
11:15 - Aleatory Persistent Threat
11:15 - More Bugs In More Places: Secure Development On Moble Platforms
11:15 - Virtual Forensics
11:15 - Electricity for Free? The Dirty Underbelly of SCADA and Smart Meters
11:15 - Balancing the Pwn Trade Deficit
11:15 - Systemic DNS Vulnerabilities and Risk Management
11:15 - Understanding the Windows SMB NTLM Weak Nonce Vulnerability
11:15 - OS X in the Enterprise: Pretty Computers have Pretty Bugs
11:15 - Malware Attribution: Tracking Cyber Spies and Digital Criminals
11:15 - Extreme-range RFID tracking
13:45 - Jackpotting Automated Teller Machines Redux
13:45 - Hacking Java Clients
13:45 - Network Stream Debugging with Mallory
13:45 - Burning Asgard - What happens when Loki breaks free
13:45 - Adventures in Limited User Post Exploitation
13:45 - Cyber war... Are we at war? And if we are, how should we fight it?
13:45 - These Aren't the Permissions You're Looking For
13:45 - Social Networking Special Ops: Extending Data Visualization Tools for faster Pwnage
13:45 - One on One interview with General Michael Hayden
13:45 - SCADA and ICS for Security Experts: How to avoid Cyberdouchery
15:15 - Everybody be cool this is a roppery!
15:15 - Hacker Court
15:15 - Exploiting Timing Attacks in Widespread Systems
15:15 - Black Ops Of Fundamental Defense: Web Edition
15:15 - BlindElephant: WebApp Fingerprinting and Vulnerability Inferencing
15:15 - Finger Pointing for Fun, Profit and War?
15:15 - Blue Screen Of the Death is Dead.
15:15 - Standing on the Shoulders of the Blue Monster: Hardening Windows Applications
15:15 - Harder, Better, Faster, Stronger: Semi-Auto Vulnerability Research
15:15 - JavaSnoop: How to Hack Anything Written in Java
16:45 - Hacker Court (cont.)
16:45 - PSUDP: A Passive Approach to Network-Wide Covert Communication
16:45 - Exploiting the Forest with Trees
16:45 - Ushering in the Post-GRC World: Applied Threat Modeling
16:45 - Security Innovation Network Panel: Connecting Buyers, Builders, and the Research Community
16:45 - Semiconductor Security Awareness, Today and Yesterday
16:45 - Wardriving the Smart Grid: Practical Approaches to Attacking Utility Packet Radios
16:45 - App Attack: Surviving the Mobile Application Explosion
16:45 - SAP Backdoors: A Ghost at the Heart of Your Business
16:45 - Getting In Bed With Robin Sage
16:45 - Mastering the Nmap Scripting Engine

Thursday, July 29, 2010

10:00 - Constricting the Web: Offensive Python for Web Hackers
10:00 - Microsoft Powershell - It's time to own
10:00 - How to Hack Millions of Routers
10:00 - Memory Corruption Attacks: The (almost) Complete History...
10:00 - CSI: TCP/IP
10:00 - Regional Collegiate Cyberdefense Competition
10:00 - pyREtic - Reversing obfuscated Python bytecode & live Python objects
10:00 - State of SSL on the Internet: 2010 Survey, Results and Conclusions
10:00 - Keeping the Good Stuff In: Confidential Information Firewalling with the CRM114 Spam Filter & Text Classifier
10:00 - New Threats to Privacy: From TIA to Google
10:00 - CLOUDINOMICON: Idempotent Infrastructure, Survivable Systems & Bringing Sexy Back to Information Centricity
10:30 - Breaking Browsers: Hacking Auto-Complete
11:15 - You Will be Billed $90,000 for This Call
11:15 - HTTPS Can Byte Me
11:15 - Voyage of the Reverser: A Visual Study of Binary Species
11:15 - Secure Use of Cloud Storage
11:15 - Becoming the six-million-dollar man
11:15 - There's a party at Ring0 (and you're invited)
11:15 - Hacking Oracle From Web Apps
11:15 - Policy, Privacy, Deterrence and Cyber War
11:15 - Utilizing Code Reuse/Return Oriented Programming in PHP Web Application Exploits
11:15 - Unauthorized Internet Wiretapping: Exploiting Lawful Intercept
11:45 - Elevation of Privilege: The Easy way to Threat Model
13:45 - Blitzableiter - the Release
13:45 - ISC SIE Passive DNS vs. Apache Cassandra
13:45 - GWT Security: Don't Get Distracted by Bright Shiny Objects
13:45 - Token Kidnapping's Revenge
13:45 - Defenseless in Depth
13:45 - TitanMist: Your First Step to Reversing Nirvana
13:45 - Human Intel
13:45 - Return-Oriented Exploitation
13:45 - Virtually Pwned: Pentesting Virtualization
14:15 - Reverse Engineering with Hardware Debuggers
15:15 - NEPTUNE: Dissecting Web-based Malware via Browser and OS Instrumentation
15:15 - Ex-Fed Confessions
15:15 - Hacking and protecting Oracle Database Vault
15:15 - How I Met Your Girlfriend
15:15 - Attacking Phone Privacy
15:15 - SprayPAL: How capturing and replaying attack traffic can save your IDS
15:15 - Virt-ICE: Next Generation Debugger for Malware Analysis
15:15 - Hacking Browser's DOM - Exploiting Ajax and RIA
15:15 - Need a hug? I'm secure.
15:45 - Hadoop Security Design? Just Add Kerberos? Really?
16:15 - The Black Art of Binary Hijacking
16:45 - Lord of the Bing: Taking back search engine hacking from Google and Bing
16:45 - Advanced AIX Heap Exploitation Methods
16:45 - Cryptographic Agility: Defending Against the Sneakers Scenario
16:45 - Meet the Feds Reception
16:45 - dirtbox: a Highly Scalable x86/Windows Emulator
16:45 - Carmen Sandiego is On the Run!
16:45 - Deconstructing ColdFusion
16:45 - USB - HID, The Hacking Interface Design
16:45 - Bad Memories
16:45 - Goodware drugs for malware: on-the-fly malware analysis and containment
17:15 - Lifting the Fog
17:45 - Security is Not a Four Letter Word

Unknown date

Presenters

^ This price is meant to give a general idea of the cost of attending the conference. Many conferences have varying prices based on number of days of attendance, early registration, tiers of support, or additional costs for workshops or trainings. The price here is meant to represent the most common cost for the majority of attendees. See the conference's homepage, if applicable, for details.