CanSecWest 2024

Wednesday, March 20, 2024

• 13:00 - Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS/iOS
• 15:00 - The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools
• 16:00 - There Will Be Bugs: Exploiting Basebands in Radio Layer Two
• 17:00 - The Cat is Out of the Bag: Regulating AI in Canada

Thursday, March 21, 2024

• 09:30 - Electric Vehicle Chargers: Observations from Pwn2Own Automotive 2024
• 11:00 - Malice in Chains: Supply chain attacks using machine learning models
• 12:00 - Rolling in the Dough: How Microsoft Identified and Remediated a Baker’s Dozen of Security Threats in the Windows DNS Server
• 13:30 - Developing Secure Software in 2024
• 14:30 - Glitching in 3D: Low Cost EMFI Attacks
• 16:10 - Armored Witness: Building a Trusted Notary For Bare Metal
• 17:10 - Applying Physical Discipline to Cybersecurity Challenges
• 17:50 - Attacking Kubernetes

Friday, March 22, 2024

• 09:00 - Simple Bug But Not Easy To Exploit: Rooting Android Devices in One Shot
• 10:45 - The DL on LLM Code Analysis
• 12:30 - Death By A Thousand Cuts: Compromising Automotive Systems via Vulnerability Chains
• 14:00 - Successfully Fuzzing High Value Targets With Low Tech Strategies
• 15:00 - Fuzzing SMB
• 16:15 - URB Excalibur: The New VMware All-Platform VM Escapes
• 17:15 - AI Security Panel Discussion

• Alon Leviev
• Andrea Barisani
• Anna Manley
• Arif Hussain
• Daniel Komaromy
• David Shinberg
• Dillon Franke
• George Hughey
• Ilja VanSprundel
• Jay Beale
• John Bambenek
• Jonathan Andersson
• Joshua Drake
• Linfeng Xiao
• Marc Schoenefeld
• Marta Janus
• Matthew Alt
• Richard Johnson
• Ron Dilley
• Sova
• Stephen Manley
• Yong Wang
• Yuhao Jiang