Black Hat Asia
March 24-27, 2015
Marina Bay Sands | Singapore
Black Hat USA
August 1-6, 2015
Mandalay Bay | Las Vegas, NV
Black Hat Europe
November 10-13, 2015
Amsterdam RAI | The Netherlands
7/1/2014
02:00 PM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Black Hat USA 2014: Can You Keep a Secret?

Cryptography lets secrets remain secret, or at least that's the idea. Today's quartet of Black Hat Briefings all explore this oft-hidden world, shedding light on crypto flaws both small and momentous.

Over 10,000 people participated in the Matasano crypto challenges, a staged learning exercise where participants implemented 48 different attacks against realistic cryptographic constructions. This has resulted in a crypto exploit codebase spanning dozens of languages, from X86 assembly to Haskell. In "48 Dirty Little Secrets Cryptographers Don't Want You To Know," Thomas Ptacek and Alex Balducci will walk you through all 48 challenges, putting them into context and going in-depth into some of the most interesting.

At the network layer, encrypted tunnels are typically seen as black boxes -- good. But network traffic leaks side-channel information that can often be analyzed to determine the tunnel's purpose and likely content -- less good. "Probabilistic Spying on Encrypted Tunnels" will dive deep into the probabilistic algorithms that can analyze this side-channel information, and the presenters will conclude by releasing an open-source toolkit containing the demonstrated attacks and algorithms.

The NSA's all up in our junk, to put it technically, and recent revelations from their ANT program show that they use many well-known and low-cost physical and firmware attacks that can compromise system integrity and in-use data. And as cloud use accelerates, more and more of an organization's computing infrastructure is outside of its physical control. "Protecting Data In-Use from Firmware and Physical Attacks" will review several such attacks, including SMM bootkits, "cold booting," and malicious devices, as well as existing tools and technologies to mitigate them.

SSL has been around for decades and yet it keeps happening: New attacks are being discovered against TLS at a steady rate. In "The BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP," Antoine Delignat-Lavaud will present three new attacks against TLS. The final one exploits vulnerabilities in HTTPS deployments to achieve the holy grail of TLS attacks: full server impersonation of several thousands of websites, including Microsoft, Apple, Twitter, and PayPal. He'll also give some tips on defending against these unorthodox attacks and dispel a few TLS security misconceptions while he's at it.

Regular registration ends on July 26. Please visit Black Hat USA 2014's registration page to get started.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9676
Published: 2015-02-27
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

CVE-2014-9682
Published: 2015-02-27
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

CVE-2015-0655
Published: 2015-02-27
Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

CVE-2015-0884
Published: 2015-02-27
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

CVE-2015-0885
Published: 2015-02-27
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.