With the main sessions of Blackhat starting tomorrow morning (Las Vegas time), I’ve posted the mobile-related talks here for those who are interested.
The mobile hacking training course which took place today (I think) was sold out. What has interested me the most is the increase in interest from the security and hacking community in all types of mobile platforms. As you’ll see below, there are really quite a few presentations focussed on mobile. Also, as smartphones become more advanced, a lot of the other presentations not listed here become relevant (for example web application security). I just want to highlight two of the presentations: ‘Aerial Cyber Apocalypse’ which will demonstrate a UAV equipped with WiFi and GSM hacking capabilities (see the picture below) and ‘War Texting: Identifying and Interacting with Devices on the Telephone Network’ which shows attacks on car systems which use SMS to remote control the car. Fun in the sun.
 |
| From: http://www.geek.com/articles/geek-pick/wasp-the-linux-powered-flying-spy-drone-that-cracks-wi-fi-gsm-netwokrs-20110729/ |
Blackhat USA 2011 (Briefings 3-4th August)
Schedule: https://www.blackhat.com/html/bh-us-11/bh-us-11-schedule.html
Don A. Bailey:
War Texting: Identifying and Interacting with Devices on the Telephone Network
Karsten Nohl + Chris Tarnovsky:
Reviving smart card analysis
Andrey Belenko
Overcoming IOS Data Protection to Re-enable iPhone Forensics
Ravi Borgaonkar + Nico Golde + Kevin Redon:
Femtocells: A poisonous needle in the operator’s hay stack
Dino Dai Zovi:
Apple iOS Security Evaluation: Vulnerability Analysis and Data Encryption
Richard Perkins + Mike Tassey:
Aerial Cyber Apocalypse: If we can do it… they can too.
Long Le + Thanh Nguyen:
ARM exploitation ROPmap
Jennifer Granick:
The Law of Mobile Privacy and Security
Riley Hassell + Shane Macaulay:
Hacking Androids for Profit
Tyler Shields + Anthony Lineberry + Charlie Miller + Chris Wysopal + Dino Dai Zovi + Ralf-Phillipp Weinmann + Nick Depetrillo + Don Bailey:
Owning Your Phone at Every Layer – A Mobile Security Panel
DEFCON19: (4th-7th August)
Schedule: https://www.defcon.org/html/defcon-19/dc-19-index.html
Cellular Privacy: A Forensic Analysis of Android Network Traffic
This is REALLY not the droid you’re looking for…
Mobile App Moolah: Profit taking with Mobile Malware
Wireless Aerial Surveillance Platform
Seven Ways to Hang Yourself with Google Android
Staying Connected during a Revolution or Disaster
So, plenty to keep everyone going then! It’ll be interesting to see what the next few weeks bring.