PDA

View Full Version : Black Hat


disavowed
March 16th, 2006, 03:27
Anyone going to Black Hat Vegas this year? There look to be some really good reverse engineering related talks:

http://www.blackhat.com/html/bh-usa-06/train-bh-us-06-pa.html
Reverse Engineering on Windows: Application in Malicious Code Analysis
Pedram Amini and Ero Carrera


http://www.blackhat.com/html/bh-usa-06/train-bh-us-06-gh-adv.html
ROOTKIT: Advanced 2nd Generation Digital Weaponry
Greg Hoglund & Jamie Butler


http://www.blackhat.com/html/bh-usa-06/train-bh-us-06-sl-advmal.html
Advanced Malware Deobfuscation
Jason Geffner & Scott Lambert


http://www.blackhat.com/html/bh-usa-06/train-bh-us-06-hf.html
Analyzing Software for Security Vulnerabilities
Halvar Flake


http://www.blackhat.com/html/bh-usa-06/train-bh-us-06-ce.html
Reverse Engineering with Ida Pro
Christopher S. Eagle

Virus
March 16th, 2006, 05:14
> Anyone going to Black Hat Vegas this year?
I wish i could :/

Anyway, there's nice article about some advanced rootkit implementation :-)
hxxp://www.eecs.umich.edu/virtual/papers/king06.pdf

Regards -
Virus

nikolatesla20
March 16th, 2006, 08:09
Hm nothing sounds really "new" except for the "advanced deobfuscation"

-nt20

disavowed
March 16th, 2006, 10:41
These are all grouped together now under "Development" at http://www.blackhat.com/html/bh-usa-06/train-bh-usa-06-index.html, along with "Automating Exploit Detection: Cutting-edge Tools and Techniques" by Matt Hargett.

Polaris
March 16th, 2006, 11:28
I'll be there... So prepare for some hard-partying-time!

disavowed
July 20th, 2006, 23:00
Reviving this thread now that Black Hat is getting close...

Anyone going to the Black Hat Briefings?

Anyone going to any of the Black Hat Trainings? I'd be particularly interested to hear how good "Reverse Engineering on Windows: Application in Malicious Code Analysis" and "Advanced Malware Deobfuscation" (first and third bullets above) are.

CrackZ
July 21st, 2006, 17:09
My first impression is that the two talks featuring Ero & Halvar will be the "ones" to attend, but then I might be biased ;-).

Regards

CrackZ.