Pendant ces deux jours, on assiste à une multitude de présentations dans les salons de réception du Caesars. Le ticket d'entrée de $1,200 pour deux jours est toutefois quelque peu exagéré, surtout quand on voit la douzaine de stands d'éditeurs sponsors de l'événement.
L'ambiance générale est assez festive et de rigueur pour Las Vegas. Les présentations sont plutôt techniques mais le temps des solutions Open source semble révolu, en effet tous les orateurs encouragent a tester leur produit a la fin de leur présentation. Bref, beaucoup de présentations n'ont qu'un seul et même but : Vendre.
Vulnerabilite.com vous a rapporté l'ensemble des présentations de la Black Hat 2004 et vous encourage vivement à y jeter un oeil.
Dr. Alessandro Acquisti
Privacy, Economics and Immediate Gratification: Why Protecting Privacy Is Easy But Selling It Is Not
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-acquisti.pdf
Phillip Hallam-Baker
PhishingaCommitting Fraud in Public
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-hallam-baker.pdf
Brad Bolin
Information Security Law Update: The Emerging Trend Toward Programmatic Information Security Management
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-bolin.pdf
Nitesh Dhanjani
Managing MSIE Security in Corporate Networks by Creating Custom Internet Zones
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-dhanjani.pdf
Roger Dingledine
Putting the P back in VPN: An Overlay Network to Resist Traffic Analysis
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-dingledine.pdf
Himanshu Dwivedi
Insecure IP Storage Networks: Problems with Network Attached Storage (NAS)
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-dwivedi.pdf
Chris Eagle
Attacking Obfuscated Code with IDA Pro
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-eagle.pdf
Rakan El-Khalil
Information Hiding in Executable Binaries
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-el-khalil.pdf
Halvar Flake
Diff, Navigate, Audit: Three Applications of Graphs and Graphing for Security
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-flake.pdf
James C. Foster
Managing Hackers: The Top 8 Rules for Creating Productive Security Teams
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-foster.pdf
Kenneth Geers
Cyber Jihad and the Globalization of Warfare: Computer Networks as a Battle Ground in the Middle East and Beyond
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-geers.pdf
Jennifer Granick
Legal Liability and Security Incident Investigation
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-granick.pdf
Thorsten Holz
Hacker Court '04: Pirates of the Potomac
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-holz.pdf
Chris Hurley
WorldWide WarDrive 4: An Analysis of Wireless Security Trends
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-hurley.pdf
Curtis Kret
Nobody's Anonymous--Tracking Spam and Covert Channels
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-kret.pdf
Kevin Mandia
The Evolution of Incident Response
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-mandia.pdf
David Maynor
Trust No-one, Not Even Yourself OR The Weak Link Might Be Your Build Tools
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-maynor.pdf
Gregory S. Miles
Introduction to the Global Security Syndicate
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-miles.pdf
Laurent Oudot
Digital Active Self Defense
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-oudot.pdf
Sensepost
When the Tables Turn
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-sensepost.pdf
Michael Shema
Web Application Session Strength
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-shema.pdf
Derek Soeder
Advanced Return Address Discovery using Context-Aware Machine Code Emulation
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-soeder.pdf
Spoonm
Metasploit: Hacking Like in the Movies
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-spoonm.pdf
Eugene Tsyrklevich
Attacking Host Intrusion Prevention Systems
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-tsyrklevich.pdf
Jeff Waldron
Introduction to the Certification and Accreditation Process (C&A) Within the U.S. Government
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-waldron.pdf
David Worth
Cryptographic Port-Knocking
http://www.vulnerabilite.com/dl/bh_2004/bh-us-04-worth.pdf
Stefano Zanero
Detecting