Ponte gocho

Acabó hace un par de semanas la Black Hat DC 2007 en los USA y después de la polémica con el RFID nos dejan disfrutar de los papers, aun no están todos, pero sí están los siguientes:

- Cesar Cerrudo: Practical 10 Minute Security Audit: The Oracle Case
- Ofir Arkin: NAC
- Sean Barnum: Attack Patterns: Knowing Your Enemies in Order to Defeat Them
- James D. Broesch: Secure Processors for Embedded Applications
- John Heasman: Firmware Rootkits and the Threat to the Enterprise
- Kris Kendall & Chad McMillan: Practical Malware Analysis: Fundamental Techniques and a New Method for Malware Discovery
- David Litchfield: Advanced Oracle Attack Techniques
- Kevin Mandia: Agile Incident Response: Operating through Ongoing Confrontation
- Robert A. Martin, Steve Christey & Sean Barnum: Being Explicit about Software Weaknesses
- David Maynor: Device Drivers 2.0
- David Maynor & Robert Graham: Data Seepage: How to Give Attackers a Roadmap to Your Network
- Jose Nazario: Botnet Tracking: Tools, Techniques, and Lessons Learned
- Joanna Rutkowska: Beyond The CPU: Defeating Hardware Based RAM Acquisition Tools (Part I: AMD case)
- Paul Vincent Sabanal & Mark Vincent Yason: Reversing C++
- Amichai Shulman: Danger From Below: The Untold Tale of Database Communication Protocol Vulnerabilities
- Michael Sutton: Smashing Web Apps: Applying Fuzzing to Web Applications and Web Services
- Andrew Walenstein: Exploting Similarity Between Variants to Defeat Malware
- AAron Walters & Nick Petroni, Jr: Volatools: Integrating Volatile Memory Forensics into the Digital Investigation Process
- Ollie Whitehouse: GS and ASLR in Windows Vista
- Chuck Willis & Rohyt Belani: Web Application Incident Response and Forensics - A Whole New Ball Game!
- Stefano Zanero: 360° Anomaly Based Unsupervised Intrusion Detection

Te puedes bajar todos los papers así que ale, a ponerse gocho.

BlackHat 2007 DC Archives

PD: A los que vengáis mañana a Madrid nos vemos! os dejo el frikivideo que se ha currado el Cervi en su casa sobre el evento!.