Browse by Tags

Blog Post: The Rapidly Evolving Exploitation Playground

BlueHat1

Hey there, Vincenzo and Fermin here! Next week we will be giving two talks at BlueHat . Vincenzo will be talking with Tim Kornau, Ralf Philipp Weinmann, and Thomas Dullien, about return-oriented programming and how to automate the creation of ROP payloads. Also, Fermin and Andrew Roths will be talking...

on7 Oct 2010
Blog Post: MAPP – An Insider's view

BlueHat1

Intro Matt Watchinski here, Senior Director, Sourcefire Vulnerability Research Team (VRT). It’s that time of year again. The mercury is soaring above 100F, and I am crammed onto a “flying bus” heading out to Las Vegas to attend this year’s iteration of the Black Hat and DEF...

on29 Jul 2010
Blog Post: The EMET 2.0 Training Video has arrived!

BlueHat1

Hey there, I'm pleased to announce that the BlueHat team has partnered with the dynamic Microsoft Security Response Center (MSRC) Engineering duo of Andrew Roths and Fermin J. Serna on a training video previewing the new release, version 2.0, of the Enhanced Mitigation Experience Toolkit (EMET). This...

on28 Jul 2010
Blog Post: Office Security Engineering: BlueHat v9 Presentation Revisited

BlueHat1

Hi, this is Tom Gallagher from the Office Trustworthy Computing team. At Blue Hat v9 , David Conger and I presented some of the security engineering work that we were doing to help ensure the security of Office 2010. We don’t want a single bug in our parsing code to allow arbitrary code to harm...

on21 May 2010
Blog Post: Software Security == People && Process && Technology

BlueHat1

Mark Curphey here. I run the Subscriptions Engineering Team in Server & Tools Online, where we build complex customer facing web sites like MSDN and TechNet, supporting millions of users. For the last 15 years, I have always held security roles, most recently heading up the Information Security Tools...

on15 Apr 2010
Blog Post: Heya! Hola and Olá!

BlueHat1

It was pretty fun sitting in the panel that kicked-off the first BlueHat Security Forum in Latin America and we are almost half-way through our day here in Buenos Aires. (Check out Mike Reavey’s EcoStrat Blog post for details about the panel.) It is always great to see old friends from the ecosystem...

on18 Mar 2010
Blog Post: Parser Central: Microsoft .NET as a Security Component

BlueHat1

During the past decade or so, a significant portion of the computer industry has set out in a quest for secure software. That this sizable force of smart people with all their resources and market power has not yet brought us a secure and safe computing experience, should be an indication that this task...

on4 Mar 2010
Blog Post: Do you believe in ghosts?

BlueHat1

When I was a kid, I had nightmares every week. I still remember some of them vividly, particularly the ones where ghosts were involved. Not the typical ghosts from the movies , but ones that could not be seen, only heard and felt. Why would I be so frightened and still remember them “vividly” today?...

on16 Feb 2010
Blog Post: Know thy Enemy

BlueHat1

I recently attended BlueHat for the second time and spoke about the SMS vulnerabilities Collin Mulliner and I discovered and exploited this summer. BlueHat is an interesting speaking venue because the audience consists entirely of Microsoft employees. Some people might think security researchers speaking...

on6 Nov 2009
Blog Post: The lighter side of the cloud

BlueHat1

Billy Rios here. I’m giving a talk this week along with Nate McFeters entitled, “ Sharing the Cloud with Your Enemy .” It’s a fun, realistic talk on security in the cloud. Why cloud computing? Cloud computing, software as a service, infrastructure as a service, platform as a service… with so many...

on21 Oct 2009
Blog Post: Attacking SMS

BlueHat1

This year at BlackHat USA in Las Vegas , we presented on the topic of attacking Short Message Service (SMS). Our presentation focused on the different ways in which SMS can be used to compromise mobile security. We’re excited to give an updated version of our talk at the upcoming BlueHat v9 conference...

on19 Oct 2009
Blog Post: Collaborating on RIA Security

BlueHat1

Microsoft and Adobe frequently work together on security. At this year's BlueHat , we will come together to share our security research in the area of Rich Internet Applications (RIAs). While we independently place considerable thought and effort into our respective security models, attackers often look...

on6 Oct 2009
Blog Post: Can we secure cloud computing? Can we afford not to?

BlueHat1

There have been many disruptive innovations in the history of modern computing, each of them in some way impacting how we create, interact with, deliver, and consume information. The platforms and mechanisms used to process, transport, and store our information likewise endure change, some in subtle...

on28 Sep 2009
Blog Post: Black Hat USA Spotlight: ATL Killbit Bypass

BlueHat1

There are only a few days left before Black Hat USA, and we, like most other speakers, are in the midst of the last-minute push to have all the materials finalized in time for our presentation. Our presentation this year, " The Language of Trust ," features a lot of material related to attacking software...

on27 Jul 2009
Blog Post: Securing our Legacy

BlueHat1

Hi, this is Scott Stender from iSEC Partners. I recently had the privilege of speaking at Microsoft's BlueHat event in Brussels on the topic of securing legacy systems. With all of the recent coverage on the need to secure our networked systems -- national, corporate, and individual alike -- I felt...

on19 Jun 2009
Blog Post: Dune Busting and Browser Fun at HITB – Dubai

BlueHat1

Hi, Billy Rios here, I was recently invited to speak at Hack in the Box (HITB) in Dubai. While at HITB, I participated in two different talks, but I’m going to focus on the talk Chris Evans and I co-presented: “Cross Domain Leakiness.” Chris Evans is a security lead for Google’s Core Security team. Some...

on13 May 2009
Blog Post: !exploitable Crash Analyzer Now Available

BlueHat1

At BlueHat v8 in October 2008, Dave Weinstein, Jason Shirk and Lars Opstad presented the topic of when it’s okay to stop fuzzing ( Fuzzed Enough? When It’s OK to Put the Shears Down ). As part of that presentation, Dave talked about a technique used within Microsoft for triaging and categorizing crashes...

on1 Apr 2009
Blog Post: State of the Union

BlueHat1

I spent a lot of time trying to think about what to write for a BlueHat pre-conference blog entry and had a pretty hard time focusing on one topic. To handle this, I decided to comment on the state of security. While I've found plenty of things to be excited about with security, including improved...

on16 Oct 2008

Browse by Tags

Blog Post: The Rapidly Evolving Exploitation Playground

Blog Post: MAPP – An Insider's view

Blog Post: The EMET 2.0 Training Video has arrived!

Blog Post: Office Security Engineering: BlueHat v9 Presentation Revisited