CODE BLUE 2016
2016-10-20..2016-10-21
Tokyo, Japan
[CODE BLUE 2015, CODE BLUE 2016, CODE BLUE 2017, CODE BLUE 2023, CODE BLUE 2024, CODE BLUE 2025]
| title | author | length |
|---|---|---|
| Keynote: Digital Society "e-Estonia" | Anna Piperal | 48m |
Estonia claims nationwide digital ID (94% strong-ID penetration) plus ID card/mobile ID for banking, e‑signatures and e‑voting (available since 2005), saving… | ||
| WireGuard: Next Generation Abuse-Resistant Kernel Network Tunnel | Jason A. Donenfeld | 48m |
A kernel-space IPv4/IPv6 layer‑3 VPN implemented as a Linux interface uses UDP, Curve25519 and a 1-RTT handshake (NoiseIK) to give perfect forward secrecy with… | ||
| Facebook Malware: Tag Me If You Can | Ido Naor, Dani Goland | 46m |
Kaspersky and Undot reverse engineer a multi‑stage campaign that uses a JSE dropper to install an AutoIt-backed payload which sideloads a tiny Chrome extension… | ||
| DVB-T Hacking | Amihai Neiderman | 28m |
Research extracts the MSTAR-based DVB-T receiver firmware by dumping the 64Mbit SPI flash with an Arduino and serial FTDI console, reverses a MIPS COS RTOS… | ||
| COFI break | Ron Shina, Shlomi Oberman | 28m |
An anti‑exploitation system uses Intel Processor Trace (and ARM CoreSight) plus kernel 4.1/4.3 perf tools and libipt/simplept to record and decode control… | ||
| Method of detecting vulnerability in WebApps using Machine Learning | Isao Takaesu | 48m |
Prototype called SAIVS prototype crawls dynamic flows by creating accounts and logging in, labels pages and error states with Naive Bayes, chooses form values… | ||
| Using the CGC’s fully automated vulnerability detection tools | Inhyuk Seo, Jisoo Park | 47m |
A survey and hands‑on evaluation of automated vulnerability tools classifies design vs code assurance tools and tests them on a simplified TLS and OpenSSL… | ||
| Be a Binary Rockstar | Sophia DAntoine | 33m |
Binary Ninja loads binaries, lifts them to Binary Ninja IL, and exposes a headless Python API that allows automated analyses instead of manual IDA work. A… | ||
| Around the Web in 80 Hours: Scalable Fingerprinting with Chromium Automation | Isaac Dawson | 43m |
Built a distributed scanner that runs real Chromium browsers via Chromium remote debugger, automated in Go, coordinates with NSQ, writes blobs to S3 and… | ||
| Air-Gap security | Mordechai Guri, Yisroel Mirsky, Yuval Elovici | 48m |
Demonstrations show air-gapped machines leak data over heat, sound, light and radio: HVAC-driven thermal signaling yields about 40 bits per hour for… | ||
| DeathNote of Microsoft Windows Kernel | Peter Hlavaty, Jin Long | 44m |
Research uncovers a small kernel component nicknamed DeathNote module inside NTOS that exposes CIFS-style log parsing to user mode and sandboxed entities… | ||
| Analyzing the Security of Mobile Apps for Automobiles | Naohide Waguri | 54m |
Analyzes Android client apps from multiple OEMs in Japan and the US using the AndroBugs scanner and manual reverse engineering, producing per-app reports and… | ||
| ATMS how to break them to stop the fraud | Olga Kochetova, Alexey Osipov | 45m |
Collections of real ATM incidents show money emptied with no logs because low-level device commands and firmware lack authentication and encryption… | ||
| Electron - Build cross platform desktop XSS, it’s easier than you think | Yosuke Hasegawa | 39m |
Electron apps let a single DOM XSS turn into full arbitrary code execution because Chromium plus Node gives renderers OS access; demo shows an injected image… | ||
| The ARMs race for kernel protection | Jonathan Levin | 49m |
Compares Apple KPP and Samsung TIMA/KRP side‑by‑side, showing TrustZone/ARM ELx mechanics, the SMC 17 interface used by iOS, and how KPP loads a small MAHO… | ||
| Who put the backdoor in my modem? | Ewerson Guimaraes | 39m |
Finds a clear-text backdoor flag inside router .bin configuration files that flips a normal account into a backdoor account, with the web UI serving different… | ||
| PowerShell obfuskation Techniques & How To Detect Them | Daniel Bohannon | 49m |
Describes a dozen never-before-seen techniques that mutate PowerShell command arguments so common detections fail, demonstrates concrete methods like tick… | ||
| (P)FACE into the Apple core and exploit to root | Moony Li, Jack Tang | 40m |
Passive IOKit fuzzing hooks kernel APIs on live macOS machines, records call contexts and flags suspicious modules, and produces reproducible kernel crashes… | ||
| Background Story of "Operation neutralizing banking malware" | Kazuki Takada | 43m |
April 2015’s Operation Banking Malware Takedown uses police-controlled domains and a generated benign config to make infected VAWTRAK bots stop fetching… | ||
| House of Einherjar — Yet Another Heap Exploitation Technique on GLIBC | Hiroki Matsukumao | 37m |
Proposes a new glibc heap exploit called House of Einherjar that uses an off-by-one overflow to clear the prev_inuse bit, corrupt the previous chunk size and… | ||
| Esoteric Web Application Vulnerabilities | Andres Riancho | 47m |
Demonstrates concrete exploits: noSQL injection via aggressive input decoding in Rails/MongoDB that lets attackers bypass token checks and complete… | ||
| EXOTIC DATA RECOVERY & PARADAIS | Dai Shimogaito | 42m |
Hidden surplus physical sectors—called PARADAIS—store firmware and user data that survive formatting and 3/7/35‑pass wipes; average 2 TB drives hide about… | ||
| Keynote: How much security is too much? | Karsten Nohl | 42m |
Argues that excessive security slows real-world innovation and gives concrete counterexamples and metrics: a mobile rollout for geo (300M users) forces… | ||
| About CGC: the world’s first all-machine hacking tournament | Tyler Nighswander | 52m |
Overview of the DARPA Cyber Grand Challenge: an autonomous CTF where machines perform static analysis, fuzzing, symbolic execution, exploit generation and… | ||
| CODE BLUE 2016 contests | 03m | |
Conference runs a series of staged challenges that place researchers in front of real IoT and embedded boards so they can probe firmware, fuzz interfaces and… | ||
| nothing matches | ||