RuhrSec 2017
2017-05-04..2017-05-05
Bochum, Germany
RuhrSec ·
[RuhrSec 2016, RuhrSec 2017, RuhrSec 2019, RuhrSec 2020 #StayAtHome Edition, RuhrSec 2023, RuhrSec 2025]
who it's for
security researchers, hardware security engineers, embedded systems engineers, reverse engineers, mobile security researchers, automotive security researchers, penetration testers
topics
hardware Trojans in silicon; FPGA bitstream tampering; Rowhammer.js exploits; DRAM reverse engineering; flushless cache eviction strategies; prefetch-based kernel probing; TSX abort timing attacks; BTB low-bit leaks; phishing kit harvesting and analysis; power-based data exfiltration over USB charging; Android app hardening and binary rewriting; remote keyless entry and Hitag2 cryptanalysis
| title | author | length |
|---|---|---|
| Opening | Marcus Niemietz | 07m |
Quick logistical briefing: the first-day agenda lists sessions and a coffee break at UCI Kinos, tickets cost about €100 with a portion earmarked as a charity… | ||
| Keynote: How to Build Hardware Trojans | Prof. Dr. Christof Paar | 45m |
Demonstrates concrete hardware Trojans that work: a doping-level transistor flip to permanently set outputs that evades optical inspection but becomes visible… | ||
| Rowhammer Attacks: A Walkthrough Guide | Dr. Clémentine Maurice, Daniel Gruss | 40m |
Walks through reproducible Rowhammer primitives, concrete tools and results: native double‑sided hammering and Rowhammer.js exploit JavaScript; DRAM… | ||
| Using Microarchitectural Design to Break KASLR and More | Anders Fogh | 41m |
Demonstrates concrete methods that let an unprivileged process and even sandboxed code locate kernel mappings and modules by abusing microarchitectural… | ||
| Teach a Man to Phish and You Feed Him for a Lifetime | Armin Buescher | 38m |
A crawler harvests over 6,400 unique phishing kit ZIPs from ~13,000 URLs (about 9 GB uncompressed), covering roughly 130 targeted brands. Most kits exfiltrate… | ||
| Five Years of Android Security Research: the Good, the Bad... | Dr. Sven Bugiel | 41m |
Five years of research catalogs concrete wins and persistent failures: app-store scanning and OS hardening (mandatory access control, memory mitigations… | ||
| A new categorization system for Side-channel attacks on mo... | Veelasha Moonsamy | 34m |
Claim: an unprivileged app uses CPU-induced power bursts over a USB charging cable to exfiltrate data without using the data lines. Implementation: a… | ||
| The (In)Security of Automotive Remote Keyless Entry Systems... | Dr. David Oswald | 41m |
Analyzes automotive RKE systems and shows two concrete, working attacks: extracts a handful of global VW group keys from ECU firmware enabling cloning a remote… | ||
| nothing matches | ||