Insomni'Hack Info:
https://insomnihack.ch/
Favorite talks
Bridging the gap between ICS(IoT?) and corporate IT security
Stefan Lüders
I really enjoyed this talk hearing how an organization defends in a BYOD & academic environment. Defense is difficult when you control the hosts, even more so when you you cant instrument the host and have to rely on network controls only.
My favorite slide was their alerting stack:
Not sure when the slides will be released but here is an older version of the talk I found:
https://www.blackhat.com/docs/us-14/materials/us-14-Luders-Why-Control-System-Cyber-Security-Sucks.pdf
How we hacked Distributed Configuration Management Systems
Francis Alexander & Bharadwaj Machiraj
Awesome talk on breaking into
- HashiCorp Consul
- Apache Zookeeper
- CoreOS etcd
https://github.com/torque59/Garfield
Modern reconnaissance phase on APT – protection layer
Paul Rascagnères
Fun talk on how APT have been implementing some checks to make sure the targets are valid prior to sending down the final stage of the attack.
CERN
@cktricky and I also were able to give the talk at CERN. Background info on CERN: https://en.wikipedia.org/wiki/CERN
Archive of the talk:
Cool Pix:
Dropping Knowledge
Synchrocyclotron
Outside the Antimatter Factory
Thanks Twitter :-)