Day 1 Stream 1·42 min
Raghudeep Kannavara · Alan Sheng
Shows how malicious firmware on a PCIe subsystem can reach host memory through DMA without physical access.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34Las Vegas, USA · August 2021 · 10 talks
Day 1 Stream 1 talks from BSides Las Vegas 2021.
1–10 of 10 talks
Day 1 Stream 1·42 min
Raghudeep Kannavara · Alan Sheng
Shows how malicious firmware on a PCIe subsystem can reach host memory through DMA without physical access.
Day 1 Stream 1·47 min
Vincenzo Ciancaglini · Philippe Z Lin
Shows how unauthenticated APIs and unencrypted traffic let attackers abuse edge access control cameras and door relays.
Day 1 Stream 1·51 min
JP Perez-Etchegoyen
Surveys recent exploitation of SAP vulnerabilities, attacker timelines, and post-exploitation activity in ERP systems.
Day 1 Stream 1·46 min
Wendy Knox Everette
Explains what SOC 2 audits check, how to prepare for a first audit, and how evidence and scope shape the result.
Day 1 Stream 1·47 min
Andy Applebaum · Ron Alford
Explores how deception could slow or misdirect automated planners that chain attack actions across enterprise networks.
Day 1 Stream 1·54 min
Andrew Brandt · Gabor Szappanos
Traces how poisoned search results and compromised WordPress sites deliver the Gootloader malware chain to Windows users.
Day 1 Stream 1·50 min
Emily Rexer · Henry Reed
Shows how converting Windows executables into images and applying transfer learning can flag malware never seen before.
Day 1 Stream 1·51 min
Colleen Dai · Grayson Hardaway
Shows how secure coding guardrails and static analysis rules could have prevented many real-world XSS bugs in open source code.
Day 1 Stream 1·44 min
Douglas Brush
Offers a candid personal account of burnout and anxiety in security work, plus practical self-care steps.