Skip to content
CYBER TALKS

The Insecure Workstation II "Bob Reloaded"

Deral Heiland

MalwareMain Stage39 minOpen on YouTube ↗

Deral Heiland details deral Heiland, The Insecure Workstation II "Bob Reloaded" The insecure workstation II "Bob Reloaded".

Summary

Architecture and Background

Deral Heiland, The Insecure Workstation II "Bob Reloaded" The insecure workstation II "Bob Reloaded". Exploring attack vectors within Microsoft desktop systems.

Vulnerability Analysis

A close look at third party applications that still suffer from api call vulnerabilities and how attackers can use these vulnerabilities to escalate there rights to system level . Also will be exploring this year's security research into "attacks against the local desktop login".

Exploitation and Demonstrations

Demonstration of desktop access without logging in. Deral Heiland serves as a Network Security Analyst for a fortune 500 company.

Remediation and Defensive Strategies

Mr. Heiland manages application and network vulnerability testing, Intrusion Detection Systems, controls firewall security and anti-virus efforts. With over a decade of work in the Information Technology field, Mr. Heiland has obtained several certifications including: CISSP, SSCP, CCNA, CWLSS, and CNE5. Prior positions held include: Network Administrator, Senior Network Analyst, Database Manager, and Financial Systems Manager.

Related talks

Main Stage·20 min

  • DEF CON
  • Malware
  • Date: Aug 2013
  • Location: Las Vegas

A Thorny Piece of Malware and Me

Marion Marschalek

Marion Marschalek explores a thorny piece of malware and me at DEF CON 21, examining malware-analysis and practical defenses.

malware-analysisreverse-engineeringthreat-detection+1

Main Stage·46 min

  • DEF CON
  • Malware
  • Date: Aug 2018
  • Location: Las Vegas

Ill See Your Missile and Raise You A MIRV

Levinson · Borges

Levinson and Borges presents ill see your missile and raise you a mirv: Typically, the activities of a malware attack occur on an execution timeline that generally consists of 3 segments—the vector, the stage, and t...

malware-analysisreverse-engineeringdetection-evasion+1

Main Stage·21 min

  • DEF CON
  • Malware
  • Date: Aug 2018
  • Location: Las Vegas

Playing Malware Injection with Exploit Thoughts

Sheng Hao Ma

Sheng Hao Ma presents playing malware injection with exploit thoughts: In the past, when hackers did malicious program code injection, they used to adopt RunPE, AtomBombing, cross-process creation threads, and other...

malware-analysisreverse-engineeringdetection-evasion+1