null Meetup: "Flying Drones, NSA Hacking and Backdooring Bootloaders"

01
Nov
Date:
01 November 2017
Time:
18:30 - 21:30 hrs
Location:
Teleportboulevard 121, Amsterdam Sloterdijk
Organised by:
KPN

Agenda:

1. "Drones Don't Fly When the Sky is Grey" with Javi Moreno
2. "I Boot when U-Boot" by Bernardo Maia Rodrigues - Vincent Ruijter

------------------

Abstract of first talk: A short film by Bea Cabrera. Project presentation, film screening and Q&A.
Storyline: After discovering the tracks of what looks like an illegal hacking attempt upon his company’s network, Mike Donahue will pursue the trespassers’ digital trail while staying one step ahead of the NSA. A fictional story about government surveillance loosely, but factually, based on recent real events.

------------------

Abstract of second talk: Personal computer systems are now considerably more secure than embedded devices. Trusted Platform Module (TPM) and secure boot are readily available and even default in a lot of new desktop computers and laptops. Numerous small office and consumer devices, including routers and smart televisions, however, are lacking even the most basic security features. In this talk we will demonstrate and describe the inner-workings of a custom developed (Fully Weaponised IoT Cyber™) bootkit, which gains persistence on U-Boot based embedded devices, at a lower level than even the firmware. Firmware updates and factory resets usually do not interfere with the bootloader, as a small problem could render the device unusable for an end-user: the bootkit will therefore remain present. By including a properly functioning killswitch and a multi-boot like technique, it is possible to switch between a regular and a backdoored image to thwart detection. Enterprises and ISPs must take this additional attack surface into account, and put effort into detecting and responding to this threat. Well-known security researchers have long advocated for easier ways to verify and demonstrate the integrity of hardware, but this comes at a price that vendors are not willing to pay for security. Recently however, regulatory bodies have started to enforce vendors to lock-down their wireless devices, in order to prevent them from operating outside of their certified frequencies. But these 'vendor lock-downs' are not sufficient to increase the device security, as we will demonstrate, it's just a minor inconvenience.

------------------

Speakers:

Javi Moreno works as a security consultant, specialised in cryptography and embedded security. Used to play CTFs often, now he prefers to sleep. He participated in Drones Don't Fly When the Sky is Grey as producer, advisor and coffee provider. You can follow him at @vierito5

Bernardo Maia Rodrigues (Brazil) Bernardo works as an Ethical Hacker for KPNs (Royal Duth Telecom) REDteam. He enjoys hacking (and bricking) embedded devices including routers, modems and TVs. He presented on security topics at the NullByte Conference, the null Amsterdam chapter and local venues. He frequently participates in CTFs with TheGoonies and is famous for not using buzzwords like IoT, APT and Cyber in his bio.

Vincent Ruijter (Netherlands) Pacifistic Internetveapon @ KPNs (Royal Dutch Telco) REDteam, who thinks he knows Linux. Moderator @ null Amsterdam chapter, with an endless curiosity for all things binary. Knows how to quit Vi ^[ESC!wqwq:wq!

More events

10-14
Oct-Mar

Verbindersopleiding informatiemanagement

location:
Den Haag
organised by:
PBLQ
HSD event
12-05
Oct-Apr

Besturen onder druk van deze tijd

location:
Utrech t/ Den Haag
organised by:
PBLQ
HSD event
12-30
Oct-Nov

Digitale overheid: van visie tot uitvoering

location:
Den Haag
organised by:
PBLQ
HSD event
26-24
Oct-Nov

Opleiding Certified Data Protection Officer

location:
Amsterdam
organised by:
IIR - Institute for International Research
HSD event
02-14
Nov-Dec

Opleiding beleidsmedewerker Openbare Orde en Veiligheid

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-30
Nov

Opleiding bibob coordinator

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
21-24
Nov

Milipol Paris

location:
Paris-Nord Villepinte Exhibition Centre
organised by:
Comexposium Security
HSD event
22
Nov

Cyber Security Conference 2017

location:
World Trade Center Rotterdam
organised by:
Heliview
HSD event
23
Nov

9e Jaarcongres De aanpak van Witwassen

location:
Hotel Breukelen
organised by:
Uitgeverij-Studiecentrum Kerckebosch
HSD event
23-14
Nov-Dec

Big data in beleid

location:
Den Haag
organised by:
PBLQ
HSD event
23
Nov

Critical Infrastructure Protection: Securing the Public Realm

location:
Bridgewater Hall, Manchester, UK
organised by:
Open Forum Events
HSD event
23
Nov

Seminar Network Traffic Analysis using Deep Packet Inspection and Data Visualization – Bram Cappers

location:
Maanplein 55, TP5 Den Haag
organised by:
KPN
HSD event
24
Nov

The Knight's Move: Mireille Hildebrandt

location:
Stroom Den Haag, Hogewal 1-9, The Hague
organised by:
Stroom Den Haag
HSD event
28-29
Nov

Congres Veiligheid bij Evenementen

location:
Vasim Fabriek Nijmegen
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
29-02
Nov-Dec

Advanced Safety and Security Course HEAT+ (Hostile Environment Awareness Training)

location:
Netherlands/Germany
organised by:
Centre for Safety and Development
HSD event
29
Nov

Canada Investment and Innovation Forum

location:
Amsterdam
organised by:
Invest in Canada
HSD event
29
Nov

Meeting the Cyber Security Challenge 2017 Executive Seminar

location:
HSD Campus Wilhelmina van Pruisenweg 104, 2595 AN Den Haag
organised by:
Business Sweden, the Embassy of Sweden, Innovation Quarter and HSD
HSD event
30
Nov

HSD Café: Risicoanalyse en Artificial Intelligence

location:
HSD Campus Wilhelmina van Pruisenweg 104 2595 AN The Hague
organised by:
The Hague Security Delta
HSD event
30
Nov

Seminar Opportunities Dutch ICT-solutions in German Sectors

location:
The Hague
organised by:
The Netherlands Enterprise Agency (RVO.nl) and The Ministry of Economic Affairs and Climate
HSD event
10-14
Oct-Mar

Verbindersopleiding informatiemanagement

location:
Den Haag
organised by:
PBLQ
HSD event
12-05
Oct-Apr

Besturen onder druk van deze tijd

location:
Utrech t/ Den Haag
organised by:
PBLQ
HSD event
02-14
Nov-Dec

Opleiding beleidsmedewerker Openbare Orde en Veiligheid

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
23-14
Nov-Dec

Big data in beleid

location:
Den Haag
organised by:
PBLQ
HSD event
29-02
Nov-Dec

Advanced Safety and Security Course HEAT+ (Hostile Environment Awareness Training)

location:
Netherlands/Germany
organised by:
Centre for Safety and Development
HSD event
01
Dec

A new perspective on manageability

location:
Equinix Datacenter AM4, Amsterdam
organised by:
ION-IP b.v.
HSD event
04-07
Dec

Black Hat Europe 2017

location:
London, UK
organised by:
Black Hat
HSD event
05-19
Dec

Cursus Aanpak financieel-economische criminaliteit

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
06-08
Dec

Counterterrorism (CT) and Applied Intelligence Course (6th edition)

location:
Park Hotel The Hague Molenstraat 53 2513 BJ Den Haag
organised by:
Lowlands Solutions Netherlands and Investigative Department from Het Twickerlerveld European Detection Dog Services
HSD event
06-07
Dec

Cyber Security Indonesia (CSI) 2017

location:
Jakarta Convention Centre, Jakarta, Indonesia
organised by:
Tarsus Indonesia, a Tarsus Group PLC company
HSD event
12-13
Dec

Congres Radicalisering & Terrorisme

location:
The Hague Security Delta Campus
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
12
Dec

Opening Celebration: World Startup Factory Impact Accelerator #3

location:
The Hague Tech
organised by:
World Startup Factory
HSD event
14
Dec

Gratis seminar - The art of creating an escape room by Thijs Bosschert

location:
Maanplein 55, Den Haag
organised by:
KPN
HSD event
14
Dec

Kick-Off Startup in Residence Ministry of Justice and Security

location:
organised by:
HSD event
21
Dec

Cyber Security (CSX) cursus

location:
Zelfstudie
organised by:
International Management Forum (IMF)
HSD event
21
Dec

Data Protection Officer (DPO) in de praktijk

location:
Zelfstudie
organised by:
International Management Forum (IMF)
HSD event
10-14
Oct-Mar

Verbindersopleiding informatiemanagement

location:
Den Haag
organised by:
PBLQ
HSD event
12-05
Oct-Apr

Besturen onder druk van deze tijd

location:
Utrech t/ Den Haag
organised by:
PBLQ
HSD event
09-13
Jan-Mar

Cursus Bestuurlijke aanpak van ondermijning

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
25
Jan

Gratis seminar - Reliable infiltration detection by packet tagging

location:
Maanplein 55, Den Haag
organised by:
KPN
HSD event
29-31
Jan

Cybertech 2018

location:
Tel Aviv
organised by:
HSD event
30-31
Jan

Congres Personen met verward gedrag

location:
HSD Campus Wilhelmina van Pruisenweg 104 2595 AN DEN HAAG
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
31-28
Jan-Mar

HCB Collegereeks Veiligheid, Recht en Bestuur

location:
Koninklijk Instituut Van Ingenieurs, Den Haag
organised by:
Haags Congres Bureau
HSD event
31
Jan

Boekpresentatie 'Crisisbeheersing Witte Kolom' - Continuïteit van zorg onder buitengewone omstandigheden

location:
Hotel Restaurant Oud London te Zeist
organised by:
SVDC advies in crisisbeheersing
HSD event
10-14
Oct-Mar

Verbindersopleiding informatiemanagement

location:
Den Haag
organised by:
PBLQ
HSD event
12-05
Oct-Apr

Besturen onder druk van deze tijd

location:
Utrech t/ Den Haag
organised by:
PBLQ
HSD event
09-13
Jan-Mar

Cursus Bestuurlijke aanpak van ondermijning

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
31-28
Jan-Mar

HCB Collegereeks Veiligheid, Recht en Bestuur

location:
Koninklijk Instituut Van Ingenieurs, Den Haag
organised by:
Haags Congres Bureau
HSD event
02
Feb

Security Intelligence

location:
Amsterdam
organised by:
International Management Forum
HSD event
13
Feb

DroneClash

location:
Valkenburg airport
organised by:
TU Delft
HSD event
13-15
Feb

RoboBusiness Europe

location:
WTC Rotterdam
organised by:
City of Rotterdam
HSD event
22-23
Feb

Internationale excursie Terreurbestrijding

location:
Den Haag
organised by:
Centrum voor Studiereizen
HSD event
10-14
Oct-Mar

Verbindersopleiding informatiemanagement

location:
Den Haag
organised by:
PBLQ
HSD event
12-05
Oct-Apr

Besturen onder druk van deze tijd

location:
Utrech t/ Den Haag
organised by:
PBLQ
HSD event
09-13
Jan-Mar

Cursus Bestuurlijke aanpak van ondermijning

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
31-28
Jan-Mar

HCB Collegereeks Veiligheid, Recht en Bestuur

location:
Koninklijk Instituut Van Ingenieurs, Den Haag
organised by:
Haags Congres Bureau
HSD event
13-27
Mar

Cursus Veiligheid met technologie in de openbare ruimte

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
29-26
Mar-Apr

Opleiding Risicomanager

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
12-05
Oct-Apr

Besturen onder druk van deze tijd

location:
Utrech t/ Den Haag
organised by:
PBLQ
HSD event
29-26
Mar-Apr

Opleiding Risicomanager

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05-26
Apr

Opleiding regisseur mensenhandel

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05-26
Apr

Opleiding gebiedsregisseur

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
18-20
Apr

ASIS Europe 2018 - From Risk to Resilience

location:
World Forum, The Hague, Netherlands
organised by:
ASIS International
HSD event
18-20
Apr

ASIS Europe 2018 – From Risk to Resilience

location:
Rotterdam
organised by:
ASIS Europe
HSD event
29-31
May

Cyberhub Summit 2018

location:
The Hague
organised by:
HSD event
05-19
Jun

Cursus Burgerparticipatie in het veiligheidsdomein

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
07-21
Jun

Cursus Omgang met maatschappelijke onrust

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
13
Jun

Big Data Analytics Conference

location:
VICTORIA PARK PLAZA, 239 VAUXHALL BRIDGE ROAD, LONDON SW1V 1EQ
organised by:
Whitehall Media
HSD event
05-11
Sep-Oct

Opleiding coordinator evenementenveiligheid

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
25-30
Sep-Oct

Cursus Wetgeving & Security

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
25-27
Sep

Critical Infrastructure Protection & Resilience Europe (CIPRE)

location:
The Hague
organised by:
Torch Marketing and KNM Media
HSD event
27-15
Sep-Nov

Opleiding Safety Manager

location:
Regardz Meeting Center Eenhoorn Amersfoort
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05-11
Sep-Oct

Opleiding coordinator evenementenveiligheid

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
25-30
Sep-Oct

Cursus Wetgeving & Security

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
27-15
Sep-Nov

Opleiding Safety Manager

location:
Regardz Meeting Center Eenhoorn Amersfoort
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-14
Oct-Nov

Cursus Informatie uitwisseling in de veiligheidsketen

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
27-15
Sep-Nov

Opleiding Safety Manager

location:
Regardz Meeting Center Eenhoorn Amersfoort
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-14
Oct-Nov

Cursus Informatie uitwisseling in de veiligheidsketen

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01-13
Nov-Dec

Opleiding beleidsmedewerker Openbare Orde en Veiligheid

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01-29
Nov

Opleiding bibob coordinator

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01-13
Nov-Dec

Opleiding beleidsmedewerker Openbare Orde en Veiligheid

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event