null Meetup: "Flying Drones, NSA Hacking and Backdooring Bootloaders"

01
Nov
Date:
01 November 2017
Time:
18:30 - 21:30 hrs
Location:
Teleportboulevard 121, Amsterdam Sloterdijk
Organised by:
KPN

Agenda:

1. "Drones Don't Fly When the Sky is Grey" with Javi Moreno
2. "I Boot when U-Boot" by Bernardo Maia Rodrigues - Vincent Ruijter

------------------

Abstract of first talk: A short film by Bea Cabrera. Project presentation, film screening and Q&A.
Storyline: After discovering the tracks of what looks like an illegal hacking attempt upon his company’s network, Mike Donahue will pursue the trespassers’ digital trail while staying one step ahead of the NSA. A fictional story about government surveillance loosely, but factually, based on recent real events.

------------------

Abstract of second talk: Personal computer systems are now considerably more secure than embedded devices. Trusted Platform Module (TPM) and secure boot are readily available and even default in a lot of new desktop computers and laptops. Numerous small office and consumer devices, including routers and smart televisions, however, are lacking even the most basic security features. In this talk we will demonstrate and describe the inner-workings of a custom developed (Fully Weaponised IoT Cyber™) bootkit, which gains persistence on U-Boot based embedded devices, at a lower level than even the firmware. Firmware updates and factory resets usually do not interfere with the bootloader, as a small problem could render the device unusable for an end-user: the bootkit will therefore remain present. By including a properly functioning killswitch and a multi-boot like technique, it is possible to switch between a regular and a backdoored image to thwart detection. Enterprises and ISPs must take this additional attack surface into account, and put effort into detecting and responding to this threat. Well-known security researchers have long advocated for easier ways to verify and demonstrate the integrity of hardware, but this comes at a price that vendors are not willing to pay for security. Recently however, regulatory bodies have started to enforce vendors to lock-down their wireless devices, in order to prevent them from operating outside of their certified frequencies. But these 'vendor lock-downs' are not sufficient to increase the device security, as we will demonstrate, it's just a minor inconvenience.

------------------

Speakers:

Javi Moreno works as a security consultant, specialised in cryptography and embedded security. Used to play CTFs often, now he prefers to sleep. He participated in Drones Don't Fly When the Sky is Grey as producer, advisor and coffee provider. You can follow him at @vierito5

Bernardo Maia Rodrigues (Brazil) Bernardo works as an Ethical Hacker for KPNs (Royal Duth Telecom) REDteam. He enjoys hacking (and bricking) embedded devices including routers, modems and TVs. He presented on security topics at the NullByte Conference, the null Amsterdam chapter and local venues. He frequently participates in CTFs with TheGoonies and is famous for not using buzzwords like IoT, APT and Cyber in his bio.

Vincent Ruijter (Netherlands) Pacifistic Internetveapon @ KPNs (Royal Dutch Telco) REDteam, who thinks he knows Linux. Moderator @ null Amsterdam chapter, with an endless curiosity for all things binary. Knows how to quit Vi ^[ESC!wqwq:wq!

More events

22
May

Privacy en Data Protection in de praktijk van de publieke sector

location:
organised by:
International Management Forum
HSD event
23-24
May

Homeland Security 2018 - Cyber Crime Management

location:
New Delhi, India
organised by:
Federation of Indian Chambers of Commerce & Industry (FICCI)
HSD event
23
May

Darktrace ICS Cyber Security Lunch

location:
Euromast, Rotterdam
organised by:
Darktrace Industrial
HSD event
24
May

HSD Café: Human factors in cyber security

location:
HSD Campus
organised by:
HSD
HSD event
24
May

Nationaal Privacy Event 2018

location:
Louwman Museum Den Haag
organised by:
Duthler Academy
HSD event
24-28
May-Jun

Examentraining Certified Fraud Examiner

location:
Naarden
organised by:
Fortress Academy bv
HSD event
28
May

Certified Fraud Examiner

location:
organised by:
HSD event
28
May

Certified Fraud Examiner (CFE)

location:
organised by:
HSD event
29
May

NRC Live serie Cyber Security | Avond 1: Cyber tech & trends

location:
Diligentia, Den Haag
organised by:
NRC Live, Nederlands Cyber Collectief, Fox-IT, Gemeente Den Haag
HSD event
30-31
May

Mobile 360 conference- Privacy and Security 2018

location:
The Hilton, The Hague
organised by:
GSMA, The Municipality of The Hague and The Hague Security Delta
HSD event
30-31
May

CANSEC 2018 (deelname Nederlandse delegatie mogelijk)

location:
EY Centre Ottawa, Ontario (Canada)
organised by:
Canadian Association of Defense & Security Industries
HSD event
30
May

JISTARC/TUD Symposium on Geospatial- and Imagery Intelligence

location:
Faculty of Technology, Policy and Management, Delft University of Technology
organised by:
TU Delft Safety and Security Institute (DSYS)
HSD event
30
May

InnovatingNL

location:
The Hague
organised by:
Bird & Bird
HSD event
31
May

AAID Summit 2018

location:
Peace Palace, The Hague
organised by:
Institute for Accountability and Internet Democracy
HSD event
24-28
May-Jun

Examentraining Certified Fraud Examiner

location:
Naarden
organised by:
Fortress Academy bv
HSD event
04-08
Jun

IRPA Congress 2018 Europe

location:
World Forum, The Hague
organised by:
The Dutch Society for Radiation Protection (NVS)
HSD event
05-19
Jun

Cursus Burgerparticipatie in het veiligheidsdomein

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05
Jun

Procesveiligheid

location:
BCN Daltonlaan Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05
Jun

Presentation of the National Cyber Security Research Agenda-III

location:
Nieuwspoort, The Hague
organised by:
dcypher
HSD event
06
Jun

ChannelConnect LIVE2018

location:
DeFabrique, Utrecht
organised by:
ChannelConnect
HSD event
06
Jun

ISO 31000 Risicomanagement

location:
Utrecht of Brussel
organised by:
International Management Forum
HSD event
07-21
Jun

Cursus Omgang met maatschappelijke onrust

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
07
Jun

Privacy & Security

location:
Centraal in Nederland
organised by:
International Management Forum
HSD event
11
Jun

Privacy en Data Protection in de praktijk van de publieke sector

location:
Utrecht
organised by:
International Management Forum (IMF)
HSD event
13
Jun

Big Data Analytics Conference

location:
VICTORIA PARK PLAZA, 239 VAUXHALL BRIDGE ROAD, LONDON SW1V 1EQ
organised by:
Whitehall Media
HSD event
13-14
Jun

Congres Veiligheid op de werkvloer

location:
The Hague Security Delta Campus
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
13
Jun

SecureTour Endpoint Protection

location:
Media Plaza, Jaarbeurs Utrecht
organised by:
SecureLink Nederland
HSD event
14
Jun

Black Hat Sessions 2018

location:
NBC Congrescentrum, Nieuwegein
organised by:
Secura
HSD event
19
Jun

Access to Capital 2018: Cybersecurity & Digital Health

location:
HSD Campus
organised by:
InnovationQuarter (IQ), Rabobank, Value Creation Capital, KPN Ventures, Health Innovation Fund, TIIN Capital and HSD Office
HSD event
19
Jun

NRC Live serie Cyber Security | Avond 2: De menselijke factor

location:
Diligentia, Den Haag
organised by:
NRC Live, Nederlands Cyber Collectief, Fox-IT, Gemeente Den Haag
HSD event
19
Jun

Guest Hacker Program - Insider Threat - Elsine van Os

location:
KPN, The Hague, Maanplein 55, TP5, Serre
organised by:
KPN CISO
HSD event
20-22
Jun

Geopolitics and Global Futures Symposium

location:
GCSP, Maison de la paix, Chemin Eugène-Rigot 2D, Geneva
organised by:
Geneva Centre for Security Policy
HSD event
21
Jun

HSD Café:

location:
HSD Campus
organised by:
HSD
HSD event
21
Jun

ASIS Security Management Congres 2018

location:
Hotel Van der Valk, Veenendaal
organised by:
Security Management en ASIS Benelux Chapter
HSD event
25-29
Jun

Hack in Paris 2018

location:
La Maison de la Chimie, Paris, France
organised by:
Sysdream IT Security Services
HSD event
26-27
Jun

Cyber security business reis naar München

location:
München
organised by:
InnovationQuarter
HSD event
27-28
Jun

Smart City Event

location:
Zuiderstrandtheater
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
27
Jun

iBestuur Mobility Congres 2018

location:
Zuiderstrandtheater, Den Haag
organised by:
iBestuur, Enterprise Summit, Gemeente Den Haag
HSD event
27
Jun

Event Safety & Security

location:
Zuiderstrandtheater, Den Haag
organised by:
HSD Office
HSD event
28
Jun

Seminar Crisisbeheersing Zorgsector: Actuele ontwikkelingen en praktijklessen

location:
Hotel Restaurant Oud London
organised by:
SVDC advies in crisisbeheersing
HSD event
02
Jul

Certified Data Protection Officer (CDPO)

location:
organised by:
HSD event
03
Jul

NRC Live serie Cyber Security | Avond 3: Cyber & de cloud

location:
Diligentia, Den Haag
organised by:
NRC Live, Nederlands Cyber Collectief, Fox-IT, Gemeente Den Haag
HSD event
09-18
Jul

Risk Management Summer Course

location:
Delft University of Technology
organised by:
Delft University of Technology
HSD event
19-24
Aug

International Cyber Security Summer School 2018

location:
Various locations in The Hague
organised by:
NCIA, Europol, EY, Leiden University and many others
HSD event
20-24
Aug

National Cyber Security Summerschool (NCS3)

location:
organised by:
dcypher
HSD event
04
Sep

NRC Live serie Cyber Security | Avond 4: Gehackt!

location:
Diligentia, Den Haag
organised by:
NRC Live, Nederlands Cyber Collectief, Fox-IT, Gemeente Den Haag
HSD event
05-11
Sep-Oct

Opleiding coordinator evenementenveiligheid

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
07
Sep

Security Intelligence

location:
Omgeving van Amsterdam
organised by:
International Management Forum
HSD event
10-12
Sep

EuroNAVIGATOR 2018

location:
The Hague Marriott Hotel
organised by:
IAED
HSD event
11-14
Sep

Hardware Security Conference and Training

location:
WTC The Hague (NH Hotel) in The Hague
organised by:
Hardwear
HSD event
12-14
Sep

Masterclass K9 instructor

location:
Schiphol, Netherlands.
organised by:
Twickelerveld Education
HSD event
12
Sep

Privacy en Data Protection in de praktijk

location:
organised by:
HSD event
14
Sep

Predictive Profiling

location:
Omgeving van Amsterdam
organised by:
International Management Forum
HSD event
20-22
Sep

Command Control - The Leading Summit for Cyber Security

location:
Munich Internationales Congress Center München
organised by:
Messe München GmbH
HSD event
23-28
Sep

Military Aspects of Blasts and Shock (MABS) 2018

location:
Suikersilo-West, The Hague
organised by:
City of The Hague, TNO, Ministry of Defence
HSD event
24-26
Sep

Smart Security Week 2018

location:
Palais du Pharo: 58 Boulevard Charles Livon, 13007 Marseille, France
organised by:
European Commission, Secured Communicating Solutions
HSD event
24
Sep

Identity Management & Access Control training

location:
Vianen
organised by:
International Management Forum
HSD event
25-30
Sep-Oct

Cursus Wetgeving & Security

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
26
Sep

Congres Innovatie binnen de Criminaliteitsbeheersing

location:
Nieuwe of Littéraire Sociëteit de Witte, te Den Haag
organised by:
ScienceWorks
HSD event
27-15
Sep-Nov

Opleiding Safety Manager

location:
Regardz Meeting Center Eenhoorn Amersfoort
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
27
Sep

HSD Café:

location:
HSD Campus
organised by:
HSD
HSD event
27
Sep

Opleiding Veiligheidscoordinator in het onderwijs

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
27
Sep

Holland Strikes Back 2018

location:
Louwman Museum, Den Haag
organised by:
Stichting DINL
HSD event
05-11
Sep-Oct

Opleiding coordinator evenementenveiligheid

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
25-30
Sep-Oct

Cursus Wetgeving & Security

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
27-15
Sep-Nov

Opleiding Safety Manager

location:
Regardz Meeting Center Eenhoorn Amersfoort
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-14
Oct-Nov

Cursus Informatie uitwisseling in de veiligheidsketen

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-04
Oct

Critical Infrastructure Protection & Resilience Europe (CIPRE)

location:
The Hague
organised by:
Torch Marketing and KNM Media
HSD event
02-31
Oct

Opleiding QHSE manager

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-03
Oct

One Conference 2018

location:
World Forum, The Hague
organised by:
Ministry of Economic Affairs and Climate Policy and NCSC-NL
HSD event
02
Oct

NRC Live serie Cyber Security | Avond 5: Van beveiliging naar weerbaarheid

location:
Diligentia, Den Haag
organised by:
NRC Live, Nederlands Cyber Collectief, Fox-IT, Gemeente Den Haag
HSD event
02-05
Oct

Cyber Security Week 2018

location:
The Hague
organised by:
HSD, City of The Hague, The Hague Convention Bureau, InnovationQuarter, RvO, Ministry of Justice & Safety, Ministry of Economic Affairs
HSD event
08-12
Oct

SDN & OpenFlow World Congress 2018

location:
World Forum, The Hague
organised by:
Layer123
HSD event
09-10
Oct

Congres Radicalisering & Terrorisme

location:
The Hague Security Delta Campus
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
10
Oct

Veiligheid van gebouwen

location:
BCN Daltonlaan Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
10-11
Oct

CCR Summit 2018

location:
Conference Center Bovendonk, Hoeven, NL
organised by:
RB&W
HSD event
18
Oct

HSD Café:

location:
HSD Campus
organised by:
HSD
HSD event
27-15
Sep-Nov

Opleiding Safety Manager

location:
Regardz Meeting Center Eenhoorn Amersfoort
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
02-14
Oct-Nov

Cursus Informatie uitwisseling in de veiligheidsketen

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01-13
Nov-Dec

Opleiding beleidsmedewerker Openbare Orde en Veiligheid

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01-29
Nov

Opleiding bibob coordinator

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01
Nov

Opleiding Security Manager

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01
Nov

Cyber Security (CSX) Fundamentals training

location:
Centraal in Nederland
organised by:
International Management Forum
HSD event
02
Nov

Accenture Innovation Summit 2018

location:
organised by:
Accenture
HSD event
06-27
Nov

Cursus Cameratoezicht in de openbare ruimte

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
06
Nov

4-daagse cursus Cameratoezicht in de openbare ruimte

location:
BCN Utrecht Daltonlaan 100 3584 BJ Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
20
Nov

Innovatiecongres Justitie en Veiligheid 2018

location:
Den Haag
organised by:
Ministerie van Justitie en Veiligheid
HSD event
26-30
Nov

Amsterdam Drone Week 2018

location:
RAI Amsterdam
organised by:
RAI Amsterdam in collaboration with Ministry of Infrastructure and Water Management
HSD event
27-28
Nov

Congres Drones in het publieke domein

location:
RAI Amsterdam
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
29
Nov

HSD Café:

location:
HSD Campus
organised by:
HSD
HSD event
29-30
Nov

Congres Veiligheid bij Evenementen

location:
RAI Amsterdam
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
01-13
Nov-Dec

Opleiding beleidsmedewerker Openbare Orde en Veiligheid

location:
Regardz La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
04-19
Dec

Cursus Crisismanagement in de praktijk

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
04-18
Dec

Opleiding Inzicht in Criminologie

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05-07
Dec

Counterterrorism (CT) and Applied Intelligence Course (8th edition)

location:
Park Hotel, The Hague, Netherlands
organised by:
Twickelerveld Intelligence and Investigations
HSD event
05-07
Dec

Cyber Security Indonesia (CSI) 2018

location:
Jakarta Convention Centre
organised by:
Tarsus Indonesia
HSD event
06-20
Dec

Cursus Bestuursrechtelijk handhaven

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
06-20
Dec

Cursus Waarheidsvinding

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
06-20
Dec

Cursus Predictive profiling

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
08-12
Jan-Mar

Cursus Bestuurlijke aanpak van ondermijning

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
10
Jan

Opleiding Fire Safety Manager

location:
BVO
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
15
Jan

Cursus Drones in de openbare ruimte

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
08-12
Jan-Mar

Cursus Bestuurlijke aanpak van ondermijning

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05
Feb

Opleiding Resilience Officer

location:
BCN Utrecht (Daltonlaan)
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
07
Feb

Cursus Bestuurlijke aanpak van radicalisering en terrorisme

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
14-15
Feb

Congres Milieucriminaliteit

location:
The Hague Security Delta Campus
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
08-12
Jan-Mar

Cursus Bestuurlijke aanpak van ondermijning

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
05-19
Mar

Cursus Openbare Orde, Rampen en Noodbevoegdheden

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
14
Mar

Cursus Wet- en regelgeving in Openbare Orde en Veiligheid

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event
14
Mar

Opleiding Overlastcoördinator

location:
La Vie Utrecht
organised by:
Studiecentrum voor Bedrijf en Overheid
HSD event