Adventures in analyzing Stuxnet [27C3]

Adventures in analyzing Stuxnet

There has been many publications on the topic of Stuxnet and its "sophistication" in the mainstream press. However, there is not a complete publication which explains all of the technical vulnerability details and how they were discovered. In this talk, you will get a first-hand account of the entire story.

We will discuss various techniques used in analyzing Stuxnet. First, we will share several tricks that were used to quickly identify the vulnerabilities. Second, we describe the thought processes that went into debugging and triaging the vulnerabilities themselves. Finally, we show some tips that you can use if you feel like decompiling stuff for fun :).

Speaker: Bruce Dang, Peter Ferrie
EventID: 4245
Event: 27th Chaos Communication Congress (27C3) by the Chaos Computer Club [CCC]
Location: Berlin Congress Center [bcc]; Alexanderstr. 11; 10178 Berlin; Germany
Language: english
Start: 27.12.2010 23:00:00 +01:00
License: CC-by-nc-sa

Category:

Education

Tags:

• CCC
• Chaos Computer Club
• 27C3
• Talk
• Lecture
• Stuxnet
• Microsoft

[claynoik]

@iddn The swearing is natural, as is the presenting style. It's authentic, and I like it.

[samu2000]

is it so offensive to you that a guy who talks like this knows more about computer security than you will know in your lifetime.. or two?

[astroglide420]

BONER. 100% Authentic. I love you Bruce.

[hoadlck]

This is how it always is: lots of analysis (and sometimes a lucky break) to figure out what is going on, and then the problem is fixed in a couple of minutes.

[mstrfool]

Loved his reaction at admitting to using Linux at times. And for the folks that dislike his language, you should just be grateful that he is a geek that can still speak in a way the layman can mostly understand. Do you have any idea how rare it is for some one with those skills to be able to communicate it to the layman? I also respect that he was quite honest, not something I have come to expect from MS. He told of his mistakes that no one would know otherwise. He merits a lot of respect.

[ttmost]

Excellent analysis.

Windows is looking at the MOF directory and running any code dropped there. how can that be a good idea?

[analoganomaly]

@ people QQing about the swearing. Seriously? If you fucking can't fucking handle a little fucking profanity cancel your internet service and go live in a hole.Bruce provided good information and insight into the process.He is an engineer, not a salesman trying to sell you a phone every time you walk into the RadioShack. It's not his job to be the politically correct face of the company. If you can't grasp that you probably don't have the intellect to get any use from this vid to begin with.FUCK

[fknwtf]

Jesus Christ what's with the whining over a few swear words? It's great to hear a presenter talking naturally as this guy did, even more so being that he's from MS. Must be some xtian fundies here I think.

This was a great and interesting talk.

[ZirconCode]

Pokemon training takes time and patience!

Other than that, great talk =p

[iddn]

@alexwastakenwastaken I found it got repetitive and boring. The guy thought he was cool and kepy at it for that reason only.

[iddn]

@alexwastakenwastaken He could at least vary the swears. If he insists on doing it he may as well do it properly. Microsoft have an office in Ireland, he should get transferred there to learn a thing or two

[iddn]

@samu2000 Honestly, swearing once or twice doesn't offend me at all. This guy just took it too far, there's only so many 'WTF Dude's I can handle. Also, you really have no idea what I do for a living or what I know. Grow up child.