27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

Abstract
There has been many publications on the topic of Stuxnet and its "sophistication" in the mainstream press. However, there is not a complete publication which explains all of the technical vulnerability details and how they were discovered. In this talk, you will get a first-hand account of the entire story.

Description
We will discuss various techniques used in analyzing Stuxnet. First, we will share several tricks that were used to quickly identify the vulnerabilities. Second, we describe the thought processes that went into debugging and triaging the vulnerabilities themselves. Finally, we show some tips that you can use if you feel like decompiling stuff for fun :).

Category:

Education

Tags:

• stuxnet
• virus
• ccc
• microsoft
• 0day
• worm

[inurkiewicz]

As someone for who English isn't the 1st language this is incredibly difficult to understand.

[basti0007]

@inurkiewicz Well, I found the talk pretty easy to understand.

[jacksawild]

I'm glad everyone who wanted to sit got a seat.

[sirLYZ]

@dpcnull He is an engineer not an artsie. We know technical aspects of everyday life, the components and fundamentals of what makes things run. Artsies do the elegance and aesthetics. If you can't understand the beauty of the knowledge and creativity he used in solving his problem, then well you must be an Artsie.

[Dragonaushproduction]

about 15 minutes could have been shaved off if they would have taken the time to edit the video

[mikekotsch]

2 people disliked = Stuxnet programmers!

[IVandelayIndsutriesI]

@Nubiex7 Yeah, they don't have enough money to get Macbooks for everyone.

[sirtokealot999]

im sorry but you should have edited that douchbag out of the first 3 minutes, who the fuck cares about free seats

[PayPuh]

One year later and this is still talk still amazes me with the simple efficiency of Stuxnet.

[louiseiful]

why do I care about the seats. how long must this go on.seats seats seats who has a free seat

[eseks]

why the fuck is the seat talk included in this