Microsoft BlueHat v8

Microsoft had another BlueHat conference last month, and they recently posted some videos and interviews on the TechNet BlueHat v8: C3P0wned page. Only the keynote from day one was captured on video, but all of day two was captured. Many interviews were captured through, to give us some idea of what they were talking about.

Day 1 – General Sessions

• Jon DeVaan Keynote
• Iftach Amit interview on Crimeware Behind the Scenes
• Reolof Temmingh interview on Investigating Individuals and Organizations Using Open Source Intelligence
• Dan Kaminsky interview on Black Ops 2008
• Gareth Heyes, Eduardo Vela Nava, and David Lindsay interview on CSS: The Sexy Assassin
• Richard Johnson interview on Visualizing Software Security
• Ian Hellen interview on Probing the Far Corners of Windows – Using Code Characteristics to Find Security Bugs

Day 2 – SDL Sessions

• Scott Charney Keynote
• Danny Dhillon interview on his presentation called Threat Modeling @EMC
• Adam Shostack interview on his presentation called Counterpoint: Threat Modeling @Microsoft
• Matt Miller interview on his presentation called Mitigations Unplugged
• Scott Stender and Alex Vidergar interview on their presentation called Concurrency Attacks on Web Applications
• Dave Weinstein and Jason Shirk interview on their presentation called Fuzzed Enough? When It’s OK to Put the Shears Down
• Vinnie Liu interview on his presentation called Real World Code Review – Using the Right Tools in the Right Place at the Right Time

A few people blogged about the BlueHat conference as well. Robert at cgisecurity went over some tools that were discussed at the conference in a post called My Trip To Microsoft’s Bluehat Conference. Gareth Heyes talks about his BlueHat experiences, and Mike Andrews has a great BlueHat summary post.