diamond sponsor

Rediscover Security.

Black Hat returns to the fabulous Ceasars Palace Hotel in action-packed Las Vegas.
Leave your business attire at home. Dress is casual, promoting a great learning
environment for all delegates.
What we are offering this year:• Wireless 802.11b access during the Briefings• One-on-one access to our sponsors’ senior technical executives, the top
security products and consultancies in the world. Get tailored security solutions
on the spot.
• A copy of Security Assessment Case Studies for Implementing the NSA IAM byRuss Rogers, Greg Miles, Ed Fuller, and Ted Dykstra.
• Breakpoint Books, our official bookseller, will be on hand and stocked with thelatest books in security.
• An additional 2 tracks to make this the largest Black Hat event ever.
• Free admission to DEFCON for paid Black Hat delegates.

Ve n u e
Caesars Palace Las Ve g a s
Address:
Telephone:
Reservations:3570 Las Vegas Blvd South, Las Vegas, NV 89109+1 702 731 7110 or toll free +1 800 634 6661 • Facsimile: +1 702 866 1700
+1 800 634 6661 Don’t forget to mention BLACKHAT to get the group rate
Deluxe: $135 single/double per night • Palace Tower: $169 king per night (theserooms are closest to the Conference Area)

about Black H a t
Black Hat Briefings
These sessions are intense, informative and cutting-edge, with no vendor sales pitches! Utilizing a
proven track format, you’ll be propelled to the front lines of security, where exploits and solutions arediscussed, reviewed and even discovered onsite. Many speakers will profile never-before-shown tools
and techniques.

Black Hat Tr a i n i n g
Black Hat Training has been offering world-class training around the world. Black Hat Training canexplain even the most complicated security issues to any member in your organization in an effective,professional manner. Whether it is the network administrator or the CEO, the knowledge exchange canbe tailored to your environment. When performing risk assessments, a most critical factor is tounderstand the threats so that a proper defense can be created.

Illuminate your mind. Gain knowledge. Learn the threats of tomorrow, today.
Be challenged by the experts who are doing innovative work. Meet and network withthousands of your peers from all corners of the world at the Black Hat Briefings USA 2004–
the only technical security event to offer you the best of all worlds.

B l a c k H at
B r i e f i n gs & Training USA 2004
July 24-29, 2004 • Caesars Palace Las Ve g a s
Training: 4 days, 22 topics • Briefings: 2 days, 9 tracks, 60 speakers®

BindView is a leading provider of proactive business policy,
IT security and directory management software worldwide. Our solutions enable customers to centralize and automate
policy compliance, vulnerability assessment, directory administration and migration across the entire organization.
Customers benefit from reduced risk and improved operational efficiencies with a verifiable return on investment.
The BindView advantage? From a single console, administrators can audit, secure and manage operating systems,
applications and directories. The software suite also provides in-depth auditing and reporting, as well as closed-loop
problem identification and remediation, automating many tasks and allowing administrators to efficiently as securely
manage the IT environment. www.bindview.com

platinum sponsors
Qualys is the market-leading
Web Service Provider offering ondemand Network Security Audits and Vulnerability
Management. Qualys enables large and small organizations
to manage security from an attacker’s perspective and fix
real-world weaknesses before they are exploited.
Qualys’ Web services are used simultaneously by executives
and technicians to measure security effectiveness, enforce
security policy, and comply with regulations. Thousandsof customers rely on Qualys, including Hershey Foods,
Hewlett Packard, and The Thomson Corporation. Qualys is
headquartered in Redwood Shores, California, with global
offices in France, Germany and the U.K. www.qualys.com

gold sponsors
Cisco Systems is theworldwide leader in networking for theInternet. Cisco hardware, software andservice offerings are used to create
Internet solutions so that individuals,
companies, and countries haveseamless access to information
regardless of differences in time andplace. News and information areavailable at www.cisco.com

Black Hat Consulting
Black Hat Consulting was founded in 2000 to offer the best-of-breed services direct to you from theindustry leaders who have developed them. Our Training and Consulting divisions address the global
challenge of assuring that information in any form stays safe while providing access to it forbusiness-critical needs. Escalating privacy issues are another major concern for many organizations;network security is a critical function in most businesses today. In every case, proper awareness is thekey to maintaining a proper security posture. Chance favors the well prepared mind.
Black Hat Consulting brings world-class experts together to offer the final word in information
security. Black Hat Services have been designed by thought leaders to protect and defend yourinfrastructure and to insure that your information stays safe. If an incident has already occurred, we
can advise and assist. Black Hat Consulting also has unprecedented access to industry leaders whowork with us on custom projects. Our staff is handpicked and extremely dynamic. Black Hat issynonymous with excellence in the security industry.

NetIQ is a leading provider ofSystems & Security Management
and Web Analytics solutions.
NetIQ’s Security Management and Content Securitysolutions help customers assure the rapid and efficient
identification of, reduction of and response to risks,vulnerabilities and threats across their enterprise. Uniqueto the industry, NetIQ provides closed-loop security
management by bringing together event detection andmanagement, vulnerability and patch management andcontent security solutions that deliver unmatched breadthand depth of automated security and protection.
www.netiq.com

Configuresoft provides theworld’s leading companies with
software for maintaining granular,end-to-end control over system
configurations on Windows-based
servers, desktops, and mobile systems.
Eight of the 25 largest companies in
the world use Configuresoft software
to address configuration management
challenges and enforce compliancewith their security and IT standards.
Configuresoft is privately held andheadquartered in Colorado Springs, CO.
www.configuresoft.com

Sana Security develops andmarkets host-based intrusion
prevention software (HIPS) thatprovides the most accurate, automatedand effective detection and preventionof attacks for standard, complex andcustom server applications on major
platforms. Developed to commercialize
breakthrough Sana Adaptive ProfilingTechnology (SanAPT) developed byfounder Dr. Steven Hofmeyr, Sana
Security’s first product, Primary
Response, protects the broadest rangeof platforms and applications, andrequires fewer resources to manage,
deploy and scale by eliminating theneed for constant updating andmanagement by security experts.
www.sanasecurity.com

silver sponsors
www.foundstone.com

www.lancope.com

www.arbornetworks.com

For more information, please visit our website at www.blackhat.com or contact us via email at
info@blackhat.com.

w w w. b l a c k h a t . c o mfor updates and to register or call +1.9 16.94 4.411 2

www.intellitactics.com

www.netforensics.com

www.citadel.com

www.arcsight.com

A World Of Support
Black Hat’s support within the security industry is unmatched by any other event.
We gratefully acknowledge the participation of these organizations. You canpick up sample copies and information about them onsite at our Media Center!

fees:lead print
media partner

e-newsletters & portals

print publications

on or before July 1

after July 1$1,295$1,495

briefings
Black Hat Briefings

Register with the discount code PV04 and receive $100 off the Briefings rate

training

supporting organizations

book sponsor

registration information

All classes are two-day courses

DEEP KNOWLEDGE$1,800$2,000Automated Binary Reverse Engineering
Halvar Flake, Black Hat

Aspects of Offensive
Root-kit Technology$1,800$2,000

Designing A Secure Web Application$1,800$2,000Trust No-one, Not Even Yourself OR The Weak
Link Might Be Your Build Tools
David Maynor, ISS X-force

Discover the Hidden:
Steganography Investigator Training$2,000$2,200$1,800$2,000

Hacking by Numbers: Bootcamp$2,200$2,400

Hacking by Numbers: Chief of Staff$2,200$2,400

Hacking by Numbers: Combat$2,200$2,400

Hacking into a Cisco Network$2,000$2,200Intermediate Digital Forensics:
Civil Litigation Matters$1,800$2,000Internal Security Threats:
Identification and Prevention$2,000$2,200Microsoft Ninjitsu$2,000$2,200

Network Application Design$1,800$2,000NSA InfoSec Assessment (IAM) - Level 1$1,600$1,800NSA InfoSec Evaluation (IEM) - Level 2$2,000$2,200OSSTMM Professional Security Analyst$1,900$2,100

Securing Solaris & Locking Down Linux

$2,000$2,200Ultimate Hacking: Black Hat Edition$2,000$2,200Ultimate Hacking: Expert$2,000$2,200

Voice Over IP$2,000$2,200Web Applications:
Attacks & Defense– Advanced Edition$2,000$2,200Windows Web Application Hacking$1,700$1,900mail:

Convention & Meeting Services
P. O. Box 740
Fair Oaks, CA 95628-0740

phone:+1.916.944.4112

fax:+1.916.944.3126

Wi-Fi Lan

—Bruce Schneier, C T O , Counterpane Internet Security

Attacking Obfuscated Code with IDA Pro
Chris Eagle, Computer Science Department Naval
Postgraduate School
Practical Win32 and UNICODE Exploitations
FX, Phenöelit

Enterprise Security: A Practical Approachto Developing an Information
Security Program

To register via fax or mail, please print and complete theonline registration form at www.blackhat.com

w w w. b l a c k h a t . c o mPartial schedule shown.
Go to www.blackhat.com for complete schedule, session descriptions and to register.

At the Black Hat USA 2004 Briefings you will be placed right on the front lines. Spanning two days with nine separate tracks, ourspeakers will be releasing current “never before seen” tactics and tools. The sessions are intense, informative and cutting edge.

Analyzing Software
for Security Vunerabilities

four easy ways to register:
online: www.blackhat.com“Within seconds of getting to Black Hat I rememberthat this is not a normal security conference”

briefings

POLICY, MANAGEMENT & THE LAW

The First International Cyber War
Peter Feaver, Duke University
Kenneth Geers, Computer Investigations andOperations, Navy NCIS
When the Tables Turn
Sensepost
Hacker Court ’04: Pirates of the Potomac
Chief Judge Philip M. Pro, Chief United States
District Court Judge for the District of Nevada
Carole Fennelly, Wizard’s Keys Corp
Richard Salgado, US Department of Justice
Erin Kenneally, San Diego Supercomputer Center
Simple Nomad, NMRC & BindView
Jesse Kornblum, United States Naval Academy
Jack Hollera, Former NSA
Brian Martin
Richard Thieme, Thiemeworks
Jonathan Klein, Calence
Ken Olthoff, NSA
Caitlin Klein, Wizard’s Keys Corp
Weasel, NMRCPaul Ohm, US Department of Justice
Ryan Bulat, Wizard’s Keys Corp
Raven Alder, True North Solutions
Jennifer Granick,Stanford Law School's Center
for Internet and Society
Rebecca Bace, Infidel

PRIVACY & ANONYMITY

Evasion and Detection of Web Application
Attacks
K.K. Mookhey, Network Intelligence India. Pvt.

Tracking Prey in the Cyberforest
Bruce Potter, The Shmoo GroupThe Evolution of Incident Response
Kevin Mandia, Red Cliff Consulting

You got that with GOOGLE?
Johnny Long

Detecting 0-days Attacks With Learning
Intrusion Detection Systems
Stefano Zanero, Politecnico di Milano University,Milano, Italy

Information Hiding in Executable Binaries
Rakan El-Khalil
TURBO TALKSAPPLICATION SECURITY

Antivirus Security Software Tests
Sarah Gordon, Symantec Corporation

Managing Hackers: The Top 8 Rules for
Creating Productive Security
James C. Foster, CSC

Integer Overflows In-DepthDavid LeBlanc, Microsoft

Debunking Events Per Second (EPS) Numbers
Robert Angelino, High Tower Software

Pocket PC Abuse
Seth Fogie, Airscanner

Privacy: Do As I Say... Not as I Do
Sarah Gordon, Symantec Corporation

Hacking Without Re-inventing the Wheel
Nitesh Dhanjani, Ernst & Young’s Rudolph W.
Giuliani Advanced Security Center in New York
Justin Clark, Ernst & Young’s Rudolph W. Giuliani
Advanced Security Center in New York

Google Attacks
Patrick Chambet, EdelWeb - ON-X Group

Shoot the Messenger
Brett Moore, security-assessment.com

Managing MSIE Security in Corporate
Networks by Creating Custom Internet
Zones
Patrick Chambet, EdelWeb - ON-X Group

Blind SQL Injection Automation Techniques
Cameron Hotchkies, aka nummish, 0x90.org

Insecure IP Storage Networks: Problems with
Network Attached Storage (NAS)
Himanshu Dwivedi, @stake

All New Ø-Day
David Litchfield, Next Generation
Security Software

RFID Tags and the Question of Personal Privacy
Dan Bailey, RFID Solutions ArchitectZERO DAY DEFENSE

Acting in Milliseconds– Why Defense
Processes Need to Change
Dominique Brezinski, Pyrogen

Introduction to Embedded Security
Joe Grand, Grand Idea Studio“They’ll Never See It coming!”
Stephen Dugan, 101Labs

Defeating Automated Web Assessment Tools
Saumil Shah, NetSquare Solutions

A Historical Look at Hardware Token
Compromises
Joe Grand, Grand Idea Studio

Steganography, Steganalysis & Cryptanalysis
Michael T. Raggo, VeriSign

WorldWide WarDrive 4
Chris Hurley aka Roamer

A Comparison Buffer Overflow Prevention
Implementations & WeaknessesPeter Silberman, iDEFENSE
Richard Johnson, iDEFENSELAYER 0COMPUTER FORENSICS & LOG ANALYSIS

Privacy, Economics and Immediate
Gratification
Dr. Alessandro Acquisti, Carnegie Mellon
University & Institute for the Study ofLabor (IZA)

ZERO DAY ATTACKNoSEBrEaK– Defeating Honeynets
Thorsten Holz, RWTH-Aachen University
Maximillian Dornseif, RWTH-Aachen University
Christian Klein, University of Bonntraining
Black Hat Training is designed to raise the professional’s competence level on specific security topics.
At the Black Hat USA 2004 Training, we will be offering twenty- two different courses:

development
Analyzing Software for Security Vulnerabilities
Black Hat: Halvar FlakeWindows Web Application Hacking: Recon to RootBlack Hat: Drew Miller & Joshua Betts

Aspects of Offensive Root-kit Technology
Greg Hoglund, Rootkit.com & Jamie Butler

Web Applications: Attacks & DefenseAdvanced Edition
Saumil Udayan Shah

Network Application Design & Secure Implementation
Black Hat: Drew Miller

information security
NSA InfoSec Assessment Methodology (IAM) - Level 1
Security Horizon

OSSTMM Professional Security Analyst (OPSA)
DYAD Security

NSA InfoSec Evaluation Methodology (IEM) - Level 2
Security Horizon

investigations
Discover the Hidden:
Steganography Investigator Training
WetStone Technologies

Intermediate Digital Forensics:
Civil Litigation Matters
eForensics

managerialEnterprise Security From Day 1 to Completion:
Developing an Information Security Program
Black Hat: Chris Conacher

Hacking by Numbers: Chief of Staff
SensePostsystems administration
Microsoft Ninjitsu:
Securely Deploying MS Technologies
Timothy Mullen

Securing Solaris and Locking Down LinuxJay Bealetechnical
Designing A Secure Web Application ThroughEnlightenment and Understanding
Next Generation Security Software

Infrastructure Attacktecs™ & Defentecs™:
Voice Over IP
Steve Dugan & Rodney Thayer

Hacking by Numbers: Bootcamp
SensePost

Internal Security Threats:
Identification and Prevention
Arbor Networks

Hacking by Numbers: Combat
SensePost
Infrastructure Attacktecs™ & Defentecs™:“Hacking into a Cisco Network”
Steve Dugan

Ultimate Hacking: Black Hat Edition
Foundstone
Ultimate Hacking: Expert
Foundstone

Registerwith the code
PV04 andreceive $100 off
the Briefings
rate
Register early to ensure a seat in the class of your choice.
Go to www.blackhat.com for complete class descriptions and to register.

A complete schedule and listing of speakers, session titles
and topic descriptions can be found at www.blackhat.com