Learn How Privacy Laws Can Be Used for Identity Theft at Black Hat USA

Even the most well-meaning cybersecurity laws and procedures can be subverted by a sufficiently devious mind, and there’s no better place to learn how they do it than Black Hat USA this summer. In fact, there’s a whole Human Factors track at the event that is dedicated to how human decisions affect the security of your organization, and how engineering and technology can help.

GDPArrrrr: Using Privacy Laws to Steal Identities is a good example. It’s a 50-minute Briefing about how the General Data Protection Regulation’s “Right of Access” provision (which gives individuals the right to access their personal data) can be easily abused by social engineers to steal sensitive information.

After a survey of more than 150 companies, a security researcher will demonstrate that organizations willingly provide highly sensitive information in response to GDPR right of access requests with little or no verification of the individual making the request, providing one of the most reliable general phishing attack typologies to date.

In Deconstructing the Phishing Campaigns that Target Gmail Users you’ll get a rare inside look at Gmail telemetry to illuminate the differences between phishing groups in terms of tactics and targets. Then, leveraging insights from the cognitive and neuro-science fields on user's susceptibility and decision-making, you’ll learn why different types of users fall for phishing and how those insights can be used to improve phishing protections.

And don’t miss out on Detecting Deep Fakes with Mice, a fascinating look at how researchers worked to train humans, mice, and machines to detect fake speech in "deep fake" videos, using a “deep fake” data set provided by Google. For machines, you'll look at two approaches based on machine learning: one based on game theory called generative adversarial networks (GAN), and one based on mathematical depth-wise convolutional neural networks (Xception). For biological systems, researchers gathered a broad range of human subjects as well as mice, which don't understand words but respond to the stimulus of sounds, and can be trained to recognize real vs. fake phonetic construction. Come to this Briefing and learn who did best: the mice or the machines!

Further information on these cutting-edge Briefings and many more are available now on the Black Hat USA Briefings page, which is live now with full details on this year's schedule!

Black Hat USA returns to the Mandalay Bay in Las Vegas August 3-8, 2019. For more information on what’s happening at the event and how to register, check out the Black Hat website.