talk · advanced · evergreen

27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

basti0007 · Dec 29, 2010 · 1h 14m

What this video covers

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Why it surfaced in Hacker News

HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.

9recommendation score
8
distinct recommenders
7
recommendation months
4
strong recommendations

Recommendation context

Short excerpts from positive mentions. Open the source to read the full Hacker News discussion.

“I watched an excellent video explaining the 0-day vulnerabilities that stuxnet used”

“It's well worth watching anyway, lots of good info on the various exploits used by stuxnet, down to the opcode level.”

“I was on the edge of my seat!”

Watch on YouTube ↗