Last-minute paper: Unravelling Stuxnet

Holly Stewart Microsoft
Peter Ferrie Microsoft
Alexander Gostev Kasperksy Lab

  download slides (PDF)

Detailed analysis of Stuxnet has uncovered that Stuxnet is one of the most complex, thought-out, and overdesigned malware discovered in the wild to date. This talk will provide a timeline of events and discoveries around Stuxnet. And then we will unravel the malware, component by component, providing details and reasoning behind the design.

• Stuxnet overview and timeline
• Stuxnet basics
• The target - SCADA
• Techniques for bypassing standard security controls - Stolen certificates and more...
• Distribution and Propagation - Shortcut vulnerability and more...