RuhrSec 2025 | Behind Closed Curtains - Insights on Security Vulnerabilities in Smartphone Basebands

Описание: RuhrSec is the annual English speaking IT security conference with cutting-edge security talks by renowned experts. RuhrSec is organized by Hackmanit.
🔽 More information …

———

Talk // Behind Closed Curtains - Insights on Security Vulnerabilities in Smartphone Basebands

Abstract // In an era where smartphones are integral to our daily lives, securing them against vulnerabilities is crucial to protect our overall digital privacy. Consequently, mobile operating systems have been hardened, prompting exploits to become increasingly sophisticated and costly. Threat actors are, therefore, exploring cellular basebands as an alternative and more attractive avenue to compromise the security of smartphones.

In this talk, I provide new insights on the security of modern smartphone basebands. I will outline several vulnerabilities in commercial basebands, affecting thousands of different smartphone models. Besides concrete vulnerabilities, you will learn about the systemic issues in the cellular protocol specifications and firmware lifecycle, promoting the likelihood and longevity of such vulnerabilities.

———

Biography // Daniel Klischies is a final-year PhD student at the Chair for Security and Privacy of Ubiquitous Systems at Ruhr University Bochum. His main research objective is to understand and improve the security properties of firmware, currently focusing on cellular devices. He prefers to employ a diverse range of methodologies in problem-solving, such as binary analysis, formal methods, and empirical studies. Prior to his PhD studies, Daniel was a software engineer for data analytics solutions in the automotive industry.

Speaker //
Daniel Klischies
X –   / danielklischies  
Website – https://www.danielklischies.net/

➡️ Slides - Download
https://www.ruhrsec.de/downloads/slid...

———

🚀 Subscribe to Our Channel:
   / @hackmanit-it-security  

👉 Read More About Interesting It Security Topics on Our Blog:
https://hackmanit.de/en/blog-en

✍️ Want a Deeper Dive
Training courses in Single Sign-On (OAuth, OpenID Connect, and SAML), Secure Web Development, TLS, and Web Services are available here:
https://hackmanit.de/en/training/port...

———

🌍 RuhrSec Conference Website: https://www.ruhrsec.de
🌍 Visit Our Website - Hackmanit: https://hackmanit.de/en

✖️ Follow RuhrSec on X:   / ruhrsec  
✖️ Follow Hackmanit on X:   / hackmanit  

✔ Follow RuhrSec on Linkedin:   / ruhrsec  
✔ Follow Hackmanit on Linkedin:   / hackmanit  

Follow Hackmanit on XING: https://www.xing.com/pages/hackmanitgmbh

———

Thanks for your attention and support. Stay secure. 🫶


#digitalprivacy #vulnerabilities #exploits #hacking #RuhrSec #itsecurity #itsicherheit #cybersecurity #cybersicherheit