Save the Date: Cooling Spray, Popcorn, and Live Hacking at the IT Cinema

The BWG Systemhaus Group, together with aramido, invites you to the IT Cinema 2020 at Kulisse Ettlingen. Around the theme of „Cyber Defense,“ first-class presentations by IT experts will be given from morning till evening, accompanied by a varied supporting program and catering. Those who want to protect themselves effectively must know how attacks are carried out. That's why Andreas Sperber and Christoph Biedl from aramido GmbH demonstrate a snippet of their daily work as information security consultants: during a live hacking presentation, they perform a Cold Boot attack and show the audience how disk encryption can be bypassed. In the evening, guests are invited to wind down the day with popcorn and a movie in the cinema hall of the Kulisse. Anyone who wants to register themselves, their friends, and colleagues can do so via the BWG Systemhaus Group website via the registration form.

The Speaker

The speaker Andreas Sperber is co-founder and CEO of the aramido GmbH . He deals intensively with the topic of information security. In his work, he supports medium-sized companies that must meet the digital challenges of today's time in an economically efficient manner.

The Cold Boot Attack: Live Hacking with Cooling Spray

Microsoft's BitLocker, Apple's FileVault, and LUKS for Linux operating systems enable the encryption of data and thus protect it from unauthorized access. Especially in a business environment, devices are often equipped with the latest technologies: TPM chips, together with a PIN required for starting, form the basis for disk encryption. A secure password, sometimes supplemented by a hardware token, belongs to the usual company standard for logging into the operating system. The security of the data is, after all, of high importance. Only those who know the password can access it – or so it is thought. That this is a misconception, security researchers showed as early as 2008: if they had physical access to a computer that was switched on or „sleeping“ (standby mode), they could read the key used for encryption from the working memory. More than ten years after this discovery, so-called Cold Boot attacks are still possible.

For the white-hat hackers of aramido, such attacks are part of their interesting toolkit. They have created tools that read the working memory to perform the Cold Boot attack according to today's standards. At the presentation in the BWG IT Cinema they demonstrate the attack live and "ice-cold" with cooling spray on a computer with disk encryption. Afterwards, they give tips on which measures still make it possible to protect one's personal data. After the presentation, the joint Get Together provides an opportunity for professional and personal exchange.