One of the best parts of hacker summer camp is the glitz and glam of the Vegas Strip. Many have explored hacking casinos (on and off stage). Unfortunately, it’s not like it is portrayed in the Ocean’s franchise… In real life there’s much less action, no George Clooney, and it’s a lot harder to pull off a heist than it seems.

Or is it? Well, fortunately we’re not your typical hackers and this isn’t an Ocean’s movie. We’re AI and Cyber experts, and we use the latest hacking and adversarial machine learning techniques to socially engineer our target, and then disrupt, deceive and disclose information from Artificial Intelligence systems.

We chose our target very carefully: Canberra Casino. It’s the best casino in our city… it’s also the only casino but that’s not the point.

The casino industry is at an interesting inflection point. Many large casinos have already adopted AI for surveillance and gameplay monitoring, smaller casinos are starting to make the transition, and there’s only a couple of companies in the world that provide this software. It’s ripe for exploitation.

In this talk, we are going to show you how we socially engineer our target, bypass casino AI systems - facial recognition, surveillance systems and game monitoring - and deepfake our way out of trouble.

AI Security is the new cyber security threat, and attacks on AI systems could have broad implications including misdiagnoses in medical imaging, navigation errors in autonomous vehicles… oh, and successful casino heists.

This talk was last delivered at DEF CON in Las Vegas, so we come with many lessons learnt straight from the source (and may or may not be on a few watch lists).