Advanced Network Reconnaissance Techniques
Fyodor explores advanced network reconnaissance techniques at DEF CON 11, examining intrusion-prevention and practical defenses.
Summary
Architecture and Background
Fyodor - Advanced Network Reconnaissance Techniques Advanced Network Reconnaissance Techniques Fyodor will present real-life examples of common network and firewall configurations, then demonstrate practical techniques for exploring and mapping those networks.
Vulnerability Analysis
He will cover IDS evasion, "phantom ports", advanced ping sweeps, firewall circumvention, DNS hackery, IPv6, and more using his free Nmap scanner and many other Open Source tools.
Exploitation and Demonstrations
Fyodor authored the popular Nmap Security Scanner, which was named security tool of the year by Linux Journal, Info World, and the Codetalker Digest.
Remediation and Defensive Strategies
He also maintains the Insecure.Org security resource site and has authored seminal papers detailing techniques for stealth portscanning, remote operating system detection via TCP/IP stack fingerprinting, and the IPID Idle Scan. He is a member of the Honeynet project, a co-author of "Know Your Enemy: Honeynets", and a frequent speaker at conferences such as Defcon, CanSecWest, and OSDEM. He can be reached at fyodorinsecure.org or approached as he stumbles out of the Alexis bar most Defcon evenings.
Related talks
Main Stage·45 min
SensePost
SensePost - Putting The Tea Back Into CyberTerrorism Putting The Tea Back Into CyberTerrorism Many talks these days revolve around cyber terrorism and cyber warfare.
Main Stage·49 min
Joe Klein
Joe Klein - Information Leakage --- You posted what.
Main Stage·43 min
Gregory Pickett
Gregory Pickett details let's screw with nmap GREGORY PICKETT PENETRATION TESTER, HELLFIRE SECURITY Differences in packet headers allow tools like nmap to fingerprint operating systems.