Analysing Complex Systems: the BlackBerry Case
FX explores analysing complex systems: the blackberry case at DEF CON 14, examining hardware-security and practical defenses.
Summary
Architecture and Background
FX: Analysing Complex Systems: The BlackBerry Case Abstract: When trying to analyze a complex system for its security properties, very little information is available in the beginning.
Vulnerability Analysis
If the complex system in question contains parts that the analyst cannot see or touch, proprietary hardware and software as well as large scale server software, the task doesn't get any easier.
Exploitation and Demonstrations
The talk will tell the story about how Phenoelit went about looking at RIM's BlackBerry messaging solution while focusing on the approaches tryed their expected and real effectiveness.
Remediation and Defensive Strategies
Bio: FX is the leader of the Phenoelit group and loves to hack pretty much everything with a CPU and some communication, preferably networked. FX looks back at as little as eight years of (legal) hacking with only a few Cisco IOS and SAP remote exploits, tools for hacking HP printers and protocol attacks lining the road. Professionally, FX runs SABRE Security's consulting arm SABRE Labs, specializing in reverse engineering, source code audits and on-demand R&D of industry grade security architectures & solutions.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·47 min
Michael Ossmann
Michael Ossmann explores the nsa playset: rf retroreflectors at DEF CON 22, examining hardware-security and practical defenses.
Main Stage·47 min
Pierce · Loki
Pierce and Loki explores nsa playset: gsm sniffing at DEF CON 22, examining hardware-security and practical defenses.