Attacking the Internet of Things Using Time
Paul McMillan details attacking the Internet of Things using Time Paul McMillan SECURITY ENGINEER, NEBULA Internet of Things devices are often slow and resource constrained.
Summary
Architecture and Background
Attacking the Internet of Things using Time Paul McMillan SECURITY ENGINEER, NEBULA Internet of Things devices are often slow and resource constrained. This makes them the perfect target for network-based timing attacks, which allow an attacker to brute-force credentials one character at a time, rather than guessing the entire string at once.
Vulnerability Analysis
We will discuss how timing attacks work, how to optimize them, and how to handle the many factors which can prevent successful exploitation. We will also demonstrate attacks on at least one popular device.
Exploitation and Demonstrations
After this presentation, you will have the foundation necessary to attack your own devices, and a set of scripts to help you get started. Paul McMillan is a security engineer at Nebula.
Remediation and Defensive Strategies
He also works on the security teams for several open source projects. When he's not building or breaking the internet, he enjoys, cocktails and photography.
Related talks
Main Stage·47 min
Nir Valtman
Nir Valtman explores bug bounty programs evolution at DEF CON 22, examining penetration-testing and practical defenses.
Main Stage·35 min
Nemus
Nemus details an Introduction to Back Dooring Operating Systems for Fun and Trolling Nemus SECURITY RESEARCHER So you want to setup a back door.
Main Stage·42 min
Major Malfunction
Major Malfunction explores old skewl hacking: porn free! at DEF CON 22, examining penetration-testing and practical defenses.