Black Ops 2008
Dan Kaminsky explores black ops 2008 at DEF CON 16, examining cyber-policy and practical defenses.
Summary
Architecture and Background
DEF CON 16 - Dan Kaminsky: Black Ops 2008 DNS is at the heart of every network -- when a web site is browsed to, it says where the site is, and when an email is sent, DNS says where to.
Vulnerability Analysis
The answer is usually correct -- but not always.
Exploitation and Demonstrations
Six months ago, it became clear that there was an ancient design flaw, present in the original 1983 specification for DNS, that would allow any attacker to insert their own addresses for DNS names.
Remediation and Defensive Strategies
An industry wide bug hunt commenced, culminating in a simultaneous release date of patches for virtually all platforms. We will talk about the issue, and about how a partnership between industry competitors and researchers helped protect all our customers. For copies of the slides and additional materials please see the DEF CON 16 Archive here:
Related talks
Main Stage·40 min
Zac Franken
Zac Franken details zac Franken: Is that a unique credential in your pocket or are you just happy to see me.
Main Stage·34 min
Vic Vandal
Vic Vandal explores keeping secret secrets secret and sharing secret secrets secretly at DEF CON 16, examining cyber-policy and practical defenses.
Main Stage·49 min
Eric Smith · Dr. Shana Dardan
Eric Smith and Dr. Shana Dardan explores medical identity theft at DEF CON 16, examining cyber-policy and practical defenses.