Countering Denial of Information Attacks
Greg Conti explores countering denial of information attacks at DEF CON 13, examining penetration-testing and practical defenses.
Summary
Architecture and Background
Greg Conti, Countering Denial of Information Attacks We are besieged with information every day, our inboxes overflow with spam and our search queries return a great deal of irrelevant information. In most cases there is no malicious intent, just simply too much information. However, if we consider active malicious entities, the picture darkens.
Vulnerability Analysis
Denial of information (DoI) attacks assail the human through their computer system and manifest themselves as attacks that target the human's perceptual, cognitive and motor capabilities. By exploiting these capabilities, attackers reduce the ability of humans to acquire and act upon desired information. Even if a traditional denial of service attack against a machine is not possible, the human utilizing the machine may still succumb to a DoI attack.
Exploitation and Demonstrations
Typically much more subtle (and potentially much more dangerous), DoI attacks can actively alter the decision making of humans, potentially without their knowledge. This talk explores denial of information attacks and countermeasures and uses network visualization scenarios to illustrate the problem. Greg Conti is an Assistant Professor of Computer Science at the United States Military Academy.
Remediation and Defensive Strategies
He holds a Masters Degree in Computer Science from Johns Hopkins University and a Bachelor of Science in Computer Science from the United States Military Academy. His areas of expertise include network security, information visualization and information warfare. Greg has worked at a variety of military intelligence assignments specializing in Signals Intelligence. Currently he is on a Department of Defense Fellowship and is working on his PhD in Computer Science at Georgia Tech. His work can be found at www.cc.gatech.edu/~conti and www.rumint.org.
Related talks
Main Stage·28 min
Wes Brown · Scott Dunlop
Wes Brown and Scott Dunlop explores mosquito: secure remote code execution framework at DEF CON 13, examining penetration-testing and practical defenses.
Main Stage·52 min
Mystic
Mystic details mystic, Hacking the Mind (Influence and NLP) Do you ever find your self wondering if good social engineers and highly influential people are just born that way.
Main Stage·56 min
Alexey Smirnov · Tzi-cker Chiueh
Alexey Smirnov and Tzi-cker Chiueh explores dira: automatic detection and repair of memory corruption at DEF CON 13, examining penetration-testing and practical defenses.


