Hardware Hacking for Software Guys
Dave King - Hardware Hacking for Software Guys Hardware hacking is cool, but it can be daunting to software guys.
Summary
Architecture and Background
Dave King - Hardware Hacking for Software Guys Hardware hacking is cool, but it can be daunting to software guys. Microcontrollers mix hardware and software basically allowing software guys to do hardware in software. Lately several products have emerged that make it even easier for software guys to get hardware up and working. Arduinos are relatively cheap, open source, all-in-one prototyping boards with a strong community behind them.
Vulnerability Analysis
All you need is a USB cable and the Arduino IDE (which is also open source). The Arduino language is easy to learn for anyone with even a basic knowledge of coding. Arduinos can be made into many different security devices including keyboard emulators, RFID readers/writers, combination lock brute forcing robots, magnetic stripe card emulators, and automated cell phone dialers. In a way, an Arduino is kind of like the hardware equivalent of scripting languages.
Exploitation and Demonstrations
They make development quick and are a good fit for many projects. In this talk you'll see examples of projects built with Arduinos and information on how they were done. You'll also see some limitations of Arduinos and some alternatives to typical Arduinos. In the end you'll see that anyone can make really cool hardware, even without a degree in electrical engineering.
Remediation and Defensive Strategies
Dave King likes to break things. He holds a Bachelor's degree in Computer Science Master's degree in Information Assurance. Dave currently does penetration testing, code review, and spews opinions on how to improve security. In past lives Dave has taught at a local college, contributed to a book on PCI compliance, owned his own PCI approved scanning vendor, and was a web developer and system admin for an eCommerce company. After 10 years working mostly on the software side of hacking, Dave now finds himself spending his free time hacking hardware. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·19 min
m010ch
An analysis of physical security flaws and key duplication vulnerabilities in municipal Knox Box rapid entry systems.
Main Stage·45 min
Brandon Wiley
Brandon Wiley details defeating Internet Censorship with Dust, the Polymorphic Protocol Engine BRANDON WILEY RESEARCHER, STEP THREE: PROFIT.
Main Stage·45 min
Brendan O'Connor
Brendan O'Connor details stalking a City for Fun and Frivolity BRENDAN O'CONNOR Tired of the government being the only entity around that can keep tabs on a whole city at once.