Pen-testing the Backbone
Raven details raven, Pen-testing the Backbone Despite its crucial importance, the network backbone is often ignored or exempted from security testing.
Summary
Architecture and Background
Raven, Pen-testing the Backbone Despite its crucial importance, the network backbone is often ignored or exempted from security testing.
Vulnerability Analysis
This talk will cover how to sanely and effectively perform a pen-test against routers, switches, and similar network infrastructure equipment.
Exploitation and Demonstrations
Avenues of attack will range from the physical to the routing protocol-based, from the local to the remote, and suggested mitigation measures will also be discussed.
Remediation and Defensive Strategies
Raven splits her time between network engineering and security testing, and often tries to fuse the two, to varying degrees of success. She is equally fond of building networks for ISPs and breaking them nicely. In her Copious Spare Time, she contributes to network security books, mangles for OSVDB, kicks other people's crypto implementations, and enjoys ill-advised adventures.
Related talks
Main Stage·37 min
Fred Trotter
Fred Trotter explores operating system fingerprinting library at DEF CON 10, examining os-fingerprinting and practical defenses.
Main Stage·42 min
Simple Nomad
Simple Nomad explores a how-to regarding network mapping at DEF CON 8, examining network-mapping and practical defenses.
Main Stage·36 min
Daremoe
Daremoe - System Profiling: Target Analysis or How Crackers Find You.