Pwn'ing You(r) Cyber Offenders
Piotr Duszynski explores pwn'ing you(r) cyber offenders at DEF CON 21, examining automotive-security and practical defenses.
Summary
Architecture and Background
Pwn'ing You(r) Cyber Offenders PIOTR DUSZYNSKI SENIOR SECURITY CONSULTANT, TRUSTWAVE SPIDERLABS It is commonly believed that Offensive Defense is just a theory that is difficult to be used effectively in practice, but that is not entirely true... During my talk along with a new service emulation technique, that will render standard port scanner results nearly useless and leave your attackers with an arduous analysis, I will focus on practical (automated) exploitation of a hackers' offensive toolbox.
Vulnerability Analysis
A few interesting attack vectors against software taken from the Internet will be presented. It turns out you can get pwn'ed even through your Nmap scripts if you are not careful enough.
Exploitation and Demonstrations
Piotr Duszynski (@drk1wi) is a Senior Security Consultant at Trustwave Spiderlabs. With more than 6 years of official experience in the security field, his main interest were always around breaking stuff and finding its true purpose.
Remediation and Defensive Strategies
Currently he is mostly focused on web application security and security research. Apart from that he enjoys crazy road trips around the world, free diving and good music. Materials:
Related talks
Main Stage·1 hr 45 min
Kurt Opsahl · Nate Cardozo · Mark Jaycox · Yan Zhu · Eva Galperin
Kurt Opsahl and Nate Cardozo explores ask the eff: the year in digital civil liberties at DEF CON 22, examining automotive-security and practical defenses.
Main Stage·44 min
Joshua Corman · Nicholas J Percoco
The Cavalry Year[0] & a Path Forward for Public Safety Joshua Corman CTO, SONATYPE Nicholas J Percoco VP STRATEGIC SERVICES, RAPID7 At DEF CON 21, The Cavalry was born.
Main Stage·46 min
Dr. Phil Polstra · Captain Polly
Dr. Phil Polstra and Captain Polly details cyberhijacking Airplanes: Truth or Fiction.