Advanced Physical Attacks
Eric Schmiedl details dEF CON 16 - Eric Schmiedl: Advanced Physical Attacks: Going Beyond Social Engineering and Dumpster Diving, Or, Techniques of Industrial Espionage Your stack is smash-proof.
Summary
Architecture and Background
DEF CON 16 - Eric Schmiedl: Advanced Physical Attacks: Going Beyond Social Engineering and Dumpster Diving, Or, Techniques of Industrial Espionage Your stack is smash-proof. Your dumpster is fully alarmed.
Vulnerability Analysis
And your firewall is so secure that it has former Soviet officials green with envy. So why are the developers finding their undocumented features in competitors' products, or company executives on a constant hunt for leaks and traitors?
Exploitation and Demonstrations
There's a whole lot more to doing an end-run around network security than calling up and pretending to be the help desk or hoping someone chucks a service manual in the trash Professional attackers with specific targets have a whole rash of techniques -- from using targeted employees to hiding microphones -- adopted from the world of espionage, and this talk is all about how they do what they do. Eric Schmiedl has spoken on access control systems at BlackHat 2007 and safecracking at DEFCON 14.
Remediation and Defensive Strategies
He is a member of the TOOOL.US Board of Directors, maintains a semblance of an undergraduate career at the Massachusetts Institute of Technology, and has been picking locks all his life. For copies of the slides and additional materials please see the DEF CON 16 Archive here:
Related talks
Main Stage·1 hr 54 min
Workshop
Workshop details workshop: Davix Workshop Need help understanding your gigabytes of application logs or network captures.
Main Stage·41 min
Weasel
Weasel details weasel: Compliance: The Enterprise Vulnerability Roadmap Compliance is no longer new.
Main Stage·48 min
Valsmith · Colin Ames
Valsmith and Colin Ames explores metapost-exploitation at DEF CON 16, examining emergency-systems and practical defenses.