Canary: Keeping Your Digital Assets Safer
Rob Bathurst and Jeff Thomas explore deploying honeytokens and canary files to detect unauthorized lateral movement and insider threat access early.
Summary
Architecture and Background
We will present our research into the technical and political problems underlying SSL/TLS. We will also demonstrate a tool, currently called “Canary”, that will allow all types users to validate the digital certificates presented by services on the Internet.
Vulnerability Analysis
Evilrob is a Security Engineer and Penetration Tester with over 14 years of experience with large network architecture and engineering. His current focus is on network security architecture, tool development, and high-assurance encryption devices.
Exploitation and Demonstrations
He currently spends his days contemplating new and exciting ways to do terrible things to all manner of healthcare related systems in the name of safety. xaphan is a "Senior Cyber Security Penetration Testing Specialist" for a happy, non-threatening US government agency.
Remediation and Defensive Strategies
He has been a penetration tester for 17 years, but maintains his sanity with a variety of distractions. He is the author of several ancient and obsolete security tools and the creator of DEFCOIN.
Related talks
Main Stage·48 min
Sean Bodmer
Sean Bodmer explores analyzing intrusions and intruders at DEF CON 15, examining intrusion-detection and practical defenses.
Main Stage·44 min
Scott Moulton
Scott Moulton details scott Moulton: Re-Animating Drives - Advanced Data Recovery NEW.
Main Stage·48 min
Rich Murphey
Rich Murphey explores windows vista log forensics at DEF CON 15, examining intrusion-detection and practical defenses.