Don't Stand So Close to Me: an Analysis of the NFC Attack Surface
Charlie Miller explores don't stand so close to me: an analysis of the nfc attack surface at DEF CON 20, examining automotive-security and practical defenses.
Summary
Architecture and Background
Copy of the slides for this talk are here: Don't Stand So Close To Me: An Analysis of the NFC Attack Surface Charlie Miller Principal Research Consultant, Accuvant Labs Near Field Communication (NFC) has been used in mobile devices in some countries for a while and is now emerging on devices in use in the United States. This technology allows NFC enabled devices to communicate with each other within close range, typically a few centimeters. It is being rolled out as a way to make payments, by using the mobile device to communicate credit card information to an NFC enabled terminal. It is a new, cool, technology.
Vulnerability Analysis
But as with the introduction of any new technology, the question must be asked what kind of impact the inclusion of this new functionality has on the attack surface of mobile devices. In this paper, we explore this question by introducing NFC and its associated protocols. Next we describe how to fuzz the NFC protocol stack for two devices as well as our results. Then we see for these devices what software is built on top of the NFC stack.
Exploitation and Demonstrations
It turns out that through NFC, using technologies like Android Beam or NDEF content sharing, one can make some phones parse images, videos, contacts, office documents, even open up web pages in the browser, all without user interaction. In some cases, it is even possible to completely take over control of the phone via NFC, including stealing photos, contacts, even sending text messages and making phone calls. So next time you present your phone to pay for your cab, be aware you might have just gotten owned. Charlie Miller is Principal Research Consultant at Accuvant Labs.
Remediation and Defensive Strategies
He was the first with a public remote exploit for both the iPhone and the G1 Android phone. He is a four time winner of the CanSecWest Pwn2Own competition. He has authored three information security books and holds a PhD from the University of Notre Dame. He is currently being held in a maximum security prison in Cupertino, but hopes to be released soon for good behavior. Twitter: @0xcharlie
Related talks
Main Stage·1 hr 22 min
Alberto Garcia Illera
Alberto Garcia Illera details how to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country.
Main Stage·40 min
Chema Alonso · Manu The Sur
Chema Alonso and Manu The Sur explores owning bad guys with javascript botnets at DEF CON 20, examining automotive-security and practical defenses.
Main Stage·42 min
Dave Brown
Dave Brown details copy of the slides for this talk are here: DIY Electric Car Dave Brown Electric Vehicles are an exciting area of developing technology entering the mainstream market.