Fashonably Late - What Your Networks RTT Says About Itself

Architecture and Background

Tony Kapela - Fashonably Late - What Your Networks RTT Says About Itself Fashonably Late - What Your Networks RTT Says About Itself In this session, we will explore network fingerprinting through the use of high-frequency active probes to determine the network's delay.

Vulnerability Analysis

We will also discuss how signal analysis techniques on those delay measurements can be employed to characterize a network's performance and configuration.

Exploitation and Demonstrations

Using examples from a real-world enterprise network, various layer-1 and layer-2 features will be exposed including: a router or switch's queuing behavior, evidence of unrelated cross-traffic, and the presence of a configured monitoring or "span" port, perhaps indicating the presence of an eavesdropper.

Remediation and Defensive Strategies

Tony Kapela still has too much time on his hands. He's spoken at the past two Defcons with Adam Shand and Bruce Potter on various wireless network topics, and was a pannelist at Rubicon 5. Currently He is spending time volunteering in a network research lab at the University Of Wisconsin, Madison, and does freelance network engineering & RF system design. For balance, Tony often climbs radio towers (it's not really work, is it?) and hones his skills at bass guitar and percussion performance.