First We Break Your Tag, Then We Break Your Systems
Lukas Grunwald explores first we break your tag, then we break your systems at DEF CON 14, examining stored-value-cards and practical defenses.
Summary
Architecture and Background
Lukas Grunwald: First We Break Your Tag, Then We Break Your Systems Attacks to Rfid Systems Abstract: This talk provides an overview of new RFID Technologie used for Dual-Interfaces Cards (Credit cards, Ticketing and Passports), and RFID Tags with encryption and security features.
Vulnerability Analysis
Problems and attacks to these security features are discussed and attacks to these features are presented.
Exploitation and Demonstrations
After dealing with the tags an overview to the rest of a RFID-implementation, middelware and backend database and the results of special attacks to this infrastructure is given.
Remediation and Defensive Strategies
At the end of this talk there is a practical demonstration of these discussed attacks. Bio: Lukas Grunwald works for a German Security company, and has security experience over 20 years. As hobby he writes for the iX Magazine, and other security publications. He is also the head of the Hacking Lab where new technology is evaluated.
Related talks
Main Stage·47 min
Strom Carlson
Strom Carlson explores hacking fedex kinko's: how not to implement stored-value card systems at DEF CON 14, examining stored-value-cards and practical defenses.
Main Stage·49 min
Major Malfunction
Major Malfunction details abstract: It's been a year since Major Mal gave his talk on hotel IR systems, and things haven't got any better.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.