Stealing Identity Management Systems

Architecture and Background

Plet: Stealing Identity Management Systems Novell's Identity Manager and related components are become fairly common in large networks. Identity management systems in general bring a number of security implications that are often not well understood.

Vulnerability Analysis

Even when best practices are followed, the system often has vulnerabilities that can be exploited. Since there seems to be little research into hacking identity management systems, the goal of this talk is to bring some recognition to security risks these systems bring to an organization.

Exploitation and Demonstrations

This talk will look at some of the inherent properties of identity management systems which can make them prone to exploitation, and look at some specific techniques for exploiting certain configurations. Plet is a security researcher who formerly worked for a consulting company, and now works for a non-profit in an attempt to restore the karma lost by being a consultant.

Remediation and Defensive Strategies

He was forced to work with Novell's idm products, and grew to hate Novell as a result. He wrote the first commercially available universal password reader.