StegoFS
James Shewmaker explores stegofs at DEF CON 16, examining emergency-systems and practical defenses.
Summary
Architecture and Background
DEF CON 16 - James Shewmaker: StegoFS This talk will reintroduce classic steganographic techniques to use with serializing, watermarking, or stashing your data in the latest Internet meme. Why not let everyone who is forwarding yet another painful nut-shot AFHV clip store your data for you?
Vulnerability Analysis
We will create a simple filesystem that is robust enough to survive conversion, and building a structure to organize the data, focusing on indirection and fault tolerance. Jim has over 15 years experience in IT, primarily developing appliances for automation and security for broadcast radio, Internet, and satellite devices.
Exploitation and Demonstrations
He is one of the first GIAC Platinum certified Malware (GSM) experts and a SANS Institute Instructor. Jim's primary focus areas are investigations, penetration testing, and analysis.
Remediation and Defensive Strategies
He is actively contributing to SANS courseware and occasional FreeBSD port contributor. For copies of the slides and additional materials please see the DEF CON 16 Archive here:
Related talks
Main Stage·1 hr 54 min
Workshop
Workshop details workshop: Davix Workshop Need help understanding your gigabytes of application logs or network captures.
Main Stage·41 min
Weasel
Weasel details weasel: Compliance: The Enterprise Vulnerability Roadmap Compliance is no longer new.
Main Stage·48 min
Valsmith · Colin Ames
Valsmith and Colin Ames explores metapost-exploitation at DEF CON 16, examining emergency-systems and practical defenses.