Theft of Service Attacks

Architecture and Background

Robert Sheehy - Theft of Service Attacks Theft of Service Attacks This talk will focus on the security holes prevalent in many subscription based service products such as Internet dial-up service, web hosting, software purchases, and satellite television.

Vulnerability Analysis

Specifically the talk will focus on various billing system attacks, application attacks, increasing account privileges to gain unauthorized or extended access to subscription content, and bypassing account restrictions; It will be demonstrated how these attacks are performed, and how to detect and react to them.

Exploitation and Demonstrations

Robert Sheehy has been a computer enthusiast/hacker for over 13 years, He has been specializing in Unix and Windows system administration & security for the past 8 years.

Remediation and Defensive Strategies

Sheehy has been working most recently as a consultant completing various projects such as supporting high availability Solaris clusters for Morgan Stanley and developing an embedded Linux distribution for McDonalds. Sheehy also previously taught certification prep classes and college classes on introductory programming. This is Sheehy's first year giving presentations at Defcon.