Things That Go "Bump" in the Night
Marc Weber Tobias explores things that go "bump" in the night at DEF CON 14, examining cyber-policy and practical defenses.
Summary
Architecture and Background
Marc Weber Tobias: Things That Go "Bump" in the night: An Analysis of Current and Emerging Threats to Physical Security Abstract: Although there has been a significant amount of attention paid to the topic of late, there are complexities that must be understood to accurately gauge the impact of "Bumping Locks" on physical security. This talk will explore the vulnerabilities and exposures of virtually all pin-tumbler locks, highlighting the legal issues surrounding the possession and use of bump-keys and bumping implements. Case examples and demonstrations detailing a major security flaw and vulnerability in locks used by the federal government and a private sector corporation that affect millions of users will be presented. Bio: Marc Weber Tobias is an Investigative Attorney and polygraph examiner in the United States.
Vulnerability Analysis
He has written five law enforcement textbooks dealing with criminal law, security, and communications. Marc Tobias was employed for several years by the Office of Attorney General, State of South Dakota, as the Chief of the Organized Crime Unit. As such, he directed felony investigations involving frauds as well as violent crimes. Mr.
Exploitation and Demonstrations
Tobias is the author of the 1400 page textbook and multimedia collection "Locks, Safes, and Security: An International Police Reference". He consults on lock security and his law firm handles investigations for government and private clients. Matt Fiddler leads a Threat Management Team for a large Fortune 100 Company. Mr.
Remediation and Defensive Strategies
Fiddler?s research into lock bypass techniques have resulted in several public disclosures of critical lock design flaws. Mr. Fiddler began his career as an Intelligence Analyst with the United States Marine Corps. Since joining the commercial sector in 1992, he has spent the last 13 years enhancing his extensive expertise in the area of Unix and Network Engineering, Security Consulting, and Intrusion Analysis. Currently Mr. Fiddler is the Connecticut Chapter President and active Board Member of Locksport International.
Related talks
Main Stage·40 min
Zac Franken
Zac Franken details zac Franken: Is that a unique credential in your pocket or are you just happy to see me.
Main Stage·34 min
Vic Vandal
Vic Vandal explores keeping secret secrets secret and sharing secret secrets secretly at DEF CON 16, examining cyber-policy and practical defenses.
Main Stage·49 min
Eric Smith · Dr. Shana Dardan
Eric Smith and Dr. Shana Dardan explores medical identity theft at DEF CON 16, examining cyber-policy and practical defenses.


