USB for All!
Jesse Michael and Mickey Shkatov explores usb for all! at DEF CON 22, examining usb-security and practical defenses.
Summary
Architecture and Background
USB for all! Jesse Michael SECURITY RESEARCHER Mickey Shkatov SECURITY RESEARCHER USB is used in almost every computing device produced in recent years.
Vulnerability Analysis
In addition to well-known usages like keyboard, mouse, and mass storage, a much wider range of capabilities exist such as Device Firmware Update, USB On-The-Go, debug over USB, and more. What actually happens on the wire?
Exploitation and Demonstrations
Is there interesting data we can observe or inject into these operations that we can take advantage of? In this talk, we will present an overview of USB and its corresponding attack surface.
Remediation and Defensive Strategies
We will demonstrate different tools and methods that can be used to monitor and abuse USB for malicious purposes. Jesse Michael has been working in security for over a decade and is currently a security researcher at a Fortune 50 company who spends his time causing trouble and finding low-level hardware security vulnerabilities in modern computing platforms. Mickey Shkatov is a security researcher at a fortune 50 company covering a variety of topics in software, firmware and hardware. He also spend most of his time trying to find new ways to annoy Jesse.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Red Team Village·23 min
Mauro Cáseres
Mauro Cáseres explores weaponized keyboards and hardware keyloggers, demonstrating how physical peripherals can be backdoored for stealthy initial access.
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.