Attacks and Defences

•

3 recomendaciones•1,097 vistas

Presentation by Marco Slaviero at the University of Pretoria to the Tuks Linux User Group in 2010. The aim of this presentation is to promote information security. The presentation begins with a look at a few recent attacks. Cloud computing is briefly discussed. The presentation ends with a discussion on Amazon web services and its security.

Tecnología

Attacks and defences Or, really cool hacks ,[object Object]

About Us ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Why this talk? ,[object Object],[object Object],[object Object],[object Object]

x509 attack: MD5 ,[object Object],[object Object],[object Object],[object Object]

x509 attack: MD5 ,[object Object],[object Object],[object Object]

x509 attack: MD5 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

x509 attack: CN ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

x509 attack: CN ,[object Object],[object Object]

x509 attack: CN ,[object Object],[object Object],[object Object],[object Object],[object Object]

Validating the cert ,[object Object],[object Object],[object Object],[object Object],[object Object]

PKI attacks: cert checking ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

PKI attacks: cert checking ,[object Object],[object Object]

Win32: privilege escalation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Win32: 8086 simulator ,[object Object],[object Object],[object Object],[object Object],[object Object]

Win32: exploit description ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

FreeBSD: rtld ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

FreeBSD: rtld code ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

FreeBSD: rtld ,[object Object],[object Object],[object Object],[object Object],[object Object]

e107 Backdoor ,[object Object],[object Object],[object Object],[object Object],[object Object]

e107: backdoor code ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

e107 Backdoor ,[object Object],[object Object]

Let’s talk cloud computing ,[object Object]

What drives cloud adoption? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Problems with cloud testing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

BlackHat talk summary ,[object Object],[object Object],[object Object]

Amazon EC2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Danger ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Can we get someone to run our machine? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

But there’s more ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What other cloud hacks? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Linux ,[object Object],[object Object],[object Object],[object Object],[object Object]

Questions? [email_address] ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Attendees / speakers welcome Great venue for 1st-time speakers Look out for announcements.

Más contenido relacionado

La actualidad más candente

PowerShell Inside Out: Applied .NET Hacking for Enhanced Visibility by Satosh...CODE BLUE

Defcon 22-colby-moore-patrick-wardle-synack-drop camPriyanka Aash

Introduction of ShinoBOT (Black Hat USA 2013 Arsenal)Shota Shinogi

Vulnerability desing patternsPeter Hlavaty

TENTACLE: Environment-Sensitive Malware Palpation(PacSec 2014)FFRI, Inc.

digitalSTROM Developer Day 2011: Wie Heimelektronik und digitalSTROM zusammen...digitalSTROM.org

Stealthy, Hypervisor-based Malware AnalysisTamas K Lengyel

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...Felipe Prado

Docker app armor_usecaseKazuki Omo

You didnt see it’s coming? "Dawn of hardened Windows Kernel" Peter Hlavaty

Rainbow Over the Windows: More Colors Than You Could ExpectPeter Hlavaty

Defcon 29 Adversary Village: PurpleSharp - Automated Adversary SimulationMauricio Velazco

Possibility of arbitrary code execution by Step-Oriented Programmingkozossakai

Guardians of your CODEPeter Hlavaty

Take a Jailbreak -Stunning Guards for iOS Jailbreak- by Kaoru OtsukaCODE BLUE

Nagios Conference 2011 - Mike Weber - Training: Monitoring Linux Mail Servers...Nagios

Hernan Ochoa - WCE Internals [RootedCON 2011]RootedCON

Современные технологии и инструменты анализа вредоносного ПО_PHDays_2017_Pisk...Ivan Piskunov

Exploiting buffer overflowsPaul Dutot IEng MIET MBCS CITP OSCP CSTM

[CB19] Attacking DRM subsystem to gain kernel privilege on Chromebooks by Di ...CODE BLUE

La actualidad más candente (20)

PowerShell Inside Out: Applied .NET Hacking for Enhanced Visibility by Satosh...

Defcon 22-colby-moore-patrick-wardle-synack-drop cam

Introduction of ShinoBOT (Black Hat USA 2013 Arsenal)

Vulnerability desing patterns

TENTACLE: Environment-Sensitive Malware Palpation(PacSec 2014)

digitalSTROM Developer Day 2011: Wie Heimelektronik und digitalSTROM zusammen...

Stealthy, Hypervisor-based Malware Analysis

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...

Docker app armor_usecase

You didnt see it’s coming? "Dawn of hardened Windows Kernel"

Rainbow Over the Windows: More Colors Than You Could Expect

Defcon 29 Adversary Village: PurpleSharp - Automated Adversary Simulation

Possibility of arbitrary code execution by Step-Oriented Programming

Guardians of your CODE

Take a Jailbreak -Stunning Guards for iOS Jailbreak- by Kaoru Otsuka

Nagios Conference 2011 - Mike Weber - Training: Monitoring Linux Mail Servers...

Hernan Ochoa - WCE Internals [RootedCON 2011]

Современные технологии и инструменты анализа вредоносного ПО_PHDays_2017_Pisk...

Exploiting buffer overflows

[CB19] Attacking DRM subsystem to gain kernel privilege on Chromebooks by Di ...

Destacado

Holistic Healing Youth Development ProgramSRIKRISHAN Sharma

Torana School PhotosInfotrex Services Pvt. Ltd.

Can Personalized Medicine Save the Health Care System?Leonard Davis Institute of Health Economics

1siantar_man

Health promotion and integrative health care alternative budget proposalCollege of Medicine, University of the Philippines Manila

Unit%202%20 %20 Community%20 Health%20 Nursing%20system%20and%20processgangpark3

Integrative Medicine Yoga MeditationMedicineAndHealthNeurolog

female feticide/Save girl childParas Pareek

Sanitation and hygiene promotion programming guidanceSekretariat Nasional

Sea Defences Revisiondonotreply16

Defences to crimeCawthra Park Secondary School

Overview Of Naturopathic Medicinejmckenziend

Allopathy vs homeopathy vs ayurvedaHealthmania Circle

Central council for health an family welfareSabeena Sasidharan

Meditation power pointtechno UCH

Effects Of Yoga And Meditationtsoal

Nationals policies,Plans,and Programme , Community Health Nursing India Paul Ebenezer

Indian adoption lawsAltacit Global

Basic Principal Of Naturopathyumashankar

Yoga and meditation lectureMaureen Spencer, RN, M.Ed.

Destacado (20)

Holistic Healing Youth Development Program

Torana School Photos

Can Personalized Medicine Save the Health Care System?

Health promotion and integrative health care alternative budget proposal

Unit%202%20 %20 Community%20 Health%20 Nursing%20system%20and%20process

Integrative Medicine Yoga Meditation

female feticide/Save girl child

Sanitation and hygiene promotion programming guidance

Sea Defences Revision

Defences to crime

Overview Of Naturopathic Medicine

Allopathy vs homeopathy vs ayurveda

Central council for health an family welfare

Meditation power point

Effects Of Yoga And Meditation

Nationals policies,Plans,and Programme , Community Health Nursing India

Indian adoption laws

Basic Principal Of Naturopathy

Yoga and meditation lecture

Similar a Attacks and Defences

Inside the Matrix,How to Build Transparent Sandbox for Malware AnalysisChong-Kuan Chen

Serverless security: defence against the dark artsYan Cui

Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysissecurityxploded

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...Felipe Prado

DTS Solution - Yehia Mamdouh - Release your pet worm on your infrastructure....Shah Sheikh

Ransomware for fun and non-profitYouness Zougar

Security in serverless worldYan Cui

Sembang2 Keselamatan It 2004Linuxmalaysia Malaysia

Understand studyAntonio Costa aka Cooler_

Lab-10 Malware Creation and Denial of Service (DoS) In t.docxpauline234567

The Good The Bad The VirtualClaudio Criscione

Microarmy - by J2 LabsJames Dennis

Chasing the Adder. A tale from the APT world...Stefano Maccaglia

Defending Against Attacks With RailsTony Amoyal

Gartner Security & Risk Management Summit 2018Paula Januszkiewicz

[Confidence0902] The Glass Cage - Virtualization SecurityClaudio Criscione

Security & ethical hackingAmanpreet Singh

Advanced System Security and Digital ForensicsDr. Ramchandra Mangrulkar

CEHv10 M0 Introduction.pptxYasserOuda2

Unmasking or De-Anonymizing YouE Hacking

Similar a Attacks and Defences (20)

Inside the Matrix,How to Build Transparent Sandbox for Malware Analysis

Serverless security: defence against the dark arts

Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysis

DEF CON 27 - workshop ANTHONY ROSE - introduction to amsi bypasses and sandbo...

DTS Solution - Yehia Mamdouh - Release your pet worm on your infrastructure....

Ransomware for fun and non-profit

Security in serverless world

Sembang2 Keselamatan It 2004

Understand study

Lab-10 Malware Creation and Denial of Service (DoS) In t.docx

The Good The Bad The Virtual

Microarmy - by J2 Labs

Chasing the Adder. A tale from the APT world...

Defending Against Attacks With Rails

Gartner Security & Risk Management Summit 2018

[Confidence0902] The Glass Cage - Virtualization Security

Security & ethical hacking

Advanced System Security and Digital Forensics

CEHv10 M0 Introduction.pptx

Unmasking or De-Anonymizing You

Más de SensePost

objection - runtime mobile explorationSensePost

Vulnerabilities in TN3270 based ApplicationSensePost

Ruler and Liniaal @ Troopers 17SensePost

Introducing (DET) the Data Exfiltration ToolkitSensePost

ZaCon 2015 - Zombie Mana AttacksSensePost

Improvement in Rogue Access Points - SensePost Defcon 22SensePost

Heartbleed OverviewSensePost

Botconf 2013 - DNS-based Botnet C2 Server DetectionSensePost

Rat a-tat-tatSensePost

Hacking Z-Wave Home Automation SystemsSensePost

Offence oriented DefenceSensePost

Threats to machine cloudsSensePost

Inside .NET Smart Card Operating SystemSensePost

SNMP : Simple Network Mediated (Cisco) PwnageSensePost

Its Ok To Get HackedSensePost

Web Application HackingSensePost

Putting the tea back into cyber terrorismSensePost

Major global information security trends - a summarySensePost

Corporate Threat Modeling v2SensePost

State of the information security nationSensePost

Más de SensePost (20)

objection - runtime mobile exploration

Vulnerabilities in TN3270 based Application

Ruler and Liniaal @ Troopers 17

Introducing (DET) the Data Exfiltration Toolkit

ZaCon 2015 - Zombie Mana Attacks

Improvement in Rogue Access Points - SensePost Defcon 22

Heartbleed Overview

Botconf 2013 - DNS-based Botnet C2 Server Detection

Rat a-tat-tat

Hacking Z-Wave Home Automation Systems

Offence oriented Defence

Threats to machine clouds

Inside .NET Smart Card Operating System

SNMP : Simple Network Mediated (Cisco) Pwnage

Its Ok To Get Hacked

Web Application Hacking

Putting the tea back into cyber terrorism

Major global information security trends - a summary

Corporate Threat Modeling v2

State of the information security nation

Último

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingEdi Saputra

🐬 The future of MySQL is Postgres 🐘RTylerCroy

Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...Principled Technologies

Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal

MINDCTI Revenue Release Quarter One 2024MIND CTI

The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los

TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc

Scaling API-first – The story of a global engineering organizationRadu Cotescu

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Why Teams call analytics are critical to your entire businesspanagenda

presentation ICT roal in 21st century educationjfdjdjcjdnsjd

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsRoshan Dwivedi

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FMESafe Software

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...apidays

Boost PC performance: How more available memory can improve productivityPrincipled Technologies