Saturday 6 August 2011

Black Hat 2011: Dan Kaminsky, the security network of research topics

Weak authentication and acceptance of mediation by revealing new opportunities superstar DNSSEC after security researcher Dan Kaminsky, years of neglect and causes quickly returned to its roots as a safety net during the annual promotion of Black Ops Black Hat 2011 today.

Kaminsky, not only lose a few pounds, but the jeans and black T-shirt, a jacket and tie to look for the brand, which is a new field of research a lot of people. Emphasizes peer-to-peer between the recently discovered security vulnerabilities using money BitCoin in memory of her late friend, Len Sassaman brazen pirates, routers UPNP issues, confidentiality of the network, and even the comments were on the debate net neutrality.

When his 75 minutes of presentation "to make this work is very beautiful," Kaminsky smiles.

Kaminsky, Black Hat conference and more than ten years has been to provide security techniques. It could allow an attacker to redirect traffic to the discretion of the error domain name server system critical happens, but his reputation in 2008, the catapult. Kaminsky DNS patch as a temporary solution has organized a mass of about a dozen vendors. Since working on the promotion of DNS Security Extensions, or DNSSEC makes DNS was actually a PKI.

Black Hat today, but protocols for fun and profit and services, teasing and has long insisted, was the network. BitCoin, digital, virtual currency, by Kaminsky has been a platform for further research. A low cost per transaction fee payment system BitCoin. Each transaction is a so-called peer-to-peer, digitally signed and anonymous spreads. Kaminsky, one or both ends of a transaction BlitCoin BitCoin unmasks a new vehicle announced.

Kaminsky also the home router, the Universal Plug-and-one router / firewall in the router to open ports on the Internet allows nodes Play Service (UPnP), the claims of safety. He was able to manipulate external routers UPNP to hear how the hackers will Kaminsky, open ports and allow traffic to manipulate or inject code shown. This widespread failure on the UPnP Security Studies at DefCon this weekend, led by researcher Daniel Garcia.

Kaminsky, the proximate cause, net neutrality, politics, or through traffic from certain sources may limit or expand the practice by ISPs. Kaminsky has been a serious competitor in this application and its economic consequences.

Under the BSD license with the coming weeks a new tool developed by N00ter. N00ter partial violation of the neutrality of the network will collect data networks, he said. Kaminsky, just a data collector and should take the initiative to take legal action against the guilty members of parliament, said the release of the vehicle.

"My dream is to find something that is not N00ter'd," said Kaminsky. "At one point, we have a long list of what is happening."

N00ter source routes, leaving the ISP, the main road and a filter that filters in routers, packet traffic may change the time of delivery. Xbox 360 vs. PS3 Kaminsky, the speed of traffic, such as network traffic, said it would be open to deviations.

"My hope is that the policy at the network level, we provide the data necessary to determine the behaviors that drive the economy," said Kaminsky. "Data can not do without."

No comments:

Post a Comment