ZeroDay Attack Prevention via Single Packet ... - cipherdyne
ZeroDay Attack Prevention via Single Packet Authorization
Michael Rash Security Architect Enterasys Networks, Inc.
2007.06.05 Techno Security
Copyright (C) 2007, Michael Rash
1
Agenda
Passive authorization technologies (Port Knocking and Single Packet Authorization)
Security Through Obscurity? (No!) The fwknop implementation of SPA New fwknop release: version 1.8 Live demonstration
Copyright (C) 2007, Michael Rash
2
Where it all Started...
Firewalls / Router ACL's ? Packet filtering based on IP addresses, protocols, and services
Port knocking Encrypted port knocking Single Packet Authorization (SPA) ? Next generation
passive authentication/authorization
Copyright (C) 2007, Michael Rash
3
Passive Authorization
Prove you are a friend before you can connect to a service ? try to minimize code paths available to an attacker
Target enumeration is just too easy with Nmap
Zeroday vulnerabilities will continue exist in server software
Copyright (C) 2007, Michael Rash
4
Recent OpenSSH Vulnerabilities
Just search through 20070508: PAM Authentication Remote Information Disclosure Vulnerability 20070410: Duplicated Block Remote Denial of Service Vulnerability 20070315: GSSAPI Credential Disclosure Vulnerability 20070314: GSSAPI Authentication Abort Information Disclosure Weakness 20070222: Enabled PAM Delay Information Disclosure Vulnerability 20070214: Existing Password Remote Information Disclosure Weakness
Can do this with any software vendor, not just OpenSSH (although OpenSSH is one of the most interesting examples)
Copyright (C) 2007, Michael Rash
5
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- crew resource management improves decision making
- cok cryptographic one time knocking¨ black hat
- sysadmin magazine october 2018 cips
- sysadmin network block devices block scenario
- zeroday attack prevention via single packet cipherdyne
- solaris 10 containers usenix
- copy of sysadmin magazine apr netwrix
- inside usenix
- linux and ldap a sysadmins dream team prefetch
- a free to download magazine dedicated to commodore