Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a...

Date post:	02-May-2018
Category:	Documents
Upload:	dangthuan
View:	218 times
Download:	3 times

Download Report this document

Share this document with a friend

Embed Size (px):

Keren Elazari aka @K3r3n3

Transcript

Keren Elazari aka @K3r3n3

www.K3r3n3.com

@K3r3n3

Page 7: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 8: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 9: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 10: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 11: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 12: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

� TAKE THE RED PILL?

Page 13: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 14: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 15: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 16: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 17: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 18: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Source : “25 Years Of Vulnerabilities: 1988-2012 Sourcefire Research Report”

Page 19: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 20: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 21: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Solution: Secure What Matters!

Page 22: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Life Rights CritInfr IP PII CCN

Counter- measures

Situational Awareness

Operational Excellence

Defensible Infrastructure

REPLACEABILITY

Original Model by Joshua Corman

Page 23: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

https://www.iamthecavalry.org/

Page 24: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 25: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 26: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Solution: Don’t Keep Your Bugs To Yourself

Page 27: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 28: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

https://bugcrowd.com/list-of-bug-bounty-programs

Page 29: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

The Internet Bug Bounty

https://hackerone.com/ibb

Page 30: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 31: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 32: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 33: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 34: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 35: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 36: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 37: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Solution: Stop, Collaborate and Share

Page 38: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 39: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 40: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 41: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Image by Chris Halderman CC BY 3.0

Page 42: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Solution : Empower The Masses

Image by Scoobay CC BY-NC-SA 2.0

Page 43: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 44: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 45: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 46: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 47: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 48: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Image: Crobis, The Economist

Page 49: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Solution: Mind The Gap

Page 50: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 51: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 52: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 53: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 54: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 55: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Secure What Matters

Don’t Keep Your Bugs To Yourself

Collaborate & Share

Empower The Masses

Stop The Spread Of FUD

Page 56: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Bonus Points: One Million

Security Professionals

Needed!

Source : Cisco 2014 Annual Security Report

Page 57: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 58: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 59: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Page 60: Keren Elazari aka @K3r3n3 - DEF CON Media Server CON 22/DEF CON 22...Empowering Hackers to Create a Positive Impact, Keren Elazari, DEFCON, DEF CON, Hacker, Security Conference, Presentations,

Documents

WPA TOO ! - DEF CON

Documents

DEF CON 25 Hacker Conference CON 25/DEF CON 25 presentations/DEF CON 25 - 0ctane...reverse engineering Intel ME Technical Overview ... Linux and all programs run on the FPGA, so we

Documents

You’re Just Complaining Because You’re Guilty CON/DEF CON 26/DEF CON 26...You’re Just Complaining Because You’re Guilty: A DEF CON Guide to Adversarial Testing of Software

Documents

WhyMI so Sexy? WMI Attacks, Real-Time Defense, … CON 23/DEF CON 23...Title DEF CON 23 Presentation Author DEF CON 23 Speaker Subject DEF CON 23 Presentation Keywords

Documents

TASBot the perfectionist - DEF CON CON 24/DEF CON 24 presentations/DEF CON 24... · TASBot the perfectionist The amazing life & achievements of... Agenda Intro to Speedrunning video

Documents

Introduction to SDR & the Wireless Village - DEF CON CON 23/DEF CON 23 presentations/DEF… · Introduction to SDR & the Wireless Village ! Who the Frig...! satanklawz!! DaKahuna!

Documents

DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEF… · Malware Analysis Triage with Automated Disassembly Amanda Rousseau Rich Seymour. About Us Amanda Rousseau Rich

Documents

Infrared - Def Con

Documents

DEF CON 26 Hacking Conference - infocon.org CON/DEF CON 26/DEF CON... · Bryce Kunz - Stage 2 Security, Red Teaming & Splunk Security Services. CNO.io Kevin Lustic & Bryce Kunz (@TweekFawkes)

Documents

Eric Sesterhenn 2018 CON 26/DEF CON 26 presentations/DEFCON-26... · DEF CON 26 Hacking Conference Author DEF CON Speaker Subject DEF CON 26 Presentation

Documents

Teaching Old Shellcode New Tricks - DEF CON CON 25/DEF CON 25 presentations/DE… · Teaching Old Shellcode New Tricks DEF CON 2017 @midnite_runr

Documents

How to secure the keyboard chain - DEF CON CON 23/DEF CON 23 presentations/DEF… · How to secure the keyboard chain DEF CON 23 Paul Amicelli - Baptiste David - CVO Esiea-Ouest c

Documents

Crypto for Hackers - DEF CON CON 23/DEF CON 23 presentations/DEF CON 23... · Crypto for Hackers Eijah v1.00 August 7th, 2015 “Shall we play a game? ...

Documents

Hacking travel routers like it’s 1999 - DEF CON Media Server CON 25/DEF CON 25 presentations/DEF… · Hacking travel routers like it’s 1999 Mikhail Sosonkin. Mikhail Sosonkin

Documents

DEF CON 26 Hacking Conference CON 26/DEF CON 26...Find us on Twitter: @michaelossmann / @dominicgs Title DEF CON 26 Hacking Conference Author DEF CON Speaker Subject DEF CON 26 Presentation

Documents

DEF CON 24 Hacking Conference - Ruxcon · Title: DEF CON 24 Hacking Conference Author: DEF CON 24 Speaker Keywords

Documents

DEF CON 24 Hacking Conference CON 24/DEF CON 24 presentations/DEF CON 24...RDS-1 or "Stalin's Jet Engine" Inside knowledge of the Manhattan Project combined with looting Germany's

Documents