Context Gap for Staring Into The Abyss

Embed Doc
Copy Link
Readcast
Collections

CommentGo Back

Download

copyright IOActive, Inc. 2006, all rightsreserved.

Staring Into The AbyssRevisiting Browser vs. MiddleboxAttacks In The Era Of Deep PacketInspectionDan KaminskyDirector of Penetration TestingIOActive, Inc.

Introduction

•Hi! I’m Dan.•Once upon a time, my talks were referred to as“Black Ops of TCP/IP” –These were fun talks! –Lets do more of that!

Context: The Rise of DPI

•Deep Packet Inspection: The attempt to extract endpoint contextfrom network traffic –This is always an attempt – only a very small percentage of what’s going on, hits the wire –Admittedly, an important percentage



•DPI is on the verge of a revolution –Hardware is getting much faster •Can be deployed at carrier network head ends –Software is getting much deeper •Can extract full GMail messages from a series of differentialAJAX updates (Narus) –Need (well, demand) is increasing•Legitimate – DDoS mitigation, larger scale firewalling, etc.

of 00

Leave a Comment