Tonight I will present an updated version of this presentation which will cover some of the interesting research happening in the area of embedded device (in)security. Below is the information:
Things That Go Bump In The Network: Embedded Device (In)Security
Wednesday, August 13 8:00pm – 9:00pm
“Paul Asadoorian will discuss an area of rapidly growing risk from embedded devices. As these devices become ubiquitous, the risks continue to grow. Common devices from iPhones to Linksys routers are vulnerable to attacks which can compromise your data. Most do not realize unique opportunities for attackers to do damage and gain access to your network, and most importantly your information. This talk will focus primarily on common embedded device vulnerabilities. Paul will stroll down memory lane and review some of the vulnerabilities that have been released for embedded devices, how we can use them to gain control of the device, the network, and more importantly the data traveling across it. Example devices will include printers, mobile devices, Wireless Routers, and network-based cameras including live hacking demonstrations!”
I will also present this material at SANS NS2008 in Las Vegas, so if you are, or will be, at either conference come check it out!
Things That Go Bump In The Network…
Paul Asadoorian is currently the Principal Security Evangelist for Eclypsium, focused on firmware and supply chain security awareness. Paul’s passion for firmware security extends back many years to the WRT54G hacking days and reverse engineering firmware on IoT devices for fun. Paul and his long-time podcast co-host Larry Pesce co-authored the book “WRTG54G Ultimate Hacking” in 2007, which fueled the firmware hacking fire even more. Paul has worked in technology and information security for over 20 years, holding various security and engineering roles in a lottery company, university, ISP, independent penetration tester, and security product companies such as Tenable. In 2005 Paul founded Security Weekly, a weekly podcast dedicated to hacking and information security. In 2020 Security Weekly was acquired by the Cyberrisk Alliance. Paul is still the host of one of the longest-running security podcasts, Paul’s Security Weekly, he enjoys coding in Python & telling everyone he uses Linux.
