Learn, hack!

URL

http://data.proidea.org.pl/confidence/7edycja/materialy/video/Shawn%20Merdinger.mpg

File name

Shawn%20Merdinger.mpg

File size

551.8 MB

MD5

1bbe5c6e32dbbf66d3ea2955729eedae

SHA1

b0e7a050d8f170f5c2d240ec99b8725cdad2d3f3

I’d like to mention again that even though I’m presenting on this topic at other security conferences like HITB, the content is derived from ongoing security evaluations. Thus, each presentation will include new content and new vulnerabilities released, with the goal of building on the previous presentation.In the security world, attacker physical access means game over; so what happens if you can’t trust your electronic door system? This presentation and paper explore attack surfaces and exploitation vectors in a major vendor of electronic door access controllers (EDAC). The main focus is on time-constrained rapid analysis and bug-hunting methodologies applicable to a variety of embedded devices, with additional focus on research techniques that assist in locating and targeting EDAC systems. Rounding out the presentation is a review of practical countermeasures and potential research activities in the EDAC space. Attendees can expect an eye-opening experience regarding the insecurities of critical systems controlling physical access to environments like hospitals, schools, fire stations, businesses, etc.