jetlib.sec » Tags » intercept

Feeds

133363 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

7 items tagged "intercept"

Related tags: tom cross [+], talk [+], security perspective [+], intercept technology [+], core architecture [+], cisco [+], world scenarios [+], usa [+], technical weaknesses [+], surveillance capabilities [+], surveillance [+], probes [+], nsa [+], linked [+], internet [+], fbi probes [+], fbi [+], dead [+], codebreaker [+], anonymous [+]

• February 04, 2012
• 21:13

  FBI Probes Anonymous Intercept Of US-UK Hacking Call

   » ‎ Packet Storm Security Headlines
  FBI Probes Anonymous Intercept Of US-UK Hacking Call

  Tags:  probes anonymous fbi fbi-probes intercept  

• September 08, 2011
• 4:57

  [Slides] Unauthorized Internet Wiretapping: Exploiting Lawful Intercept

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: sniffer
  Event: Black Hat USA 2010
  Abstract: For many years people have been debating whether or not surveillance capabilities should be built into the Internet. Cypherpunks see a future of perfect end to end encryption while telecom companies are hard at work building surveillance interfaces into their networks. Do these lawful intercept interfaces create unnecessary security risks? This talk will review published architectures for lawful intercept and explain how a number of different technical weaknesses in their design and implementation could be exploited to gain unauthorized access and spy on communications without leaving a trace. The talk will explain how these systems are deployed in practice and how unauthorized access is likely to be obtained in real world scenarios. The talk will also introduce several architectural changes that would improve their resilience to attack if adopted. Finally, we'll consider what all this means for the future of surveillance in the Internet - what are the possible scenarios and what is actually likely to happen over time.

  Tags:  internet intercept surveillance tom-cross usa surveillance-capabilities world-scenarios technical-weaknesses  

• August 30, 2010
• 0:00

  Dead Codebreaker Was Linked To NSA Intercept Case

   » ‎ Packet Storm Security Headlines
  Dead Codebreaker Was Linked To NSA Intercept Case

  Tags:  dead codebreaker linked nsa intercept  

• May 14, 2010
• 21:04

  [Video] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective  

• 21:04

  [Slides] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective  

• 21:04

  [Paper] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective  

• 21:04

  [Audio] Exploiting Lawful Intercept to Wiretap the Internet

   » ‎ SecDocs
  Authors: Tom Cross
  Tags: forensic network Cisco sniffer
  Event: Black Hat DC 2010
  Abstract: Many governments require telecommunications companies to provide interfaces that law enforcement can use to monitor their customer's communications. If these interfaces are poorly designed, implemented, or managed they can provide a backdoor for attackers to perform surveillance without lawful authorization. Most lawful intercept technology is proprietary and difficult to peer review. Fortunately, Cisco has published the core architecture of it's lawful intercept technology in an Internet Draft and a number of public configuration guides. This talk will review Cisco's architecture for lawful intercept from a security perspective. The talk will explain how a number of different weaknesses in its design coupled with publicly disclosed security vulnerabilities could enable a malicious person to access the interface and spy on communications without leaving a trace. The talk will explain what steps network operators need to take to protect this interface. The talk will also provide a set of recommendations for the redesign of the interface as well as SNMP authentication in general to better mitigate the security risks.

  Tags:  talk cisco intercept tom-cross intercept-technology core-architecture security-perspective