Hit by a Bus: Physical Access Attacks with Firewire - 2008 - Ruxcon

More documents

Recommendations

Info

... in 2006 • Walk in to a Net cafe, or up to a kiosk • Plug in your Firewire iPod. • Is anyone going to look twice? • The guy who's keeping an eye on things wont. • Embedded, handheld devices like ipods, cellphones etc. are becoming more and more capable, and like “real” computers. • Physical access attacks are now much more subtle than before. • And you can't protect against them because “physical access wins” • Even Microsoft says so. Copyright Security-Assessment.com 2006
Firewire Background • Firewire (IEEE-1394) is a peripheral connection bus standard • Developed early 90s by Apple, TI, Sony (who call it “iLink”) • A serial bus, data rates 100 - 800mbps, over copper or fibre • Present on most laptops, high-end desktops • Loosing in popularity to USB-2 for most things. • Popular in the broadcast industry for it's support for isochronous transfers (guaranteed bandwidth) • For most people, is just “Betamax USB” Copyright Security-Assessment.com 2006
Page 1 and 2: Hit by a Bus: Physical Access Attac
Page 3 and 4: Copyright Security-Assessment.com 2
Page 5 and 6: Introduction • Intro (
Page 7 and 8: Physical Access Attacks • ATMs: h
Page 9: Physical Access Attacks • Increas
Page 13 and 14: The Fire in your Wire • Periphera
Page 15 and 16: DMA: The Fire in your Wire read 0x0
Page 17 and 18: This aint 0day • “Quinn The Esk
Page 19 and 20: Demo A vict^h^h^holunteer with a Wi
Page 21 and 22: CSR Trickery root@host~# romtool Us
Page 23 and 24: Memory Forensics • Traditional ha
Page 25 and 26: Down & Dirty with Physical RAM •
Page 27 and 28: Password recovery • Passwords and
Page 29 and 30: Mitigation • The OHCI spec doesn'
Page 31 and 32: Other Lunacy • From the 1394 Trad
Page 33: Questions ? http://www.security-ass

Hit by a Bus: Physical Access Attacks with Firewire - 2008 - Ruxcon

Create successful ePaper yourself

Delete template?

Save as template?