12.11.2012 Views

Can you still trust your network card? - Agence nationale de la ...

Can you still trust your network card? - Agence nationale de la ...

Can you still trust your network card? - Agence nationale de la ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Impacts on security<br />

If an attacker can execute arbitrary co<strong>de</strong> on the <strong>card</strong>, she can do<br />

virtually anything:<br />

◮ stop processing packets;<br />

◮ drop some packets;<br />

◮ ARP/DNS cache poisoning;<br />

◮ implement SSLstrip-like attacks;<br />

◮ attacks hosts on the LAN;<br />

◮ rep<strong>la</strong>ce the firmware;<br />

◮ attack the host (read/write access to the main memory).<br />

A ”must read” on this topic:<br />

Arrigo Triulzi, PacSec08, ”Project Maux Mk.II”<br />

SGDSN/ANSSI – http://www.ssi.gouv.fr/<strong>trust</strong><strong>network</strong><strong>card</strong> 3/51

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!