SLIDE 1
- The Ignorance towards
Embedded Systems
Felix ‘FX’ Lindner, Fabian ‘fabs’ Yamaguchi, Recurity Labs GmbH 22nd FIRST Conference, Miami
- Your Other Network
The Ignorance towards Embedded Systems - - PowerPoint PPT Presentation
The Ignorance towards Embedded Systems - - PowerPoint PPT Presentation
The Ignorance towards Embedded Systems Felix FX Lindner, Fabian fabs Yamaguchi, Recurity Labs GmbH 22 nd FIRST Conference, Miami Your Other Network
SLIDE 2
SLIDE 3
- !
- "
#$%& '"(
- )
- !!
- A Matter of Perspective
SLIDE 4
- *
%'(
+!!,- !
+,- !
.*/ .*/ / !* !
A Matter of Perspective
SLIDE 5
- A Matter of Perspective
- )
- "$0"
- #+
- 1
- #"
- 23
- 43%
- %
SLIDE 6
- %
$* $ +
5!
!* !/ !6
#1
- $+ !
#+!#1! !
Known Attacks in Enterprise Networks
SLIDE 7
- %!
! 1!!
%*!0 1
4!'66"++ ( '66%7/!( !/8 /!'66)(
Known Attacks in Enterprise Networks
SLIDE 8
!" #$ 96 +
- 1
- "*9::!
- %
5*,- !
;6 .
- !
Known Attacks in Enterprise Networks
SLIDE 9
- )!5!
)1
!5!!
- !
58
+!*55
,- +5
Known Attacks in Enterprise Networks
SLIDE 10
%&&"
- "$0"
"$!,- !!
2
",- !!!*!
- %"$0"!
%! "$0"!
- !5;::<
=%2'%2(!
- "*
- Known Attacks in Enterprise Networks
SLIDE 11
' ()
- #!
!
#! +!5!
- " "%55
#!" #8*!5 !
- 2/*#
- Known Attacks in Enterprise Networks
SLIDE 12
' ()
- #!
!
#! +!5!
- " "%55
#!" #8*!5 !
- 2/*#
- Known Attacks in Enterprise Networks
- !"""""#$#"%
%&$'$$&'$ &$'$$&'$ &$'$$&'$ &$'$$&'$%
SLIDE 13
* )1#>7:?! !!!@)
- @)
!!
!@) !
- )88!A9::15
Known Attacks in Enterprise Networks
>B96;-* 4 ;6:*.*;::C
SLIDE 14
* )1#>7:?! !!!@)
- @)
!!
!@) !
- )88!A9::15
Known Attacks in Enterprise Networks
>B96;-* 4 ;6:*.*;::C
SLIDE 15
'(&
- #"
- %#"#1
- #"!!!
5
66!!+4+' (
- !
- #"D'66E(3%1
- *#"
- $>
Known Attacks in Enterprise Networks
>=0066000F:F0EE;::C:799E6
SLIDE 16
(+#+,$
- 23!
123'66(C:/ *!
- %23!
!!5 !*!! !'66 (!
- 23#"
!23!!
- !23!!
- !E
- #!!23!!
Known Attacks in Enterprise Networks
SLIDE 17
" !5'( !
8!"+
+
1 *
- !*
- 8"+
Known Attacks in Enterprise Networks
SLIDE 18
- +!
+
- *E*;::;
)! !
- ";::G*2H 5!
- 35. I
! $ Known Attacks in Enterprise Networks
SLIDE 19
- Known Attacks in Enterprise Networks
SLIDE 20
- Known Attacks in Enterprise Networks
SLIDE 21
- Known Attacks in Enterprise Networks
( ( )&$'$$&$*%$+ ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, !- . / 0 0 !/0 1221"12#1"12*# !&''&$34$$$ !!"""%" ! !!""" !&$$4%'$%$1 !56"( "% ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, .'!- 7 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% 6/ 0 1221"12#1"12#*( 899: ! 9;( ; ; ( 9 (;< = 9>?@9 -
SLIDE 22
- .
$!! 15
+,- 15
! !E
"
+E 15'(
Known Attacks in Enterprise Networks
SLIDE 23
/,0(
- 43!!
- 43
"/5 43
- 43!*
!
!5 !43!
- +
Known Attacks in Enterprise Networks
SLIDE 24
/,0(
- 43!!
- 43
"/5 43
- 43!*
!
!5 !43!
- +
Known Attacks in Enterprise Networks
<( % (%&$'$%$$' A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%A B B B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B( B3*C . B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B BD B5 (B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B( BC B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B( B B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B E BDB B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B BC FB'&"$3"$4B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B BC - B B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B FB$&"$3"'$B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B BG? FB6 &&$'$B B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B
- B5. ) 5F +B
B%%%%%%%%%%%%%%%%%%%%%%A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%B B.DB.%&$'$%$HH'B A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%A A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%A B5 B 3* ( B BB 675 B BB (5 B BB B BB 675 (5B BB B A%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%A
SLIDE 25
0" & 8
+* +!!
- +J!!!
)"%22D2 %!.%.
- J
Known Attacks in Enterprise Networks
SLIDE 26
+ "!(1 +)"% +/ 2
!
%!2
")"% )!,- 5
Known Attacks in Enterprise Networks
SLIDE 27
!2 / "!
$!#
!5*
,!- !>
!!! !;;<! )!!/ ++5 )!!/ ! Known Attacks in Enterprise Networks
>=00660;:9:0:90;C0E!E!0
SLIDE 28
!2 / "!
$!#
!5*
,!- !>
!!! !;;<! )!!/ ++5 )!!/ ! Known Attacks in Enterprise Networks
>=00660;:9:0:90;C0E!E!0
SLIDE 29
)3
SLIDE 30
. . = !@) !
@ @$! How These Attacks Are Used
SLIDE 31
4+5 = + )) "
!!!!!'(
@5
4
How These Attacks Are Used
SLIDE 32
*. = #" $+0#+) "!
KEEK !!>
How These Attacks Are Used
>=00!!6!60
SLIDE 33
SLIDE 34
43 !
$'66 $( !*! *E#1!
!
66#))%$L!)
%D $#"
Network Level Protections
SLIDE 35
- 4
EE !!
- "
$!
Network Level Protections
SLIDE 36
(%* .
- %1
1
.
%8
)1 .
Network Level Protections
SLIDE 37
)6 # =
$M "!M !!5!M !!!M "!M
!1
.*8! .!*8!
Policy Level Protections
SLIDE 38
+ !M !!N
! +! !!!D!
#
K! !
Policy Level Protections
SLIDE 39
(7&). 8
$ D"+ !!! E"+"+ %
"!E"+*
E"+
Policy Level Protections
SLIDE 40
)" %
!
!!!!
"! 8
!!!
) 4!!!!!
!5
+!
Patching Embedded Systems
SLIDE 41
83 !!
,!1!-
)!!
- !
!
!!
!
+/! "/*/!!!
Patching Embedded Systems
SLIDE 42
SLIDE 43
- +
- +
" "
- 5
)8!8 )8!!
- )D
+ Your Other Network
SLIDE 44
)9 Questions? Felix ‘FX’ Lindner, Fabian ‘fabs’ Yamaguchi, Recurity Labs GmbH