|
Computer and Network Security
A very broad subject which will consist out of different independent discussions and workshops.
- ActiveX
- Lutz Donnerhacke of CCC will talk about ActiveX (in)security.
- Practical PGP Attacks
- Joel McNamara, the author of Private Idaho, a freeware, Windows PGP and
anonymous remailer shell, will be at HIP to give a presentation about
Practical PGP Attacks.
This presentation discusses practical attacks an opponent may use to compromise PGP. These
methods are typically much more efficient and cost effective than CPU-intensive cracking
attempts. Vulnerabilities such as swap file access, trojan horse versions of PGP and shells,
keyboard monitoring, brute forcing, and key theft viruses are explored. Countermeasures are
suggested for enhancing security.
- Legal Hacking
- Paul Samwel and Willem Scheeres, EDP Auditors at Moret, Ernst & Young
will give a presentation about "legal hacking" or penetration testing.
- Smartcard security
- A working group has been set up to get a discussion going on the security of Chipcards and the
development of cryptographic systems in conjunction with Smartcards. In August some of the gathered
material will be presented in a workshop.
- Van Eck monitoring
- This technology picks put up the electromagnetic radiation emanations from
electronic equipment such as microchips, monitors, cables and printers. We would
like to build a receiver and antenna used to monitor emanations from computer monitors
and show this device at HIP in August.
*
|