Network Black Ops: Extracting Unexpected Functionality from Existing Networks

This talk was originally scheduled for Wednesday, and has been rescheduled for Thursday, December 8, 1:00 p.m.–2:00 p.m. It will take place in the San Diego room. You're welcome to pick up lunch and bring it to the talk.

There is the set of functionality we expect from our network. There's the set of functionality your network is capable of. These two sets are not identical. This talk will explore security risks you may not even be aware your network is exposed to and will demonstrate new techniques for managing those risks. Mechanisms will be discussed for:

• Establishing video-capable tunnels over DNS (and detecting such tunnels)
• Evading intrusion detection systems by exploiting IP's lack of statelessness
• Reliably auditing Internet-scale networks
• Visualizing complex network activity