This talk discusses scenarios when being able to remotely administer firewall rules is advantageous, but keeping administrative services available to random source IP addresses is both dangerous and generates bad data points for auditors. This talk will discuss the concept of covert admin channels, such as port knocking, but expands them to use more robust communication channels, strong authentication, non-affiliated IP ranges, and small-footprint on-prem proxy services running on cheap commodity hardware (such as Raspberry Pi).
NSG has over 15 years in the InfoSec community providing various services, such as security training, pen-testing, social engineering, thinking about geeky things, and creating various automatons to perform various network and security tasks.
Saturday October 24, 2015 11:00am - 12:00pm CDT
Track 2
