Kaminsky on DNS rebinding attacks, hacking techniques

Article

Kaminsky on DNS rebinding attacks, hacking techniques

Michael S. Mimoso, Editor, Information Security magazine
Noted network security researcher Dan Kaminsky, director of penetration testing at IOActive, dives into his latest work around DNS rebinding attacks and what enterprises can do to protect their resources from these Web-based attacks. Kaminsky also covers some of his research on the spoofing of SSL VPN certificates and other emerging threats. Kaminsky is a frequent speaker at industry conferences. He is probably best known for his Black Ops talks at the annual Black Hat Briefings. Kaminsky, formerly with Cisco and Avaya, is also an advocate for Net Neutrality.

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

  Program highlights: 

  • Your presentations have focused a lot on network security, lately you've been talking a lot about Web 2.0 attacks, why the change in direction? (0:17)
  • What are some down in the weeds Web flaws that organizations need to be aware of? 1:45)
  • Tell me about some of the DNS rebinding research that you've been presenting. (3:07)
  • Can you share any practical advice for organizations on how to defend themselves? (6:25)
  • If the Web protocols are bad and the network protocols are bad what's the answer there? Certainly starting over isn't practical. (7:21)
  • You do work in a lot of organizations. Can you tell me about the state of security in most of those that you work in? (9:17)