Waking Up The Guards: Renewed Vigilance Is Needed To Regain Trust
summary
Internet routing, DNS and PKI get actively weaponized — she cites an April 2018 Route 53 hijack where a more-specific BGP announcement redirected Amazon’s authoritative DNS to attacker servers, poisoned caches and stole Ethereum wallets. Real fixes are concrete: implement prefix filtering and BCP38, deploy RPKI and DNSSEC, audit certificate validation, enforce MFA and train for credential hygiene. The surprising constant is scale — billions of devices, repeated registrar compromises and credential lifecycle failures that enable stealthy infrastructure attacks.
AI-written summary · about
chapters (31)
- 0:00Intro
- 2:02IN THE BEGINNING TRUST WAS INHERENT
- 4:14WE HAVE BLIND TRUST ISSUES
- 8:52WE HAVE ORGANIZATIONAL SILO ISSUES
- 14:37EXAMPLE OF CROSS-FUNCTIONAL BROKENNESS
- 17:46BALANCE CONVENIENCE vs SECURITY VS PRIVACY
- 19:22EVERYTHING IS BROKEN
- 20:40WHY ARE THINGS SO BROKEN?
- 22:22DATA SHARING HAS OPPORTUNITIES and RISKS
- 24:21FUNDAMENTAL BUILDING BLOCKS
- 26:14SOPHISTICATED INFRASTRUCTURE ATTACKS
- 27:46ROUTE HUACK....BUT WAIT, THERE'S MORE....
- 29:37DNS COMPROMISE DUE TO BGP ROUTE HUJACK
- 30:53BASIC ATTACK MITIGATION TECHNIQUES
- 32:14ROUTING SECURITY - RPKI
- 32:37ROUTING SECURITY-MANRS
- 34:04DNS ECOSYSTEM TECHNICAL THREATS
- 36:05WHY CRIMINAL REGISTER DOMAIN NAMES
- 37:41DNS BASIC HYGIENE (2)
- 40:24WHAT IS IT CRIMINALS ARE AFTER?
- 42:07IT STARTS WITH GETTING CREDENTIALS
- 44:47CREDENTIAL MANAGEMENT LIFECYCLE
- 46:03AVOIDING SURPRISES
- 47:53VALIDATING IDENTITY
- 48:39FALL 2018 DOMAIN REGISTRATION HUACKING
- 49:42PKI ARCHITECTURE
- 51:49CERTIFICATE CHAIN OF TRUST
- 52:20PKI SECURITY
- 53:31WE NEED TO GET BACK TO BASICS
- 54:55BUILDING TRUST IN PEOPLE
- 56:11TRUST BUT VERIFY
related talks
41mSecurity: The world is broken and you are guilty
22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
46mNational Cyber-Aggression and Private-Sector Internet Infrastructure
01h 00mKeynote - Our Kryptonite: A Defendable Internet
16mhijacking.gov.uk - Identifying and Communicating Risks to the Digital State
34mPractical Steps for Reducing Exposure and Detecting Compromise
13mA Positive Security Talk
44mKeeping the Watchers at Bay