When Cybersecurity Is More Than Just Vulnerabilities
summary
Covers how legitimate protocols and objects are repurposed for attacks: demonstrates DNS being used as a command-and-control and exfiltration channel (queries carrying hex blobs, TXT records delivering stagers) and shows reconstructing files from logged DNS requests with a SolarWinds example. Explains steganography techniques such as LSB image hiding and invisible Unicode bits for carrying secrets, and details practical side-channel attacks that recover RSA keys via CPU power/timing analysis and speculative cache behavior on modern processors.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 3:57DNS protocol hijacking
- 17:02Steganography and data hiding
- 23:03Side-channel attacks
- 33:03Conclusion
related talks
44mWhen Cybersecurity Is Not Just About Vulnerabilities
26mMisuse of DNS, the Second Most Used Protocol
34mPractical Steps for Reducing Exposure and Detecting Compromise
57mHiding In Plain Sight - Advances In Malware Covert Communication Channels
34mThe SolarWinds Supply Chain Compromise
48mDNS ATT&CK 2020 - review of the most interesting techniques
32mDNS as Added Security Against Ransomware Attacks
01h 01mSomething Something Cyber