Description: Hack3rcon II 2011 - Thomas Hoffecker Exploiting PKI for Fun & Profit or The Next Yellow Padlock Icon
Exploiting PKI for Fun & Profit or The Next Yellow Padlock Icon? Public Key Infrastructure PKI provides a large attack surface for the pentester. While attacking PKI directly may seem like a juicy target, using the information freely provided by PKI is of much more value than attempting to compromise well protected and monitored servers. This talk will demonstrate the information disclosure that is present in PKI implementations of large organizations in the private and public sector. It will explore the use of that information for purposes of social engineering, phishing, and network recon/profiling. Users have been groomed to accept anything that is signed or encrypted. Misusing the trust that users place in PKI is the new yellow padlock icon!
Tags: securitytube , hackercon , hacker con , hacking , hackers , information security , convention , computer security , hacker 11 , hackercon 11 , hackercon-2011 ,
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.