RSTCON 2024 - The Most Important Protocol You've Never Heard Of - Dan Petro

Описание: RSTCON is an annual technical security conference aimed at resetting our focus to cutting-edge research, exploitation, and tradecraft targeting the sensors, systems, and architectures utilized by critical industry.

Abstract: https://rstcon.org/2024/talks/#dnp3-s...

The Distributed Networking Protocol 3 (DNP3) is a core part of communications in what we collectively call "critical infrastructure". It’s responsible for carrying commands to actuate physical components in stuff like electric generating facilities and power transmission equipment.

Despite its importance, DNP3 has been difficult to implement security on. Demanding operational requirements, legacy hardware, and an impenetrable wall of jargon have been just some of the impediments towards security.

Let’s talk about DNP3 from a pentester’s perspective. What issues has the protocol had in the past, where does DNP3 security stand currently, and where is the protocol going in the future to solve them (DNP3 SAv6)?

Dan Petro is widely known for the tools he creates: Eyeballer (a convolutional neural network pentest tool), the Rickmote Controller (a Chromecast-hacking device), Untwister (pseudorandom number generator cracker), and SmashBot (a merciless Smash Bros noob-pwning machine).

See https://rstcon.org/ for more information.