2/10/10 Red Teaming: It’s Good to Be Bad by Will Atkins
The next SIG-SEC meeting will be held Wednesday February 10th, 7:00pm in CS209A. Former SIG-SEC co-chair Will Atkins will be visiting and giving a baller presentation on Red Teaming. Here are the goods regarding the talk:
Given their roles in enabling services and functions vital to modern societies, critical information and control system infrastructures present high-value targets for the adversaries of such societies. Protecting these systems against digital attack is exceedingly difficult, as thousands of vulnerabilities in such systems are discovered every year. Red teaming, the general concept of a defensive team simulating one or more adversaries, is a useful technique for identifying which critical systems an adversary may choose to attack and how they may go about executing such attacks. This talk will address various types of red teaming, introduce a generic adversary model, overview Sandia National Laboratories’ Information Design Assurance Red Team (IDART), and reveal some of the tools and techniques used by IDART when performing red team assessments.
For those of you that aren’t familiar with the former SIG-SEC star, William D. Atkins is a Member of Technical Staff in the Critical Infrastructure Systems Department at Sandia National Laboratories, where he conducts information assurance research and engages in red teaming exercises to secure critical information and control system infrastructures against attack from a variety of adversaries. Atkins received both Masters and Bachelors of Science degrees in Computer Engineering from the University of Missouri–Rolla, now the Missouri University of Science and Technology, in 2007 and 2005, respectively. His research interests include wireless communications systems, communications protocol analysis, embedded systems design, and reverse engineering.
Update: The slides from the presentation are now available in both pdf and ppt. Comments related to the scenarios we went through were NOT exported into the PDF, so if you’re looking for all that good stuff you’re gonna have to grab the powerpoint.