BayLISA Monthly: 7/15/04: Through a Sniffer Darkly: Covert Communications Channels, Mark Langston

Tue Jul 13 13:27:52 PDT 2004

       BayLISA Monthly Technical Talk & General Meeting

Please RSVP to rsvp at baylisa.org so that we can get an idea of how many
will be attending.  This event is open to the general public. You do not
need to be a member to attend.
--------
Where: Apple Computer, Town Hall Auditorium
Addr:  Four Infinite Loop, Cupertino, CA
http://www.baylisa.org/locations/current.html
--------
Date:  Thursday, 15 Jul7 2004
Time:  7:30pm - 9:30pm PST

Through a Sniffer Darkly: Covert Communications Channels
Mark C Langston

Today's networks provide unprecedented freedom to communicate. With this freedom comes responsibility, and the means to detect, shape, and control communications have become a necessary part of systems administration.

We'll briefly examine the two primary means of controlling network communications today -- firewalls and intrusion detection systems -- and survey various techniques of evading these tools. We'll discuss port-knocking, data hiding, steganography, and other techniques, leading up to a demonstration of Sifr's Obfuscator, running code that builds on ideas such as Ron Rivest's Chaffing and Winnowing technique and data-hiding methods demonstrated by Simple Nomad's NCovert tool.

--------
BayLISA meets every month on the 3rd Thursday of the month.  A short
period of announcements of general interest to the sysadmin community is
presented, followed by a technical talk.  Anyone may make an
announcement; typical are upcoming presentations, user group meetings,
employment offers, etc.

For further information on BayLISA, check out our web site:
http://www.baylisa.org/

Directions and details about the current meeting and future events:
http://www.baylisa.org/events/

BayLISA makes video tapes of the meetings available to members.  Tape
library is often available at the general meeting, or for more
information on available videos, please send email to "video at baylisa.org".

If you have suggestions for speakers, or would like to volunteer to
present a talk at one of our meetings, please email the Board and
Working Group at "blw at baylisa.org".  Thanks!
--------