Monkey-In-The-Middle (and Other Public-Key Quandaries)

In 2000, I released the first public cryptographic man-in-the-middle exploits against HTTPS and SSH, in my dsniff toolkit. This talk explored some of the human factors engineering issues involved, paying homage to Don Davis' concept of "compliance defects" as a security design issue.

http://archive.oreilly.com/pub/a/oreilly/networking/news/silverman_1200.html

CanSecWest 2001, Vancouver

Transcript

1. View Slide

2. View Slide

3. View Slide

4. View Slide

5. View Slide

6. View Slide

7. View Slide

8. View Slide

9. View Slide

10. View Slide

11. View Slide

12. View Slide

13. View Slide

14. View Slide

15. View Slide

16. View Slide

17. View Slide

18. View Slide

19. View Slide

20. View Slide

21. View Slide

22. View Slide