HSB15 - Aiko Pras - TU Twente

12
University of Twente the Netherlands Prof.dr.ir. Aiko Pras [email protected] http://wwwhome.cs.utwente.nl/~pras/ Internet of Things Think twice

Transcript of HSB15 - Aiko Pras - TU Twente

Page 1: HSB15 - Aiko Pras - TU Twente

University of Twentethe Netherlands

Prof.dr.ir. Aiko Pras [email protected] http://wwwhome.cs.utwente.nl/~pras/

Internet of Things Think twice

Page 2: HSB15 - Aiko Pras - TU Twente

Whatmademethink…

2

Page 3: HSB15 - Aiko Pras - TU Twente

DDoSZiggo

3

Page 4: HSB15 - Aiko Pras - TU Twente

Booters

4

Page 5: HSB15 - Aiko Pras - TU Twente

Booters

5

DNS

0

1.5

3

4.5

6

7.5

0 20 40 60 80 100

Traf

fic ra

te [G

bps]

Time [s]

CharGen

Page 6: HSB15 - Aiko Pras - TU Twente

Booters

6

Booter Offer[Gbps]

1 http://boo....tw ?2 http://res.....info 53 http://ano....net 54 http://des....com 255 http://fla....net ?6 http://dej....com 107 http://reb....com Upto38 http://gri....com 69 http://qua....net 1,510 http://oly....org Upto311 http://ebo....com ?12 http://vdo....net ?13 http://res....ca 814 http://oni....com ?

Price[€]

10,901,953,123,893,893,893,003,908,004,90free3,113,903,90

AttacksbasedonDNSDNSDNSDNS

CharGenDNS

CharGenDNSDNS

IPsInvolved8281736960754486377929702817854

Page 7: HSB15 - Aiko Pras - TU Twente

Booters

7

Booter Offer[Gbps]

1 http://boo....tw ?2 http://res.....info 53 http://ano....net 54 http://des....com 255 http://fla....net ?6 http://dej....com 107 http://reb....com Upto38 http://gri....com 69 http://qua....net 1,510 http://oly....org Upto311 http://ebo....com ?12 http://vdo....net ?13 http://res....ca 814 http://oni....com ?

Price[€]

10,901,953,123,893,893,893,003,908,004,90free3,113,903,90

AttacksbasedonDNSDNSDNSDNS

CharGenDNS

CharGenDNSDNS

IPsInvolved8281736960754486377929702817854

3381x

Page 8: HSB15 - Aiko Pras - TU Twente

BuildingtheUltimateDDoS

8

We identified about 1.2 million unique unprotected devices

Page 9: HSB15 - Aiko Pras - TU Twente

InternetofThings

9

There will be billions of IoT devices According to HP, 70% will be vulnerable

Page 10: HSB15 - Aiko Pras - TU Twente

Whoismoredangerous?

10

Page 11: HSB15 - Aiko Pras - TU Twente

Conclusions

• ExpectDDoSattacksbyTerrorists

• ExpecttenthsofTerabits/second

• Wearenotprepared• NAWAS• TrustedNetworkInitiative(TNI)

11

Page 12: HSB15 - Aiko Pras - TU Twente

Have fun ;-)