SlideShare uma empresa Scribd logo
1 de 32
NTXISSA Cyber Security Conference – November 10-11, 2017
@NTXISSA #NTXISSACSC5
[Session Title]
[Presenter]
[Position]
[Institution]
[Date]
About me
• University of North Texas Alum
• Class of 2017
• Majored in Computer Engineering
• Team Leader for Senior Design project for NASA
• President of UNT’s Club for Cyber Security
• National Cyber League
• Collegiate Cyber Defense Competition
• Goldman Sachs Analyst 2017 NAPA
• GS 2016 Summer Analyst (Intern)
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
32017-Nov-11th
Team IRIS
• Jacen R Kohler
• Tyler Alvarez
• Alex Fatum
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
42017-Nov-11th
How did I get a NASA Project?
Texas Space Grant Consortium
• Educational wing for NASA in Texas
• Open to all college students in Texas
• Other stated have equivilant programs
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
52017-Nov-11th
Current Situation
Internet in space uses static IPv4 addresses
Static addressing requires manually assigning addresses
Static addressing is not fault tolerant
duplicates are possible
The constantly varying propagation delays & line interfere with
traditional network handshakes
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
62017-Nov-11th
Current Situation
The current Tracking and Data Relay Satellite (TDRS) System are
merely repeaters and amplifies and have no routing capabilities
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
72017-Nov-11th
The Problem
The process should be automated
aka… Dynamic Addressing
Just like your phone on a coffee shop’s wifi
A protocol like this already exists
Dynamic Host Configuration Protocol (DHCP)
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
82017-Nov-11th
How to Solve this problem
Simulate a space network, down here on Earth including…
propagation delay
line-of-sight signal blocking
adequate complexity (enough parts to be realistic)
Find a way to implement DHCP in the simulated space network
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
92017-Nov-11th
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
102017-Nov-11th
Adequate Complexity
•Simulate a space network on earth
•10x Raspberry Pi 3
•Mission Control Center
•3x TDRS
•TDRS5, TDRS7, &TDRS9
•3x Spacecraft
• ISS, Hubble, Orion
•3x EVA Suits
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
112017-Nov-11th
Adequate Complexity
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
122017-Nov-11th
Adequate Complexity
• Pull TLE data from CelesTrak
• Two Line Element (TLE)
• 3000 TLE data in the file that gets parsed
• Search for orbital element we need
• Extract the 6 Keplerian Elements from TLE
• 6 Keplerian elements are like an address
• Allow us to calculate time based locations
• Past, present, or future
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
132017-Nov-11th
Simulated Space Network
• One way link to TDRS in GeoSynchronous orbit takes
• Simulation must emulate these delays to be realistic
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
142017-Nov-11th
Simulated Space Network (cont.)
• Delays will be simulated using existing open source tools
designed for network testing
• tcconfig
+312.432ms
149460120
0
Hold for delay
Epoch time
received
Packet
Ingress
( distance / speed of light ) + time of insert
+312.437ms
149460120
1
+312.443ms
149460120
2
+312.449ms
149460120
3
+312.452ms
149460120
4
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
152017-Nov-11th
Simulated Space Network (cont.)
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
162017-Nov-11th
Simulated Space Network (cont.)
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
172017-Nov-11th
DHCP
• Discover
• Spacecraft announces its presence
• Offer
• DHCP offers several available
addresses
• Request
• Spacecraft requests an offered
addresses
• Acknowledge
• DHCP assigns requested address
• DHCP from Earth takes ~112ms
• DHCP from TDRS takes ~56ms
• 50% time savings
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
182017-Nov-11th
DHCP (cont.)
• Offer (predicted)
• DHCP offers only one address
• Request
• Spacecraft requests the address offered
• Acknowledge (pipelined)
• DHCP pre-empts the acknowledgement
• Traditional DHCP takes ~112ms
• Pipelined DHCP takes ~28ms
• 75% time savings
• Pipeline DHCP from TDRS takes
~12ms
• 87.5% time savings
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
192017-Nov-11th
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
202017-Nov-11th
Project Management
• Agile methodologies
• Iterative Testing
• GitHub
• Slack
• Additional paperwork
• Status Reports
• Implementation Plan
• Test Plan
• Maintenance Plan
• User Guide
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
212017-Nov-11th
Project Management (cont.)
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
222017-Nov-11th
Adequate Complexity
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
232017-Nov-11th
Adequate Complexity
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
242017-Nov-11th
0
50
100
150
1494115200 1494201600 1494288000 1494374400 1494460800 1494547200 1494633600 1494720000
DHCPHandshakeDuration(milliseconds)
Epoch Time (seconds)
ISS & HST with TDRS5, TDRS7, & TDRS9 from 2017 May 07th to
13th
Traditional DHCP from Earth Pipelined DHCP from TDRS
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
252017-Nov-11th
Prerequisites
TDRSs must have compute power onboard
To act as DHCP Server
To calculate orbital mechanics
We launch a new one every year or so
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
262017-Nov-11th
Future Work
• GeoCentric to HelioCentric Transform
• Allow for mars simulations
• Automation
2017-Nov-11th
#NTTXISSACSC5
Abusing Protocols for Dynamic Addressing in Spaces
31
NTXISSA Cyber Security Conference – November 10-11, 2017
@NTXISSA #NTXISSACSC5
32
Thank you

Mais conteúdo relacionado

Mais procurados

Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...
Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...
Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...
Spark Summit
 
Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...
Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...
Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...
Spark Summit
 

Mais procurados (20)

Netflix viewing data architecture evolution - EBJUG Nov 2014
Netflix viewing data architecture evolution - EBJUG Nov 2014Netflix viewing data architecture evolution - EBJUG Nov 2014
Netflix viewing data architecture evolution - EBJUG Nov 2014
 
Presto Summit 2018 - 02 - LinkedIn
Presto Summit 2018  - 02 - LinkedInPresto Summit 2018  - 02 - LinkedIn
Presto Summit 2018 - 02 - LinkedIn
 
Improved Applications with IPv6: an overview
Improved Applications with IPv6: an overviewImproved Applications with IPv6: an overview
Improved Applications with IPv6: an overview
 
Real Time Data Processing With Spark Streaming, Node.js and Redis with Visual...
Real Time Data Processing With Spark Streaming, Node.js and Redis with Visual...Real Time Data Processing With Spark Streaming, Node.js and Redis with Visual...
Real Time Data Processing With Spark Streaming, Node.js and Redis with Visual...
 
Spark: Interactive To Production
Spark: Interactive To ProductionSpark: Interactive To Production
Spark: Interactive To Production
 
Introduction to Streaming Distributed Processing with Storm
Introduction to Streaming Distributed Processing with StormIntroduction to Streaming Distributed Processing with Storm
Introduction to Streaming Distributed Processing with Storm
 
DataStax: 0 to App faster with Ruby and NodeJS
DataStax: 0 to App faster with Ruby and NodeJSDataStax: 0 to App faster with Ruby and NodeJS
DataStax: 0 to App faster with Ruby and NodeJS
 
Hadoop summit - Scaling Uber’s Real-Time Infra for Trillion Events per Day
Hadoop summit - Scaling Uber’s Real-Time Infra for  Trillion Events per DayHadoop summit - Scaling Uber’s Real-Time Infra for  Trillion Events per Day
Hadoop summit - Scaling Uber’s Real-Time Infra for Trillion Events per Day
 
stackconf 2020 | Ignite talk: Opensource in Advanced Research Computing, How ...
stackconf 2020 | Ignite talk: Opensource in Advanced Research Computing, How ...stackconf 2020 | Ignite talk: Opensource in Advanced Research Computing, How ...
stackconf 2020 | Ignite talk: Opensource in Advanced Research Computing, How ...
 
Engineering Leader opportunity @ Netflix - Playback Data Systems
Engineering Leader opportunity @ Netflix - Playback Data SystemsEngineering Leader opportunity @ Netflix - Playback Data Systems
Engineering Leader opportunity @ Netflix - Playback Data Systems
 
How Mapbox Scales over 9 AWS Regions
How Mapbox Scales over 9 AWS RegionsHow Mapbox Scales over 9 AWS Regions
How Mapbox Scales over 9 AWS Regions
 
Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...
Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...
Online Security Analytics on Large Scale Video Surveillance System by Yu Cao ...
 
InfluxEnterprise Architecture Patterns by Tim Hall & Sam Dillard
InfluxEnterprise Architecture Patterns by Tim Hall & Sam DillardInfluxEnterprise Architecture Patterns by Tim Hall & Sam Dillard
InfluxEnterprise Architecture Patterns by Tim Hall & Sam Dillard
 
Real Time Data Processing Using Spark Streaming
Real Time Data Processing Using Spark StreamingReal Time Data Processing Using Spark Streaming
Real Time Data Processing Using Spark Streaming
 
Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...
Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...
Teaching Apache Spark Clusters to Manage Their Workers Elastically: Spark Sum...
 
Lambda Architecture: The Best Way to Build Scalable and Reliable Applications!
Lambda Architecture: The Best Way to Build Scalable and Reliable Applications!Lambda Architecture: The Best Way to Build Scalable and Reliable Applications!
Lambda Architecture: The Best Way to Build Scalable and Reliable Applications!
 
Developing high frequency indicators using real time tick data on apache supe...
Developing high frequency indicators using real time tick data on apache supe...Developing high frequency indicators using real time tick data on apache supe...
Developing high frequency indicators using real time tick data on apache supe...
 
Rental Cars and Industrialized Learning to Rank with Sean Downes
Rental Cars and Industrialized Learning to Rank with Sean DownesRental Cars and Industrialized Learning to Rank with Sean Downes
Rental Cars and Industrialized Learning to Rank with Sean Downes
 
Big Data Day LA 2015 - Big Data Day LA 2015 - Applying GeoSpatial Analytics u...
Big Data Day LA 2015 - Big Data Day LA 2015 - Applying GeoSpatial Analytics u...Big Data Day LA 2015 - Big Data Day LA 2015 - Applying GeoSpatial Analytics u...
Big Data Day LA 2015 - Big Data Day LA 2015 - Applying GeoSpatial Analytics u...
 
(BDT403) Netflix's Next Generation Big Data Platform | AWS re:Invent 2014
(BDT403) Netflix's Next Generation Big Data Platform | AWS re:Invent 2014(BDT403) Netflix's Next Generation Big Data Platform | AWS re:Invent 2014
(BDT403) Netflix's Next Generation Big Data Platform | AWS re:Invent 2014
 

Destaque

NTXISSACSC4 - Detecting and Catching the Bad Guys Using Deception
NTXISSACSC4 - Detecting and Catching the Bad Guys Using DeceptionNTXISSACSC4 - Detecting and Catching the Bad Guys Using Deception
NTXISSACSC4 - Detecting and Catching the Bad Guys Using Deception
North Texas Chapter of the ISSA
 

Destaque (16)

NTXISSACSC4 - Detecting and Catching the Bad Guys Using Deception
NTXISSACSC4 - Detecting and Catching the Bad Guys Using DeceptionNTXISSACSC4 - Detecting and Catching the Bad Guys Using Deception
NTXISSACSC4 - Detecting and Catching the Bad Guys Using Deception
 
Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan
Ntxissacsc5 blue 6-securityawareness-laurianna_callaghanNtxissacsc5 blue 6-securityawareness-laurianna_callaghan
Ntxissacsc5 blue 6-securityawareness-laurianna_callaghan
 
Ntxissacsc5 blue 3-shifting from incident to continuous response bill white
Ntxissacsc5 blue 3-shifting from  incident to continuous response bill whiteNtxissacsc5 blue 3-shifting from  incident to continuous response bill white
Ntxissacsc5 blue 3-shifting from incident to continuous response bill white
 
Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq
Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeqNtxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq
Ntxissacsc5 blue 5-holistic approach to cybersecurity-abu_sadeq
 
Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx
Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptxNtxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx
Ntxissacsc5 purple 3-cyber insurance essentials-shawn_tuma.pptx
 
Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins
Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higginsNtxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins
Ntxissacsc5 blue 7-zerotrust more effective approach to security-ed higgins
 
Ntxissacsc5 purple 5-insider threat-_andy_thompson
Ntxissacsc5 purple 5-insider threat-_andy_thompsonNtxissacsc5 purple 5-insider threat-_andy_thompson
Ntxissacsc5 purple 5-insider threat-_andy_thompson
 
Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller
Ntxissacsc5 blue 4-the-attack_life_cycle_erich_muellerNtxissacsc5 blue 4-the-attack_life_cycle_erich_mueller
Ntxissacsc5 blue 4-the-attack_life_cycle_erich_mueller
 
Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1
Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1
Ntxissacsc5 yellow 2-evidence driven infosec compliance strategy-garrettp1
 
Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey
Ntxissacsc5 blue 2-herding cats and security tools-harold_toomeyNtxissacsc5 blue 2-herding cats and security tools-harold_toomey
Ntxissacsc5 blue 2-herding cats and security tools-harold_toomey
 
Ntxissacsc5 purple 1-eu-gdpr_patrick_florer
Ntxissacsc5 purple 1-eu-gdpr_patrick_florerNtxissacsc5 purple 1-eu-gdpr_patrick_florer
Ntxissacsc5 purple 1-eu-gdpr_patrick_florer
 
Ntxissacsc5 red 1 & 2 basic hacking tools ncc group
Ntxissacsc5 red 1 & 2   basic hacking tools ncc groupNtxissacsc5 red 1 & 2   basic hacking tools ncc group
Ntxissacsc5 red 1 & 2 basic hacking tools ncc group
 
Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul
Ntxissacsc5 purple 4-threat detection using machine learning-markszewczulNtxissacsc5 purple 4-threat detection using machine learning-markszewczul
Ntxissacsc5 purple 4-threat detection using machine learning-markszewczul
 
Ntxissacsc5 yellow 1-beginnerslinux bill-petersen
Ntxissacsc5 yellow 1-beginnerslinux bill-petersenNtxissacsc5 yellow 1-beginnerslinux bill-petersen
Ntxissacsc5 yellow 1-beginnerslinux bill-petersen
 
Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes
Ntxissacsc5 red 6-diy-pentest-lab dustin-dykesNtxissacsc5 red 6-diy-pentest-lab dustin-dykes
Ntxissacsc5 red 6-diy-pentest-lab dustin-dykes
 
Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz
Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowiczNtxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz
Ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz
 

Semelhante a Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr_kohler

The Data Mullet: From all SQL to No SQL back to Some SQL
The Data Mullet: From all SQL to No SQL back to Some SQLThe Data Mullet: From all SQL to No SQL back to Some SQL
The Data Mullet: From all SQL to No SQL back to Some SQL
Datadog
 
application_layer (1).pdf
application_layer (1).pdfapplication_layer (1).pdf
application_layer (1).pdf
lathass5
 

Semelhante a Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr_kohler (20)

Rolling the Root Zone DNSSEC Key Signing Key
Rolling the Root Zone DNSSEC Key Signing KeyRolling the Root Zone DNSSEC Key Signing Key
Rolling the Root Zone DNSSEC Key Signing Key
 
1 technical-dns-workshop-day1
1 technical-dns-workshop-day11 technical-dns-workshop-day1
1 technical-dns-workshop-day1
 
AFRINIC DNSSEC Infrastructure and Signer Migration
AFRINIC DNSSEC Infrastructure and Signer MigrationAFRINIC DNSSEC Infrastructure and Signer Migration
AFRINIC DNSSEC Infrastructure and Signer Migration
 
Build a Time Series Application with Apache Spark and Apache HBase
Build a Time Series Application with Apache Spark and Apache  HBaseBuild a Time Series Application with Apache Spark and Apache  HBase
Build a Time Series Application with Apache Spark and Apache HBase
 
NoSQL_Night
NoSQL_NightNoSQL_Night
NoSQL_Night
 
The Data Mullet: From all SQL to No SQL back to Some SQL
The Data Mullet: From all SQL to No SQL back to Some SQLThe Data Mullet: From all SQL to No SQL back to Some SQL
The Data Mullet: From all SQL to No SQL back to Some SQL
 
Using Riak for Events storage and analysis at Booking.com
Using Riak for Events storage and analysis at Booking.comUsing Riak for Events storage and analysis at Booking.com
Using Riak for Events storage and analysis at Booking.com
 
BIND 9 - making a modern DNS server
BIND 9 - making a modern DNS serverBIND 9 - making a modern DNS server
BIND 9 - making a modern DNS server
 
DNS/DNSSEC by Nurul Islam
DNS/DNSSEC by Nurul IslamDNS/DNSSEC by Nurul Islam
DNS/DNSSEC by Nurul Islam
 
ION Sri Lanka - DNSSEC at LK Domain Registry
ION Sri Lanka - DNSSEC at LK Domain RegistryION Sri Lanka - DNSSEC at LK Domain Registry
ION Sri Lanka - DNSSEC at LK Domain Registry
 
Lets talk dns
Lets talk dnsLets talk dns
Lets talk dns
 
23rd PITA AGM and Conference: DNS Security - A holistic view
23rd PITA AGM and Conference: DNS Security - A holistic view 23rd PITA AGM and Conference: DNS Security - A holistic view
23rd PITA AGM and Conference: DNS Security - A holistic view
 
DNSSEC
DNSSECDNSSEC
DNSSEC
 
Real-Time Analytics with Spark and MemSQL
Real-Time Analytics with Spark and MemSQLReal-Time Analytics with Spark and MemSQL
Real-Time Analytics with Spark and MemSQL
 
10 Ways to Scale Your Website Silicon Valley Code Camp 2019
10 Ways to Scale Your Website Silicon Valley Code Camp 201910 Ways to Scale Your Website Silicon Valley Code Camp 2019
10 Ways to Scale Your Website Silicon Valley Code Camp 2019
 
Cassandra Summit 2014: Novel Multi-Region Clusters — Cassandra Deployments Sp...
Cassandra Summit 2014: Novel Multi-Region Clusters — Cassandra Deployments Sp...Cassandra Summit 2014: Novel Multi-Region Clusters — Cassandra Deployments Sp...
Cassandra Summit 2014: Novel Multi-Region Clusters — Cassandra Deployments Sp...
 
application_layer (1).pdf
application_layer (1).pdfapplication_layer (1).pdf
application_layer (1).pdf
 
Cassandra 2.0 and timeseries
Cassandra 2.0 and timeseriesCassandra 2.0 and timeseries
Cassandra 2.0 and timeseries
 
NoSQL – Data Center Centric Application Enablement
NoSQL – Data Center Centric Application EnablementNoSQL – Data Center Centric Application Enablement
NoSQL – Data Center Centric Application Enablement
 
CNIT 40: 2: DNS Protocol and Architecture
CNIT 40: 2: DNS Protocol and ArchitectureCNIT 40: 2: DNS Protocol and Architecture
CNIT 40: 2: DNS Protocol and Architecture
 

Mais de North Texas Chapter of the ISSA

NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...
NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...
NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...
North Texas Chapter of the ISSA
 
NTXISSACSC4 - Business Geekdom: 1 = 3 = 5
NTXISSACSC4 - Business Geekdom: 1 = 3 = 5NTXISSACSC4 - Business Geekdom: 1 = 3 = 5
NTXISSACSC4 - Business Geekdom: 1 = 3 = 5
North Texas Chapter of the ISSA
 

Mais de North Texas Chapter of the ISSA (14)

Purple seven-ntxissacsc5 walcutt
Purple seven-ntxissacsc5 walcuttPurple seven-ntxissacsc5 walcutt
Purple seven-ntxissacsc5 walcutt
 
Ntxissacsc5 yellow 7 protecting the cloud with cep
Ntxissacsc5 yellow 7 protecting the cloud with cepNtxissacsc5 yellow 7 protecting the cloud with cep
Ntxissacsc5 yellow 7 protecting the cloud with cep
 
Ntxissacsc5 gold 4 beyond detection and prevension remediation
Ntxissacsc5 gold 4 beyond detection and prevension   remediationNtxissacsc5 gold 4 beyond detection and prevension   remediation
Ntxissacsc5 gold 4 beyond detection and prevension remediation
 
Ntxissacsc5 gold 1 mimecast e mail resiliency
Ntxissacsc5  gold 1 mimecast e mail resiliencyNtxissacsc5  gold 1 mimecast e mail resiliency
Ntxissacsc5 gold 1 mimecast e mail resiliency
 
Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney
Ntxissacsc5 blue 1-nine cybersecurity habits-george_finneyNtxissacsc5 blue 1-nine cybersecurity habits-george_finney
Ntxissacsc5 blue 1-nine cybersecurity habits-george_finney
 
NTXISSACSC4 - Security for a New World
NTXISSACSC4 - Security for a New WorldNTXISSACSC4 - Security for a New World
NTXISSACSC4 - Security for a New World
 
NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...
NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...
NTXISSACSC4 - Intellectual Property Protection― Cross Roads between Ethics, I...
 
NTXISSACSC4 - How Not to Build a Trojan Horse
NTXISSACSC4 - How Not to Build a Trojan HorseNTXISSACSC4 - How Not to Build a Trojan Horse
NTXISSACSC4 - How Not to Build a Trojan Horse
 
NTXISSACSC4 - Layered Security / Defense in Depth
NTXISSACSC4 - Layered Security / Defense in DepthNTXISSACSC4 - Layered Security / Defense in Depth
NTXISSACSC4 - Layered Security / Defense in Depth
 
NTXISSACSC4 - World of Discovery
NTXISSACSC4 - World of DiscoveryNTXISSACSC4 - World of Discovery
NTXISSACSC4 - World of Discovery
 
NTXISSACSC4 - Business Geekdom: 1 = 3 = 5
NTXISSACSC4 - Business Geekdom: 1 = 3 = 5NTXISSACSC4 - Business Geekdom: 1 = 3 = 5
NTXISSACSC4 - Business Geekdom: 1 = 3 = 5
 
NTXISSACSC4 - Day in the Life of a Security Solutions Architect
NTXISSACSC4 - Day in the Life of a Security Solutions ArchitectNTXISSACSC4 - Day in the Life of a Security Solutions Architect
NTXISSACSC4 - Day in the Life of a Security Solutions Architect
 
NTXISSACSC4 - Red, Amber, Green Status: The Human Dashboard
NTXISSACSC4 - Red, Amber, Green Status: The Human DashboardNTXISSACSC4 - Red, Amber, Green Status: The Human Dashboard
NTXISSACSC4 - Red, Amber, Green Status: The Human Dashboard
 
NTXISSACSC4 - Hacking Performance Management, the Blue Green Game
NTXISSACSC4 - Hacking Performance Management, the Blue Green GameNTXISSACSC4 - Hacking Performance Management, the Blue Green Game
NTXISSACSC4 - Hacking Performance Management, the Blue Green Game
 

Último

valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
soniya singh
 
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Chandigarh Call girls 9053900678 Call girls in Chandigarh
 
Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Service
Hot Service (+9316020077 ) Goa  Call Girls Real Photos and Genuine ServiceHot Service (+9316020077 ) Goa  Call Girls Real Photos and Genuine Service
Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Service
sexy call girls service in goa
 
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝
soniya singh
 

Último (20)

VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...
VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...
VVIP Pune Call Girls Sinhagad WhatSapp Number 8005736733 With Elite Staff And...
 
VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...
VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...
VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
 
Moving Beyond Twitter/X and Facebook - Social Media for local news providers
Moving Beyond Twitter/X and Facebook - Social Media for local news providersMoving Beyond Twitter/X and Facebook - Social Media for local news providers
Moving Beyond Twitter/X and Facebook - Social Media for local news providers
 
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
 
(+971568250507 ))# Young Call Girls in Ajman By Pakistani Call Girls in ...
(+971568250507  ))#  Young Call Girls  in Ajman  By Pakistani Call Girls  in ...(+971568250507  ))#  Young Call Girls  in Ajman  By Pakistani Call Girls  in ...
(+971568250507 ))# Young Call Girls in Ajman By Pakistani Call Girls in ...
 
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
 
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
 
Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Service
Hot Service (+9316020077 ) Goa  Call Girls Real Photos and Genuine ServiceHot Service (+9316020077 ) Goa  Call Girls Real Photos and Genuine Service
Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Service
 
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
 
Russian Call girl in Ajman +971563133746 Ajman Call girl Service
Russian Call girl in Ajman +971563133746 Ajman Call girl ServiceRussian Call girl in Ajman +971563133746 Ajman Call girl Service
Russian Call girl in Ajman +971563133746 Ajman Call girl Service
 
Al Barsha Night Partner +0567686026 Call Girls Dubai
Al Barsha Night Partner +0567686026 Call Girls  DubaiAl Barsha Night Partner +0567686026 Call Girls  Dubai
Al Barsha Night Partner +0567686026 Call Girls Dubai
 
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
 
Real Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirtReal Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirt
 
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
 
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...
 
On Starlink, presented by Geoff Huston at NZNOG 2024
On Starlink, presented by Geoff Huston at NZNOG 2024On Starlink, presented by Geoff Huston at NZNOG 2024
On Starlink, presented by Geoff Huston at NZNOG 2024
 
Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.
Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.
Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.
 
All Time Service Available Call Girls Mg Road 👌 ⏭️ 6378878445
All Time Service Available Call Girls Mg Road 👌 ⏭️ 6378878445All Time Service Available Call Girls Mg Road 👌 ⏭️ 6378878445
All Time Service Available Call Girls Mg Road 👌 ⏭️ 6378878445
 
Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝
 

Ntxissacsc5 yellow 6-abusing protocols for dynamic addressing in space-jacenr_kohler

  • 1. NTXISSA Cyber Security Conference – November 10-11, 2017 @NTXISSA #NTXISSACSC5 [Session Title] [Presenter] [Position] [Institution] [Date]
  • 2.
  • 3. About me • University of North Texas Alum • Class of 2017 • Majored in Computer Engineering • Team Leader for Senior Design project for NASA • President of UNT’s Club for Cyber Security • National Cyber League • Collegiate Cyber Defense Competition • Goldman Sachs Analyst 2017 NAPA • GS 2016 Summer Analyst (Intern) #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 32017-Nov-11th
  • 4. Team IRIS • Jacen R Kohler • Tyler Alvarez • Alex Fatum #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 42017-Nov-11th
  • 5. How did I get a NASA Project? Texas Space Grant Consortium • Educational wing for NASA in Texas • Open to all college students in Texas • Other stated have equivilant programs #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 52017-Nov-11th
  • 6. Current Situation Internet in space uses static IPv4 addresses Static addressing requires manually assigning addresses Static addressing is not fault tolerant duplicates are possible The constantly varying propagation delays & line interfere with traditional network handshakes #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 62017-Nov-11th
  • 7. Current Situation The current Tracking and Data Relay Satellite (TDRS) System are merely repeaters and amplifies and have no routing capabilities #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 72017-Nov-11th
  • 8. The Problem The process should be automated aka… Dynamic Addressing Just like your phone on a coffee shop’s wifi A protocol like this already exists Dynamic Host Configuration Protocol (DHCP) #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 82017-Nov-11th
  • 9. How to Solve this problem Simulate a space network, down here on Earth including… propagation delay line-of-sight signal blocking adequate complexity (enough parts to be realistic) Find a way to implement DHCP in the simulated space network #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 92017-Nov-11th
  • 10. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 102017-Nov-11th Adequate Complexity •Simulate a space network on earth •10x Raspberry Pi 3 •Mission Control Center •3x TDRS •TDRS5, TDRS7, &TDRS9 •3x Spacecraft • ISS, Hubble, Orion •3x EVA Suits
  • 11. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 112017-Nov-11th Adequate Complexity
  • 12. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 122017-Nov-11th Adequate Complexity • Pull TLE data from CelesTrak • Two Line Element (TLE) • 3000 TLE data in the file that gets parsed • Search for orbital element we need • Extract the 6 Keplerian Elements from TLE • 6 Keplerian elements are like an address • Allow us to calculate time based locations • Past, present, or future
  • 13. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 132017-Nov-11th Simulated Space Network • One way link to TDRS in GeoSynchronous orbit takes • Simulation must emulate these delays to be realistic
  • 14. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 142017-Nov-11th Simulated Space Network (cont.) • Delays will be simulated using existing open source tools designed for network testing • tcconfig +312.432ms 149460120 0 Hold for delay Epoch time received Packet Ingress ( distance / speed of light ) + time of insert +312.437ms 149460120 1 +312.443ms 149460120 2 +312.449ms 149460120 3 +312.452ms 149460120 4
  • 15. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 152017-Nov-11th Simulated Space Network (cont.)
  • 16. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 162017-Nov-11th Simulated Space Network (cont.)
  • 17. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 172017-Nov-11th DHCP • Discover • Spacecraft announces its presence • Offer • DHCP offers several available addresses • Request • Spacecraft requests an offered addresses • Acknowledge • DHCP assigns requested address • DHCP from Earth takes ~112ms • DHCP from TDRS takes ~56ms • 50% time savings
  • 18. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 182017-Nov-11th DHCP (cont.) • Offer (predicted) • DHCP offers only one address • Request • Spacecraft requests the address offered • Acknowledge (pipelined) • DHCP pre-empts the acknowledgement • Traditional DHCP takes ~112ms • Pipelined DHCP takes ~28ms • 75% time savings • Pipeline DHCP from TDRS takes ~12ms • 87.5% time savings
  • 19. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 192017-Nov-11th
  • 20. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 202017-Nov-11th Project Management • Agile methodologies • Iterative Testing • GitHub • Slack • Additional paperwork • Status Reports • Implementation Plan • Test Plan • Maintenance Plan • User Guide
  • 21. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 212017-Nov-11th Project Management (cont.)
  • 22. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 222017-Nov-11th Adequate Complexity
  • 23. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 232017-Nov-11th Adequate Complexity
  • 24. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 242017-Nov-11th 0 50 100 150 1494115200 1494201600 1494288000 1494374400 1494460800 1494547200 1494633600 1494720000 DHCPHandshakeDuration(milliseconds) Epoch Time (seconds) ISS & HST with TDRS5, TDRS7, & TDRS9 from 2017 May 07th to 13th Traditional DHCP from Earth Pipelined DHCP from TDRS
  • 25. #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 252017-Nov-11th
  • 26. Prerequisites TDRSs must have compute power onboard To act as DHCP Server To calculate orbital mechanics We launch a new one every year or so #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 262017-Nov-11th
  • 27. Future Work • GeoCentric to HelioCentric Transform • Allow for mars simulations • Automation
  • 28.
  • 29.
  • 30.
  • 31. 2017-Nov-11th #NTTXISSACSC5 Abusing Protocols for Dynamic Addressing in Spaces 31
  • 32. NTXISSA Cyber Security Conference – November 10-11, 2017 @NTXISSA #NTXISSACSC5 32 Thank you