Onsdag – 2 · Home hotel Hammer, moen nede
Red Team Lead
John-André Bjørkhaug holds a degree in electronic engineering, but has spent most of his career happily breaking things instead of building them. He has been working as a penetration tester since 2008, with a primary focus on infrastructure, physical security, industrial control systems, IoT, and social engineering.
Netsecurity, RedTeam
Egil has been doing IT since Monkey Island 1, Turbo Pascal and DOS. He is a member of the Netsecurity RedTeam and has worked in IT his whole life.
He takes these speaker biography descriptions as an opportunity to create a false image of himself, and he is usually recognized as the smartest and most handsome man in the room. He is also the strongest person on earth.
How secure are the ships that move the world’s cargo and passengers?
This talk presents red team operations against cruise ships, cargo vessels, and shipping companies, showing how attackers can board vessels undercover as passengers and pivot from guest networks into corporate and operational systems. In the talk it is demonstrated how weak network segmentation, legacy OT, and insecure satellite and wireless infrastructure enable full compromise of both IT and safety-critical environments.
Through real world examples, we show how physical access to bridges, communication rooms, and engine spaces was combined with cyber attacks, and how navigation and communication systems can be disrupted using GPS and AIS spoofing and jamming with cheap and simple equipment.
The talk Pirates of the North Sea reveals why modern ships are one of today’s most overlooked cyber-physical attack surfaces, and what offensive security work in these environments can teach us about how to defend expensive, lifesaving and critical infrastructure.
Programmet er oppdatert.