28c3: Defending mobile phones
Channel: 28c3
Date: 2011-12-28

Download high quality version: http://bit.ly/t9efIP
Description: http://events.ccc.de/congress/2011/Fahrplan/events/4736.en.html

Karsten Nohl, Luca Melette: Defending mobile phones

Cell phone users face an increasing frequency and depth of privacy intruding attacks. Defense knowledge has not scaled at the same speed as attack capabilities. This talk intends to revert this imbalance.

Most severe attack vectors on mobile phones are due to an outdated technology base that lacks strong cryptographic authentication or confidentiality. Given this discrepancy between protection need and reality, a number of countermeasures were developed for networks and phones to better protect their users.

We explain the most important measures and track their deployment. Furthermore, we will release tools to measure the level of vulnerability of networks. Sharing the results of these measurements will hopefully create problem awareness and demand for more security by phone users around the world.