BEGIN:VCALENDAR PRODID;X-RICAL-TZSOURCE=TZINFO:-//Calagator//EN CALSCALE:GREGORIAN X-WR-CALNAME:Calagator METHOD:PUBLISH VERSION:2.0 BEGIN:VTIMEZONE TZID;X-RICAL-TZSOURCE=TZINFO:America/Los_Angeles BEGIN:DAYLIGHT DTSTART:20130310T020000 RDATE:20130310T020000 TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20130620T015132Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20130702T193000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20130702T183000 DTSTAMP;VALUE=DATE-TIME:20130620T015132Z LAST-MODIFIED;VALUE=DATE-TIME:20130620T230748Z UID:http://calagator.org/events/1250464408 DESCRIPTION:Kevin P. Dyer presents:P0wning DPI with Format-Transforming E ncryption \;\n \;\nDeep packet inspection (DPI) technologies prov ide much-needed visibility and control of network traffic using port- 3\;\nindependent protocol identification (PIPI)\, where a network flow i s labeled with its application-layer protocol based on packet contents.& #13\;\nIn many cases PIPI can be used for good. As one example\, it allo ws network administrators to elevate priority of time-sensitive (e.g.\,& #13\;\nVoIP) data streams. In other cases PIPI can be used for harm\, na tion-states employ PIPI to block censorship circumvention tools such \;\nas Tor. There are many ways to perform PIPI\, however\, at the core of nearly all modern PIPI systems are regular expressions --- an \;\n expressive tool to compactly specify sets of strings. \;\n \;\n 3\;\nIn this talk\, Kevin reviews the state-of-the-art research on the c apabilities of state-level DPI\, then presents a novel cryptographic \;\nprimitive called format-transforming encryption (FTE.) An FTE scheme \, intuitively\, extends conventional symmetric encryption with the \ ;\nability to transform the ciphertext into a user-defined format using regular expressions. An FTE-based record layer will be presented \;\n that can encrypt arbitrary TCP traffic and coerce modern DPI systems int o misclassifying any data stream as a target protocol (e.g.\, \;\nHTT P\, SMB\, RSTP\, etc.) of the user's choosing. What's more\, this work i s not only theoretical in nature --- an open-source FTE \;\nprototype is publicly available and has had success in subverting modern DPI syst ems\, including the Great Firewall of China. \;\n \;\nPSU is kindl y providing coffee\, tea\, and cookies for us. \;\n \;\nKevin P. D yer is a PhD student at Portland State University. His research focuses on building protocols that are resistant to traffic-analysis attacks and discriminatory routing policies.. Previously\, Kevin worked as a softwa re engineer in telecommunications security\, web security and network se curity. He holds an MSc in the Mathematics of Cryptography and Communica tions from Royal Holloway\, University of London\, and a BS in Computer Science and Mathematics from Santa Clara University. \;\n \;\n \;\n \;\nThe Open Web Application Security Project (OWASP) is a 501c3 not-for-profit worldwide charitable organization focused on improving t he security of application software. To sign up for future meeting notes and to discuss security topics with local gurus\, sign up on the OWASP Portland mailing list: \;\n \;\n https://lists.owasp.org/mail man/listinfo/owasp-portland \;\n \;\nMeetings are free and open to the public.\n\nTags: security\, owasp\, privacy\, cryptography\n\nImpor ted from: http://calagator.org/events/1250464408 URL:https://www.owasp.org/index.php/Portland SUMMARY:OWASP Chapter Meeting LOCATION:Portland State University Fourth Avenue Building (FAB): 1900 SW 4th Ave.\, Portland OR 97201 US SEQUENCE:3 END:VEVENT END:VCALENDAR