The telecommunications networks are one of our most important critical infrastructure assets. In fact all of the other critical infrastructure domains are dependent upon the telecommunications critical infrastructure for operation for example ICS\SCADA. In this talk we will discuss a quick overview of telecommunication architectures and operations for border gateway protocol (BGP) services with references to the recent BGP prefix hijacking attacks. The discussion will then pivot to how Multi-protocol Label Switch (MPLS) networks may be attacked in telecommunications networks. Could it be that the MPLS networks are being attacked similar to BGP? How would someone go about targeting MPLS networks? The MPLS discussion will provide an overview of MPLS VPN's and MPLS traffic engineering architectures and operations including packet captures of label traffic for reference. Attack vectors for targeting MPLS networks will be addressed in addition to a couple new ideas for gathering intel from MPLS networks. Recommendations for monitoring and securing BGP and MPLS networks will be discussed as well.

Bio: responsible for architecting and securing large complex tactical, critical infrastructure and service provider networks. Paul?s expertise includes tactical, service provider and ICS\SCADA network infrastructure hacker attacks and defenses as well as large complex network design and implementation. Paul?s experience includes leading network architecture reviews, vulnerability analysis and penetration testing engagements for critical infrastructure networks. Paul is a frequent speaker on offense and defense topics related to critical infrastructure networks. He has presented at the following conferences DeepIntel, DerbyCon, BSides, Hacker Halted, COUNTERMEASURE, TakeDownCon, DeepSec, SCADA [in]Security and DC3. Paul is a Cisco Systems Certified Instructor # 32230, Certified EC-Council Instructor and a certified SCADA security architect. He has a BS in Math, an MS in CIS and is currently pursuing an MS in IA\Security. In addition he holds a wide array of professional certifications.

Back to ShowMeCon 2015 video list