2023年8月8日、9日にラスベガスで開催された国際カンファレンス「BSidesLV」にて、取締役CTOの高岡哲也がレッドチームオペレーションや、物理ペネトレーションテストに関する最新技術や国内動向について発表を行いました。
発表成果
- カンファレンス ： BSides LasVegas 2023
- タイトル ： Breaking In: Unleashing the Power of Physical Offensive Security
- 発表者 ： Tetsuya Takaoka
- URL ： https://bsideslv.org/talks#H3JPRT
発表概要
Physical security is often overlooked when companies consider cybersecurity. Insufficient physical security measures allow attackers to physically intrude into restricted areas and even break into cyberspace by hacking LAN ports in offices. And indeed we were able to conduct evaluations against several companies and subsequently break into their corporate networks and take files that imitated confidential information.
In this presentation, we will explain and demonstrate attack methods such as intruding into a building by impersonating an external company, breaking through security gates by duplicating RFID using the latest technology, and bypassing MAC address filtering by LAN port hacking. We hope to help the audiences understand how easy physical attacks are and to help companies strengthen their physical security measures.