How to secure the keyboard chain - DEF CON CON 23/DEF CON 23 presentations/DEF… · How to secure...

How to secure the keyboardchain

DEF CON 23

Paul Amicelli - Baptiste David - CVO Esiea-Ouest

c Creative Commons 2.0 - b Attribution - n NonCommercial - a ShareAlike 1 / 25

The Talk

1. Background

2. Keyloggers forms

3. Main idea of our work

4. Details of our work

5. To go further

6. Finally.

Paul Amicelli - Baptiste David - CVO Esiea-Ouest - cbna 2 / 25

Keyloggers

"A keylogger is a little piece of software orhardware, which is able to retrieve every

keystrokes on a computer"

Background

User mode ones

Easy to developp, and really efficient

Quite easy to detect and remove

Keyloggers Forms

Kernel mode ones

Quite hard to develop and really, reallyefficient

Not easy to detect and quite hard to remove

Keyloggers Forms

Hardware ones

Require physical access to the computer,

but the most efficient technic

Software-undetectable, sometimes easy to remove, sometimes not

Keyloggers Forms

Proposed solution

Encrypt keystrokes

As close as possible to the hardware

Jamming keyloggers

Our work - Main Idea

Basic Understanding

Keyboard driver stack

Our work - Details

Encryption

Problematic

Unable to directly encrypt keystrokes with a streamcipher

Only known keystrokes are broadcasted by Windows

The rest is inhibated

Few keystrokes codes authorized

Our work - Details

Encryption

White list system for input decision

Our work - Details

Encryption

Solution : Jamming

Currently, a 64bits common key exchangedevery 20 keystrokes

Stream cipher initiated with the commonkey

Algorithm based on shuffle of a deck ofcards : only

Our work - Details

Encryption Scheme

Our work - Details

API-Driver Communication

Our work - Details

Protection of the protection

Monitoring of the keyboard driver stack

Protection against DLL injection of the API

Monitoring of the registry

Our work - Details

Is it working ?

Our work - Results

Endless possibilities

Keystrokes combinations

Polymorphic on-screen keyboard

Time based keystrokes

Mini-game, music, colors,..

Keep keystrokes in ring 0 (GostCrypt)

Our work - To go further

GostCrypta full ring 0 password version

Our work - Example

State of the project

Proof of concept

Available on Github

( https:// github.com/whitekernel/gostxboard.git )

Educational purpose

Free and opensource, forever

Call for participation

Finally

Questions ?

Maybe answers . . .

Question time

paul.amicelli@gostcrypt.org - baptiste.david@gostcrypt.org

How to secure the keyboard chain - DEF CON CON 23/DEF CON 23 presentations/DEF… · How to secure...

Documents

Transcript of How to secure the keyboard chain - DEF CON CON 23/DEF CON 23 presentations/DEF… · How to secure...

Aaron Bayles DC101 @ DEF CON 22 - DEF CON® Hacking Conference · Aaron Bayles DC101 @ DEF CON 22 ... //media.blackhat.com/us ... Lockpicking, Hackers, Infosec, Hardware Hacking,

DEF CON 25 Hacker Conference CON 25/DEF CON 25 presentations/DEF… · $ python c2960-lanbasek9-m-12.2 ... DEF CON 25 Hacker ... Subject: DEF CON 25 Presentation Keywords: DEF CON

Download - Def Con

Betrayed by the keyboard - DEF CON Media Server CON 26/DEF CON 26...Betrayed by the keyboard How what you type can give you away Matt Wixey Research Lead, PwC UK Cyber Security Building

Security Research over Windows - DEF CON › DEF CON China beta › DEF CON... · w32k attack surface hardening 4 years ago •Fonts •TTF emulation in kernel •Loading custom fonts

Hacking travel routers like it’s 1999 - DEF CON Media Server CON 25/DEF CON 25 presentations/DEF… · Hacking travel routers like it’s 1999 Mikhail Sosonkin. Mikhail Sosonkin

Universal RF Usb Keyboard Emulation Device - DEF CON · PDF filePwner Schematic. Pwner ... opens the windows run dialog box using ... Keyboard Emulation Device,Universal RF Usb Keyboard

Teaching Old Shellcode New Tricks - DEF CON CON 25/DEF CON 25 presentations/DE… · Teaching Old Shellcode New Tricks DEF CON 2017 @midnite_runr

MouseJack: Injecting Keystrokes into Wireless Mice CON 24/DEF CON 24...Anker Ultra Slim 2.4GHz Wireless Compact Keyboard EagleTec K104 / KS04 2.4 GHz Wireless Combo keyboard HP Wireless

DEF CON 26 Hacking Conference CON 26/DEF CON 26...Find us on Twitter: @michaelossmann / @dominicgs Title DEF CON 26 Hacking Conference Author DEF CON Speaker Subject DEF CON 26 Presentation

DEF CON 23 Presentation CON 23/DEF CON 23 presentations/DEF… · Don’t"believe"anything"I"Say • Also,"hold"those"around"you"accountable

Introduction to SDR & the Wireless Village - DEF CON CON 23/DEF CON 23 presentations/DEF… · Introduction to SDR & the Wireless Village ! Who the Frig...! satanklawz!! DaKahuna!

HACKING HOTEL KEYS - DEF CON CON 24/DEF CON 24 presentations/DEF… · HACKING HOTEL KEYS Security Consultant ... Researcher. 9About 11 years pen-testing, Security Research, ... 912

Detecting Blue Team Recon With Ads - media.defcon.org CON 26/DEF CON 26 presentations/DEF… · Title: DEF CON 26 Hacking Conference Author: DEF CON Speaker Subject: DEF CON 26 Presentation

DEF CON 26 HACKING CONFERENCE CON 26/DEF CON 26 receipt.pdf · Title: DEF CON 26 HACKING CONFERENCE Author: DEF CON 26 Subject: DEF CON 26 RECEIPT Keywords: DEF CON Conference, DEF

DEF CON 23 Presentation CON 23/DEF CON 23 presentations/DEF CON 23... · GPS SPOOFING Low-cost GPS simulator HUANG Lin, YANG Qing Unicorn Team – Radio and Hardware Security Research

Cracking Cryptocurrency Brainwallets - DEF CON CON 23/DEF CON 23 presentations/DEF… · Cracking Cryptocurrency Brainwallets Ryan Castellucci ... pass a file with pubkeyhashs, ...

Network Protocol Reverse Engineering - DEF CON CON 24/DEF CON 24...Katea Murray –murrayka@leidos.com 2016-08-05 Estell/Murray Eavesdropping on the Machines 28. Title: DEF CON 24

DEF CON 26 Hacking Conference CON 26/DEF CON 26 presentations/DEF… · Malware Analysis Triage with Automated Disassembly Amanda Rousseau Rich Seymour. About Us Amanda Rousseau Rich

Network Protocol Reverse Engineering - DEF CON CON 24/DEF CON 24 presentations/DEF… · Network Protocol Reverse Engineering ... Linux, Mac •Scapy –Python based, extensible •Fuzzing