PPT-Pass-The-Hash: Gaining Root Access to Your Network

PassTheHash Gaining Root Access to Your Network June 24 2014 Tim Slaybaugh Cyber Incident Analyst Northrop Grumman Information Systems What is PassTheHash Attackers using PtH completely compromise just about every network they hit Pretty much every APT attack team uses them. MSIT 458 – The Chinchillas. Agenda. Introduction of Problem. Pros and Cons of Existing Security Systems. Possible Solutions. Recommended Solution. Solution Implementation. Final Recommendation. 2. Introduction of Problem. Mark Russinovich Technical Fellow. Microsoft Azure. Nathan Ide Principal Dev Lead. Microsoft Windows. Pass-the-Hash == Single-Sign On. Pass-the-hash is the use of a saved credential or authenticator . Yin Yang. , Dimitris Papadias, Stavros Papadopoulos. H. KUST, Hong Kong. Panos Kalnis. KAUST, Saudi Arabia. Providence, USA, 2009. Database Outsourcing. Advantages. The data owner does not need the hardware / software / personnel to run a DBMS. ACCESS CAVITY PREPERATION. Dr. . Rakesh. . kumar. . yadav. Associate professor. ROOT CANAL ANATOMY AND . ACCESS CAVITY PREPERATION. . The hard tissue surrounding the dental pulp can take a variety of configurations and shapes . Manage WHO can view data . (Secrecy). Make sure data is unmodified (Authentication/data integrity). Know the origin of the data. (Non-Repudiation). Cryptography: Goals. Alice & Bob . Are two persons who want to communicate without anybody else knows the content . (based on slides from UC Berkeley). Join Operators. Join Operators. Joins are a very common query operation.. Joins can be very expensive:. Consider an inner join of R and S each with 1M records. Q: How many tuples in the answer?. MapReduce. Karim Ibrahim. Anh Pham. 1. Outline. Motivation & Introduction. Benchmarking . study. Optimizing . Hadoop. Motivation. 3. Motivation (. cont. ’). Motivation. :. MapReduce. model is not well suited for one pass analytics.. Introducing Network Access Protection. Network Access Protection Architecture. Reviewing NAP Enforcement Options. What Will We Cover?. Level 300. Familiarity with DHCP. Knowledge of IPsec. Familiarity with RRAS and VPN. Agenda. Introduction of Problem. Pros and Cons of Existing Security Systems. Possible Solutions. Recommended Solution. Solution Implementation. Final Recommendation. 2. Introduction of Problem. 3. The Problem. Agenda. Introduction of Problem. Pros and Cons of Existing Security Systems. Possible Solutions. Recommended Solution. Solution Implementation. Final Recommendation. 2. Introduction of Problem. 3. The Problem. John Denune. IT Security . Director. University of California, San Diego. jdenune@ucsd.edu. ACT Infrastructure services. E-mail. Active Directory. Networking. ID Management. Security. Telecom. Data Center. n. . . [from the . techspeak. ] (var. ‘hash clash’) . When used of people, signifies a confusion in associative memory or imagination, especially a persistent one.” . . -. The Hacker's Dictionary . Preventing . Lateral Movement and Privilege Escalation . Mark Simos. Aaron Margosis. Microsoft Cybersecurity Team. ATC-B210. Topics. The Problem. Attack Scenario. Demo. Mitigations and Recommendations. Dr Philip O’Kane. Lecturer at Queen’s University Belfast. MSc Applied Cybersecurity Director. The Evolution of Password. The Evolution of Password as a means of authentication. What is:. Authentication.