1. Hacking Windows Vista Security Dan Griffin JW Secure, Inc.

2. Introduction Who am I? What are these tools and where did they come from?

3. Topic Summary Sample code projects are C/C++ based & require Vista Free downloads! Topics: Smart Cards, Crypto, Firewall, IPsec

4. Hacking Smart Cards Or, more specifically, fuzzing smart card middleware. What’s fuzzing? What’s a smart card? What’s smart card middleware?

5. Smart Card Application Stack

6. Smart Card Fuzzing Demo (Or, don’t trust everything your smart card tells you …)

7. Hacking Crypto What’s CNG? What’s CMS? What’s Twofish? Article link –http://blogs.msdn.com/onoj/archive/2007/05/10/windo ws-vista-security-series-adding-a-cipher-algorithm-to- windows-vista.aspxhttp://blogs.msdn.com/onoj/archive/2007/05/10/windo ws-vista-security-series-adding-a-cipher-algorithm-to- windows-vista.aspx Code download –http://download.microsoft.com/download/f/1/2/f12dbb b5-d164-4e7c-b42d-aaca3efb85dc/CNGSample.EXEhttp://download.microsoft.com/download/f/1/2/f12dbb b5-d164-4e7c-b42d-aaca3efb85dc/CNGSample.EXE

8. Twofish Plug-in Architecture

9. Crypto Demo (Or, now NSA can’t read my email ) (maybe …)

10. Hacking The Firewall What’s a network firewall? Article link –http://blogs.msdn.com/onoj/archive/2007/05/09/windo ws-vista-security-series-programming-the-windows- vista-firewall.aspxhttp://blogs.msdn.com/onoj/archive/2007/05/09/windo ws-vista-security-series-programming-the-windows- vista-firewall.aspx Code download –http://download.microsoft.com/download/f/1/2/f12dbb b5-d164-4e7c-b42d- aaca3efb85dc/FirewallSample.exehttp://download.microsoft.com/download/f/1/2/f12dbb b5-d164-4e7c-b42d- aaca3efb85dc/FirewallSample.exe

11. FwTool Architecture

12. Firewall Demo

13. Hacking IPsec/Socket Extensions What’s IPsec? What’s “Winsock Secure Socket Extensions”? Code download –http://download.microsoft.com/download/f/1/2/f12dbb b5-d164-4e7c-b42d- aaca3efb85dc/IPsecPingSample.EXEhttp://download.microsoft.com/download/f/1/2/f12dbb b5-d164-4e7c-b42d- aaca3efb85dc/IPsecPingSample.EXE

14. IPsecPing Architecture

15. IPsecPing Demo (Co-developed with V6 Security, Inc.)

16. Questions? Contact Info –Dan Griffin (dan@jwsecure.com)dan@jwsecure.com –Blog = http://www.jwsecure.com/dan/index.html http://www.jwsecure.com/dan/index.html