Technical Tuesday – 8 February 2011 – Network Device Exploitation with Universal Plug & Play by Terry Dunlap of Tactical Network Solutions

Universal Plug & Play (UPnP) is a convenience technology found in many embedded devices such as home routers and wireless access points. The purpose is to allow various heterogeneous, network-enabled devices (i.e. phones, video game consoles, DVRs, etc.) to seamlessly communicate to the outside world without user configuration. To this end, UPnP devices automatically make firewall changes to a user’s network without their knowledge.

A live demonstration illustrates how easily an attacker can manipulate modern day wireless access points with UPnP and how this technique can be utilized as a covert attack vector.

Presented by: Terry Dunlap, Partner & Managing Member of Tactical Network Solutions

Mr. Dunlap founded Tactical Network Solutions to provide military units, the intelligence community and law enforcement agencies the means to collect and analyze data from networks for actionable intelligence as well as the ability to conduct low-profile computer network operations in high-risk/denied areas.

Mr. Dunlap has spent over fives years as an intelligence analyst, programmer, trainer and speaker with the Department of Defense. His focus has been intelligence collection systems, covert communications systems and computer network operations. Customers have included the CIA, FBI, Marine Radio Battalions, Joint Special Operations Command and state law enforcement.

Prior to his DoD experience, Mr. Dunlap held network security positions at Western Kentucky University and Deloitte & Touche, LLP. Prior to that Mr. Dunlap worked at Fidelity Investments.

Mr. Dunlap earned a Master of Science in Network Security from Capitol College and a Bachelor of Arts in Political Science and Economics from Case Western Reserve University.