Cyber Defense Initiative^® 2013

Privacy and Peace of Mind While Accessing the Internet Via a Free/Public Access Point Through the Use of Your Very Own SOHO VPN Server. Easy as Pie... Raspberry Pi.

• Eric Jodoin - STI Master’s Degree Candidate
• Sunday, December 15th, 8:15pm - 8:55pm

Masterâs Presentation

Free, unencrypted wireless access points have proliferated and are now found in various locations such as restaurants, libraries, schools, hotels, airports, an even here at SANS CDI... In conjunction with the spread of mobile devices, "getting on the Internet" has quickly migrated from the relative confines of offices and homes to locations where a high number of users are sharing the same open access point. While convenient, this situation also increases the likelihood that someone will have the skills and intent to pry into our privacy and collect our Internet traffic for nefarious purposes. Those of you who might have seen Joshua Wright's evening presentation titled "Hacking Your Friends and Neighbors For Fun" have seen first-hand the kind of mischief that can be accomplished!

As security professionals, we are always preaching restraint when it comes to using free/public wireless access points. But, when asked for an alternative other than wait to go back home, there is little to offer for small office/home office (SOHO) users that is practical while also remaining free or at least, almost free. This presentation proposes such an alternative using a Raspberry Pi in conjunction with the freely distributed OpenVPN Server and client software. The solution requires minimal changes to an existing SOHO network and is simple to configure on a broad variety of mobile platforms including Windows, Linux, OS X, iOS, and Android.

As a bonus, you will learn how to get on Joshuaâs â"neighbor-hack Access Point" while remaining immune to his Machiavellian scriptsâ¦

Speaker Bio: Eric Jodoin is a Cyber Defence Operations Planner working for Canadaâs Department of National Defence (DND). He has over 22 years of experience first as a systemâs analyst then in the provisioning of Communication and Information Systems for the Canadian Forces. He began specializing in Information Security in 2002, obtained his CISSP in 2009, and recently completed a tour as the Director of Operations for the Canadian Forces Network Operations Center. Eric is a candidate in the Master of Science Degree Program of SANS Technology Institute, and holds several GIAC Certifications.