“Cruise Ship Security OR Hacking the High Seas

Presented at DerbyCon 6.0 Recharge (2016), Sept. 24, 2016, 5:30 p.m. (25 minutes).

Taking a cruise vacation should be a laid back, care-free endeavor that allows one to unwind, have a few drinks, explore new countries, and get sunburned. For many, there is not much thought put in to how the cruise ships operate or how secure your stored information is on the ship. After all - you’re on vacation. In this presentation, three leading cruise lines have been evaluated in several different security realms over the last 10 years. These areas include physical security, social engineering, wifi vulnerabilities, segregation of passenger network from operations network, financial transactions, information sanitization, and more. Some vulnerabilities are simple hacks to allow one to obtain free wifi, while others are more complex and allow one to explore the ship in more obscure ways. In this presentation, successes and failures of hacking the high seas will be shown.

Presenters:

• Chad M. Dewey

Similar Presentations:

• BSidesLV 2016 / Cruise Line Security Assessment OR Hacking the High Seas
• GrrCON 2016 / Cruise Ship Pentesting OR Hacking the High Seas
• Hackfest 2016 / Pentesting Cruise Ships OR Hacking the High Seas