OSINT of Facilities by Physical Reconnaissance

Presented at HOPE 2020 Virtual Rescheduled, July 27, 2020, 5 p.m. (60 minutes).

When hacking a physical facility, intelligence is key. Knowing the internal layout of a building will assist in identifying and accessing targets as efficiently as possible and anticipating security measures. In addition, for effective social engineering, it helps to know where you're going. This talk will focus on inferring what is inside a building just by looking at the outside: what is the layout of the hallways, where are the stairwells and elevators, where are what rooms? Bill will introduce a methodology for deducing the floor plan of a building from observing its external envelope, which is the result of years of research into thousands of architectural plans for a wide range of facilities.

Also outlined will be loads of techniques for situational awareness and intelligence gathering when navigating through a building. The implications for physical red teams and for facility managers to harden their operational security against these techniques being used by bad actors will be examined. This talk focuses on low-tech techniques, most involving only the human senses. Attendees will come away from the talk with a new perspective on the built world around them, and will be able to apply it in all urban aspects of their day-to-day lives.


Presenters:

  • Bill Graydon
    **Bill Graydon** is a principal researcher at GGR Security where he hacks everything from locks and alarms to critical infrastructure. This has given him some very fine-tuned skills for breaking stuff. He's passionate about advancing the security field through research, teaching numerous courses, giving talks, and running DEF CON's Lock Bypass Village. He's received various degrees in computer engineering, security, and forensics and comes from a broad background of work experience in physical and cyber security, software development, anti-money laundering, and infectious disease detection.<br>

Links:

Similar Presentations: