Ixia Tech Field Day 15 Session Recap
Transcript
[Music] hey how's it going - Steve Townsend from the c2 advisor comm with a tech field day 15 recap I can't believe it's been fifteen tech field days I left field a event I went to I think with virtualization field day six the names got changed around but overall I think tech field days have been running for about eight years now pretty good stuff so eleven delegates seven presenters up next and the licks of presenters that will recap is xeo so Exia does something that I
think a couple of people who will find controversial for a couple of different reasons the first one is if you have kind of a predisposition to privacy Ixia basically breaks privacy if you're a man in the middle I mean it's a men in the middle I don't want to call it an attack because it's designed for corporate corporate implementations so when you're at work there's really no expectation of privacy it breaks SSL encryption so that security professionals can expect that traffic for malicious activity mixes on
surface I'm not so much of a critic of breaking SSL as I am as that's a broken approach I think to security this is a exploit of a weakness of SSL this isn't by design the folks that you know went through the SSL certification process didn't or standards process didn't go through and say you know what we want TLS to be broken in this manner so that security devices can peek into traffic the whole intent is that no one could ever peek into traffic so the
security industry proper with the folks coming up with these security standards will go forward and continue to make sure they close the holes that solutions like Ixia gigamon etc uses to surface up and view traffic that's my biggest complaint is that if I invest in the solution today which you know seems like a fine solution tomorrow I'll be fighting the same challenge of how do I inspect traffic based on SSL I think there's other solutions one of the leading approaches is to look at pattern based
intrusion detection via encryption looking at the patterns of encryption this is super hard which is why solutions like exia and Giga mom will continue to be popular because it's rather easier to man in the middle of the traffic versus doing something a little bit more nursing creative maybe that's it for this CTO adviser recap if you want to learn more about the event and specifically about Exia go to the tech field day site and visit the event page is tech field a com4 slash event floor
slash t FD 15 talk to you next video
