What to bring:

Students may arrive either with or without a working knowledge of locks and physical security. Each section will include enough basic foundation to bring total novices up to speed, but the whole course will focus on delivering expert knowledge (that most casual lock pickers do not have) to the audience, making them exceptionally well-versed in this field by the conclusion of the session.

Black Hat USA 2008 Training

Caesars Palace Las Vegas • August 2-3, August 4-5

Lock Picking and Physical Security: From Beginner to Expert

Deviant Ollam

Overview

IT and INFOSEC professionals wage a never-ending battle to keep their machines and infrastructure properly maintained, patched, and secured against attack and compromise. Preventing intrusions, denial of service, and data loss is achieved primarily through appropriate configuration, essential updates, and version management of software. However, an oft-overlooked component to technology security is the physical levelŠ you can have the most hardened machines running with all necessary updates but none of that matters if an unauthorized individual can gain access to your facilities or your server room.

Sadly, most of the public is wholly unaware of the faults and weaknesses present in the majority of locks sold on the market today. While high-security products are available, they are either not purchased or not understood enough to make a difference in many business environments. Those who have seen public demonstrations at security events (for instance, in the "Lockpick Villages" presented by TOOOL - the Open Organization of Lockpickers) where locks are popped open with ease may be familiar with the basics of lock manipulation and bypassing. These public demonstrations, however, do not reveal everything.

This training takes the discussion a step further

There are certain aspects of lockpicking that are typically only demonstrated in private gatherings of dedicated security professionals. In this training, Deviant Ollam will not only explain the basics of picking for novices in the room, but he will also cover in great detail the mechanics of advanced high security locks, describe how specialized tools are used to open such equipment, cover safes and safe manipulation, and tie the whole discussion together with analysis of how specific lock technologies can and should be integrated into facility-wide policies of security management.

This workshop is geared towards security professionals whose duties and responsibilities include guiding security decisions for whole departments or even entire companies. With a thorough understanding of how even the most advanced locks work (and thus, how they can be attacked) a participant in this course will be equipped to determine how their own locks should be integrated with security systems, cameras, and employee policies in order to make their whole operation both efficient and secure.

Trainer:

Deviant Ollam While paying the bills as a network engineer and security consultant, Deviant Ollam's first and strongest love has always been teaching. A graduate of the New Jersey Institute of Technology's "Science, Technology, & Society" program, he is always fascinated by the interplay that connects human values and social trends to developments in the technical world. A fanatical supporter of First Amendment rights who believes that the best way to increase security is to publicly disclose vulnerabilities, Deviant has given lockpick demonstrations at ShmooCon, DefCon, ToorCon, HOPE, HITB, HackCon, SecVest, and the United States Military Academy at West Point.

Early: Ends May 1	Regular: Ends July 1	Late: Ends July 31	Late/Onsite: Begins August 1
$2000 USD	$2200 USD	$2400 USD	$2700 USD