Overview
Learn how to monitor and control mobile device network traffic through private Access Point Names (APNs) in this DEF CON conference talk. Explore affordable techniques for inspecting IP traffic on mobile and IoT devices that communicate through 4G and 5G networks, bypassing the traditional limitations of ISP-controlled infrastructure. Discover methods for leveraging ISP-operated private APN services to gain visibility into device communications, enabling both offensive security testing and defensive monitoring. Master practical approaches to network traffic analysis without requiring expensive base station equipment, making it possible to enhance privacy and security monitoring capabilities for devices that typically communicate directly through mobile network base stations. Gain insights into penetration testing IoT devices and detecting malicious traffic on mobile endpoints using these private network configurations within ISP infrastructure.
Syllabus
DEF CON 32 - Leveraging private APNs for mobile network traffic analysis - Aapo Oksman
Taught by
DEFCONConference