Facial Recognition: Facts, Fiction; and Fcsk-Ups!

Architecture and Background

Joshua Marpet - Facial Recognition: Facts, Fiction; and Fcsk-Ups! Facial Recognition sucks. But it's getting better. Big brother is watching, and he is interested in what you do, where you go, and who you talk to. Whether it's Deep Packet Inspection, or Facial Recognition, the idea of personalization as applied to privacy invasion is a fascinating and cogent issue. Governments are using it to locate fugitives with fake id's in the DMV database.

Vulnerability Analysis

DHS-like agencies, the world over, are starting to use it to find terrorists flying in or out of their country. Police departments can identify criminals from street side video surveillance cameras. When will you be added to a list? And what ramifications will that have on your life? Learn how good Facial Recognition is, common ways to defeat it, and where the science of Finding Waldo in a crowd is going. Joshua Marpet is a Security Solutions Specialist at WhiteHat Security, providing strategic guidance to WhiteHat customers and prospects on their website risk management programs.

Exploitation and Demonstrations

Additionally, he strives to educate the market-at-large about the need for effective website security. Mr. Marpet is a popular speaker at industry events including Black Hat and Bsides, and has served as an adjunct professor of computer science at St. Johns University's Tobin College of Business. He is currently writing a textbook about Physical Security in a Networked World. Prior to WhiteHat, Joshua worked as an information security consultant focused on penetration testing, auditing and forensics.

Remediation and Defensive Strategies

Early in his career, he worked in law enforcement. He was later able to combine those skills with his interest in technology to create security systems for the airline, gaming, and prison industries. Mr. Marpet earned a bachelor's degree in psychology from Fairleigh Dickinson University. His industry certifications include C|EH (Certified Ethical Hacker), from ISC(2), as well as the ever popular Application Security Specialist. Twitter: @quadlingdageek For copies of the slides and additional materials please see the DEF CON 18 Archive here: