Fingerbank - Open DHCP Fingerprints Database
Olivier Bilodeau explores fingerbank - open dhcp fingerprints database at DEF CON 19, examining database-security and practical defenses.
Summary
Architecture and Background
Olivier Bilodeau - Fingerbank - Open DHCP Fingerprints Database The presentation will first take a step back and offer a basic reminder of what passive fingerprinting is and, more precisely, DHCP fingerprinting. Then we will offer defensive and offensive use cases for DHCP fingerprinting.
Vulnerability Analysis
Next, we will cover the goals and resources offered by the new project and some future plans. As part of the announcement, two large fingerprint databases will be made available (both of which were bundled in separate projects: PacketFence and Satori).
Exploitation and Demonstrations
We hope this new resource will increase the quality and breadth of current DHCP fingerprint databases and increase adoption for this reliable fingerprinting technique. Olivier Bilodeau is a System Architect at Inverse developing PacketFence an open source Network Access Control (NAC) software.
Remediation and Defensive Strategies
He also lectures on system security at ...cole de technologie superieure University (ETS) in Montreal, Canada. His past experiences made him travel into dusty Unix server rooms, obfuscated perl code and expensive enterprise networks. On his free time he enjoys several CTFs a year (with the CISSP Groupies and Amish Security teams), hacking perl, doing open source development and brewing beer. You can read his occasional blog posts at: Twitter: @packetfence
Related talks
Main Stage·38 min
Abstrct
Abstrct - When Space Elephants Attack: A DEFCON Challenge for Database Geeks The Schemaverse is a vast universe found purely within a PostgreSQL database.
Main Stage·38 min
Alexander Kornbrust
Alexander Kornbrust explores hacking and securing db2 luw databases at DEF CON 19, examining database-security and practical defenses.
Main Stage·47 min
David Litchfield
David Litchfield - Hacking and Forensicating an Oracle Database Server David Litchfield is recognized as one of the world's leading authorities on database security.


