Fingerbank - Open DHCP Fingerprints Database

Presented at DEF CON 19 (2011), Aug. 6, 2011, 6 p.m. (20 minutes).

The presentation will first take a step back and offer a basic reminder of what passive fingerprinting is and, more precisely, DHCP fingerprinting. Then we will offer defensive and offensive use cases for DHCP fingerprinting. Next, we will cover the goals and resources offered by the new project and some future plans. As part of the announcement, two large fingerprint databases will be made available (both of which were bundled in separate projects: PacketFence and Satori). We hope this new resource will increase the quality and breadth of current DHCP fingerprint databases and increase adoption for this reliable fingerprinting technique.

Presenters:

• Olivier Bilodeau - Systems architect at Inverse inc.
  Olivier Bilodeau is a System Architect at Inverse developing PacketFence an open source Network Access Control (NAC) software. He also lectures on system security at …cole de technologie superieure University (ETS) in Montreal, Canada. His past experiences made him travel into dusty Unix server rooms, obfuscated perl code and expensive enterprise networks. On his free time he enjoys several CTFs a year (with the CISSP Groupies and Amish Security teams), hacking perl, doing open source development and brewing beer. You can read his occasional blog posts at: http://www.bottomlesspit.org/ Twitter: @packetfence

Links:

• https://defcon.org/html/defcon-19/dc-19-speakers.html#Bilodeau
• https://infocon.org/cons/DEF CON/DEF CON 19/DEF CON 19 video and slides/DEF CON 19 - Olivier Bilodeau - Fingerbank Open DHCP Fingerprints Database - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=YR61Ydd0amM

Similar Presentations:

• DEF CON 11 (2003) / Revolutionizing Operating System Fingerprinting
• Kiwicon 2038AD: The Dystopic Future is Now (2018) / DHCP is hard
• DerbyCon 8.0 Evolution (2018) / Fingerprinting Encrypted Channels for Detection