Chellam - a Wi-Fi IDS/Firewall for Windows

Presented at DEF CON 23 (2015), Aug. 7, 2015, 3 p.m. (60 minutes).

This talk will introduce techniques to detect Wi-Fi attacks such as Honeypots, Evil Twins, Mis-association , Hosted Network based backdoors etc. on a Windows client without the need for custom hardware or drivers. Our attack detection techniques will work for both Encrypted (WPA/WPA2 PSK and Enterprise) and Unencrypted networks. We will also release a proof of concept tool implementing our detection techniques. Even though the focus of this talk is Windows, the same principles can be used to protect other Operating Systems, both workstation and mobile.

Presenters:

• Vivek Ramachandran - Founder, SecurityTube.net and Pentester Academy
  Vivek Ramachandran discovered the Caffe Latte attack, broke WEP Cloaking and publicly demonstrated enterprise Wi-Fi backdoors. He is the author of "Backtrack 5: Wireless Penetration Testing" which has sold over 13,000+ copies worldwide. He is the founder of SecurityTube.net and runs SecurityTube Training & Pentester Academy which has trained professionals from 90 countries. He has spoken/trained at DEF CON, Blackhat USA/Europe/Abu Dhabi, Brucon, Hacktivity etc. conferences. Twitter: @securitytube Facebook: https://www.facebook.com/pagesectube

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Ramachandran
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Vivek Ramachandran - Chellam - A Wi-Fi IDS Firewall for Windows - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Vivek Ramachandran - Chellam - A Wi-Fi IDS Firewall for Windows - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Vivek Ramachandran - Chellam - A Wi-Fi IDS Firewall for Windows - Video and Slides.mp4 (Video and Slides)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Vivek Ramachandran - Chellam - A Wi-Fi IDS Firewall for Windows - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Vivek Ramachandran - Chellam - A Wi-Fi IDS Firewall for Windows - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Vivek Ramachandran - Chellam - A Wi-Fi IDS Firewall for Windows - Video.srt (subtitles)

Similar Presentations:

• DEF CON 23 (2015) / Guests N' Goblins: Exposing Wi-Fi Exfiltration Risks and Mitigation techniques
• Black Hat Europe 2017 / Wi-Fi Direct to Hell: Attacking Wi-Fi Direct Protocol Implementations
• Black Hat Asia 2020 Virtual / WIFI-Important Remote Attack Surface: Threat is Expanding