Launch a New Career with Certificates from Google, IBM & Microsoft
Lead AI Strategy with UCSB's Agentic AI Program — Microsoft Certified
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore advanced device profiling bypass techniques through DHCP packet manipulation in this NorthSec conference talk. Delve into Network Access Control mechanisms, focusing on sophisticated device identification methods beyond simple MAC address checks. Learn how crafted DHCP packets can trick inspection engines into perceiving attacking devices as legitimate. Examine case studies demonstrating successful bypasses, understand associated risks, and discover mitigation strategies. Gain insights into a novel client-based DHCP attack that differs from traditional denial of service or rogue server approaches. Follow along as the speaker presents a proof-of-concept tool for defining custom DHCP payloads to mimic arbitrary device fingerprints, filling a gap in publicly available resources on this topic.
Syllabus
Introduction
Outline
What is Network Access Control
Where is it implemented
Two layers of defense
Device profiling
Device profiling mechanics
DHCP discover packet
Vendor class identifier
DHCP profiler policy
Bypass device profiling
Case study A
Case study B
Case study C
Risk mitigation
Proof of concept
Taught by
NorthSec