Wars of the machines: build your own Seek and Destroy Robot

What if we teach a computer to discover and classify every possible exposed device on the Internet and determine what are the most valuable targets, instead of relying on Shodan and a bunch of random keywords ? Obviously, we would have a pretty nice picture of what type of devices are connected to the Internet without prior knowledge.

In this presentation, we will introduce some major concepts in Machine Learning such as datasets, supervised and unsupervised learning, and teach the audience how to create a scanner/classifier based on opensource tools and frameworks. We will go through the whole process covering data collection, data pre-processing, datasets building, automated classification process and post-processing.

We will demonstrate the effectiveness of this scanner with multiple examples of what we found, some statistics about the major connected devices vendors seen by our bot, and of course how to weaponize it and turn it into a p0wning machine !

Speaker

Damien Cauquil (digital.security)