Markov Chains & Other Statistical Password Attacks

Passwords13 Las Vegas

Presented by: Dimitri Fousekis (rurapenthe)
Date: Tuesday July 30, 2013
Time: 11:30 - 11:50
Location: Main Room
Track: Passwords13

The presentation will provide the audience with an explanation of what Markov attacks are, how they work, and the mathematical explanation behind them. It will then switch focus to using Markov and other statistical attacks for password cracking.

The target audience for this talk is primarily experienced users, who focus on using statistical approaches to cracking passwords. In particular, this talk will focus on Markov attacks, explaining what it is, how it came about, and what it means for password cracking. Various live demos will be included to demonstrate the power of using this approach in password cracking.

Additionally, other available statistical methods for building wordlists will be presented. The aim is to have people leave knowing what Markov is, and what those attacks mean for the passwords they choose themselves, and in their organisations. Additionally, those interested in cracking passwords will be able to use tools to generate statistics and perform these types of attacks.

Dimitri Fousekis

Dimitri Fousekis, aka rurapenthe, is South African security architect for a large mobile phone provider. He is a prominent password cracker, and a member of team hashcat. He is best known for catching GPUs on fire, and claims to have excellent presentation skills. Some say that on really warm days he sheds his skin like a snake, and that for some reason he's allergic to the Dutch.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats