Presentations - Wordlists: from statistics to genetic

  • Location: Security Dome
  • Speaker: Ivan Yushkevich
  • Date and time: 22. October 2016. 14:30 - 15:15

Today, passwords remain one of the security cornerstones. They are used everywhere - online services, access to email and servers and more. During talk there will be present the results of testing different dictionaries for bruteforce and other methods. Also what will be if we combine all wordlists at one? One big wordlist will allow to restore the hashes to the efficiency of all the wordlists, but he will have several drawbacks: size and "recovery" speed. The problem can be solved by combining wordlists and test them, to get best one. But the problem of this approach is that if there are 100 wordlists and each combination with only 5 of them there will be near 9 billions test cases. Genetic algorithms can be used to generate useful solutions for optimization and search problems. There will be introduced some results of idea by creating dictionaries using genetic algorithms, how population and genotype size have influence on final results, it's pros and limits.


Sponsors:

Gold
Gold
Gold
Silver
Silver
Silver
Silver
Silver
Silver
Bronze
JOB
Technical