Dissembling Ferret: A Free/Open-Source Firewall Testing Suite

It is a pernicious challenge of blue teams to validate security assumptions and vendor claims with respect to defensive technologies. There is no standardized toolkit available for defenders to benchmark security protections and verify assertions of protection and detection with respect to covert channels. This talk will demonstrate Dissembling Ferret, an open-source suite of testing tools designed to exploit covert channels that can be used to test security technologies' capability to detect, prevent, or interfere with hidden communications.

Outcomes: Learn about covert TCP channels used for exfiltrating data * Learn how to evaluate next-generation firewall security protections * Verify firewall vendor assertions of protection and detection with respect to covert channels