Presentation is loading. Please wait.

Presentation is loading. Please wait.

Information Networking Security and Assurance Lab National Chung Cheng University COUNTER HACK Chapter 5 Reconnaissance Information Networking Security.

Published by Modified over 9 years ago

Similar presentations

Presentation on theme: "Information Networking Security and Assurance Lab National Chung Cheng University COUNTER HACK Chapter 5 Reconnaissance Information Networking Security."— Presentation transcript:

1 Information Networking Security and Assurance Lab National Chung Cheng University COUNTER HACK Chapter 5 Reconnaissance Information Networking Security and Assurance LAB Department of Communication Engineering National Chung Cheng University Chia-Yi, Taiwan, ROC Mike

2 Information Networking Security and Assurance Lab National Chung Cheng University Low-Technology Reconnaisance Socail Engineering Physical Break-in Dumpster Diving

3 Information Networking Security and Assurance Lab National Chung Cheng University Defenses against Social Engineering Attacks Physical Break-in Dumpster Diving

4 Information Networking Security and Assurance Lab National Chung Cheng University Socail Engineering Attacks Building trust. Manipulate the target person to divulge secrets. Gather confidential information.

5 Information Networking Security and Assurance Lab National Chung Cheng University Defenses against Social Engineering Attacks User awareness. Trained. give explicit direction. Not to give sensitive information away to a friendly caller. Building a place where the employee reset the password for 24 hours per day.

6 Information Networking Security and Assurance Lab National Chung Cheng University Physical Break-In Enter the company such as employees,temps,contractors etc. Plant malicious programs on internal system Having gained access to systems and information

7 Information Networking Security and Assurance Lab National Chung Cheng University Defenses against Physical Break-In Security badges to each and every employee. After 5 mins,each of your machine should bring up a screen saver requiring the user to type in password. Lock on cabinets with sensitive machines.

8 Information Networking Security and Assurance Lab National Chung Cheng University Dumpster Diving Trashing Gold. Discarded paper information.

9 Information Networking Security and Assurance Lab National Chung Cheng University Denfenses against Dumpster Diving A well-used paper shredder Important data gets deposited in the extra receptacle.

10 Information Networking Security and Assurance Lab National Chung Cheng University Search the Fine Web (STFW) How to get information about the target?  Internet resources  Whois Databases  Tool InterNIC(www.internic.net)www.internic.net Allwhois Web site(www.allwhois.com/home.html)www.allwhois.com/home.html Network Solutions whois database(www.networksolution.com)www.networksolution.com  Longest prefix matching  Policy routing

11 Information Networking Security and Assurance Lab National Chung Cheng University General Purpose Reconnaissance Tools Sam Spade ( www.samspade.org/ssw /) www.samspade.org/ssw / CyberKit ( www.cyber-kit.net/index.net/index.html ) www.cyber-kit.net/index.net/index.html NetScan ( www.netscantools.com/nstmain.html ) www.netscantools.com/nstmain.html iNetTools ( www.wildpackets.com/products/inettools ) www.wildpackets.com/products/inettools

12 Information Networking Security and Assurance Lab National Chung Cheng University Conclusion How to gets the information of the target? Tools

13 Information Networking Security and Assurance Lab National Chung Cheng University Conclusion Awareness

Download ppt "Information Networking Security and Assurance Lab National Chung Cheng University COUNTER HACK Chapter 5 Reconnaissance Information Networking Security."

Similar presentations

Chapter 7: Physical & Environmental Security

Chapter 7: Physical & Environmental Security
Database Security Policies and Procedures and Implementation for the Disaster Management Communication System Presented By: Radostina Georgieva Master.

Database Security Policies and Procedures and Implementation for the Disaster Management Communication System Presented By: Radostina Georgieva Master.
Recon This presentation is an amalgam of presentations by Mark Michael, Randy Marchany and Ed Skoudis. I have edited and added material. Dr. Stephen C.

Recon This presentation is an amalgam of presentations by Mark Michael, Randy Marchany and Ed Skoudis. I have edited and added material. Dr. Stephen C.
Kelly Corning Julie Sharp.  Human-based techniques: impersonation  Computer-based techniques: malware and scams.

Kelly Corning Julie Sharp.  Human-based techniques: impersonation  Computer-based techniques: malware and scams.
Social Network Security Issues: Social Engineering and Phishing Attacks Jeffrey Allen, Leon Gomez, Marlon Green, Phillip Ricciardi, Christian Sanabria.

Social Network Security Issues: Social Engineering and Phishing Attacks Jeffrey Allen, Leon Gomez, Marlon Green, Phillip Ricciardi, Christian Sanabria.
Chapter 15 Security Bernard Chen Spring 2007. Protection vs. Security Protection (Ch.14) deals with internal problem Security (Ch. 15) Deals with external.

Chapter 15 Security Bernard Chen Spring Protection vs. Security Protection (Ch.14) deals with internal problem Security (Ch. 15) Deals with external.
Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Copyright © 2006 by The McGraw-Hill Companies,

Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Copyright © 2006 by The McGraw-Hill Companies,
Introduction to Ethical Hacking, Ethics, and Legality.

Introduction to Ethical Hacking, Ethics, and Legality.
SECURITY AND SOCIAL ENGINEERING US Department of Commerce Office of Security Updated 09/26/11 Security is Everyone's Responsibility – See Something, Say.

SECURITY AND SOCIAL ENGINEERING US Department of Commerce Office of Security Updated 09/26/11 Security is Everyone's Responsibility – See Something, Say.
Data Security for Healthcare Facilities Debbie Abbott Health Information Consultant Resolutions (Int) Pty Ltd.

Data Security for Healthcare Facilities Debbie Abbott Health Information Consultant Resolutions (Int) Pty Ltd.
CIT 1100. In this chapter you will learn how to:  Explain the threats to your computers and data  Describe key security concepts and technologies.

CIT In this chapter you will learn how to:  Explain the threats to your computers and data  Describe key security concepts and technologies.
Chapter 4 McGraw-Hill/Irwin Copyright © 2011 by The McGraw-Hill Companies, Inc. All rights reserved. Ethics and Information Security.

Chapter 4 McGraw-Hill/Irwin Copyright © 2011 by The McGraw-Hill Companies, Inc. All rights reserved. Ethics and Information Security.
Social Engineering J Nivethan. Social Engineering The process of deceiving people into giving away access or confidential information Onlinne Phone Offline.

Social Engineering J Nivethan. Social Engineering The process of deceiving people into giving away access or confidential information Onlinne Phone Offline.
Appendix B: Designing Policies for Managing Networks.

Appendix B: Designing Policies for Managing Networks.
Social Engineering Networks Reid Chapman Ciaran Hannigan.

Social Engineering Networks Reid Chapman Ciaran Hannigan.
 Single sign-on o Centralized and federated passport o Federated Liberty Alliance and Shibboleth  Authorization o Who can access which resource o ACM.

 Single sign-on o Centralized and federated passport o Federated Liberty Alliance and Shibboleth  Authorization o Who can access which resource o ACM.
Computer Security and Penetration Testing

Computer Security and Penetration Testing
This work is supported by the National Science Foundation under Grant Number DUE-0302909. Any opinions, findings and conclusions or recommendations expressed.

This work is supported by the National Science Foundation under Grant Number DUE Any opinions, findings and conclusions or recommendations expressed.
The Art of Deception - Controlling Human Element of Security - Shohei Hagiwara November 17th, 2009.

The Art of Deception - Controlling Human Element of Security - Shohei Hagiwara November 17th, 2009.
Information Networking Security and Assurance Lab National Chung Cheng University 1 Top Vulnerabilities in Web Applications (I) Unvalidated Input:  Information.

Information Networking Security and Assurance Lab National Chung Cheng University 1 Top Vulnerabilities in Web Applications (I) Unvalidated Input:  Information.

Similar presentations

Ads by Google