1. TCOM 59901 Information Assurance Management Software Hacking

2. TCOM 59902 Software Hacking Remote Control Software –Essential for a globally connected economy. –Support personnel rarely on site. –Indispensable for administrators… – misconfigured and filled with security weaknesses.

3. TCOM 59903 Software Hacking Weaknesses –Cleartext user names and passwords –Weak passwords –Revealed passwords pulled from the GUI (remote or locally) –Uploading profiles

4. TCOM 59904 Software Hacking Countermeasures –Enable passwords –Enforce strong passwords –Force alternate authentication –Password protect profile and setup files –Logoff user with call completion

5. TCOM 59905 Software Hacking Countermeasures –Encrypt session traffic –Limit login attempts –Log failed attempts –Lockout failed users

6. TCOM 59906 Web Hacking HTML source page Low hanging fruit… Common, well publicized vulnerabilities