Quantcast

Articles

Get all-in-one coverage of Internet security and online privacy issues brought up by the industry’s leading experts at security conferences and seminars.

Mikko Hypponen on Cyber Warfare 2: Types of Governmental Attacks

Shifting the focus over to governmental attacks, Mikko Hypponen breaks nation states’ cyber warfare down into several types, depending on the objects targeted. Within attacks coming from governments we have a range of stuff. We have espionage. You might have heard about what is often characterized as APT...

F-Secure’s Mikko Hypponen on Cyber Warfare at Wired 2012

Chief Research Officer at F-Secure and true computer security guru Mikko Hypponen outlines the state and scope of today’s cyber threatscape at Wired 2012 event. My name is Mikko Hypponen, and his name is “Arashi”. He is one of the examples of Russian organized cyber criminals who create...

Offensive Threat Modeling for Attackers 8: Confusing the Adversary

This is the final part of the presentation dedicated to nuances of exploiting various components of an adversary’s defensive posture for a successful attack. So, now we want to directly engage the defenses. A very effective thing is false flag operations. Does everybody knows what a false flag is? False...

Offensive Threat Modeling for Attackers 7: Utilizing Different Infiltration Vectors

Shane MacDougall and Rafal Los explicate herein the issues of offensive modeling from the perspectives of company’s human component and time windows for attack. Shane MacDougall: A big tool in determining your targets within a company is company sentiment. You really want to identify as many users at risk...

Offensive Threat Modeling for Attackers 6: Insight into Points of Attack

Presenting their subject further, Shane MacDougall and Rafal Los stick to the objectives and key constituents of the points of attack modeling process. To model the points of attack, obviously, our key objective is to break everything down into the tiniest pieces possible. If you’re familiar with the...

Offensive Threat Modeling for Attackers 5: Modeling the Defender

It’s now turn for Shane MacDougall to contribute to the presentation and focus on the different aspects of modeling the defender for offensive purposes. Shane MacDougall: Now we’re going to get into the meat of the matter of how we’re actually going to break this down. So, modeling the defender (see...

Offensive Threat Modeling for Attackers 4: Executing the Attack the Right Way

HP Software’s Rafal Los now highlights the finishing touches to perform before the attack can be executed, and summarizes the entire offensive threat scenario. I hope you guys get the irony of hanging a piece of Swiss cheese in the Posture slide (see image). Identifying asset’s defensive posture: how...

Offensive Threat Modeling for Attackers 3: Identifying the Purpose, Target Assets and Points of Attack

In this section of the presentation Rafal Los thoroughly analyzes the offensive routine in the context of its purpose, prioritization, and points of attack. When you’re looking at a system, you have to know what’s behind it, you have to know what the infrastructure is, so if you’ve got an Oracle...

Offensive Threat Modeling for Attackers 2: Exploiting Defenders’ Weaknesses

Moving on with the subject, Rafal Los provides a step-by-step insight into preliminary measures and the right strategy for attacking the adversary’s assets. So, how do we use weaknesses of defenders as a weapon? I found a really cool quote that I like to use a lot: “To lack intelligence is to be in...

Offensive Threat Modeling for Attackers: Turning Threat Modeling on its Head

Rafal M. Los, HP Software’s Chief Security Evangelist, and Shane MacDougall, principal partner at Tactical Intelligence, give a presentation at Black Hat Europe 2012 to show a non-standard perspective of threat modeling as an offensive tool. Rafal M. Los: Hi! I’m Raf, that’s Shane right over here....