Download

440 Indexinternational domain name (IDN)spoofing, 399Internet-based, 392keystroke loggers, 380–384malicious links, 69man-in-the-middle (MITM) attacks,37–38, 324, 400monitoring and enforcement, 409password management, 388–390penetration testing, 231–236, 269,408–409person-to-person authentication,402–403personal action, 379–384pharming, 399phishing, 398–399policies, procedures, and guidelines,401–402privacy laws, 409–412redirection, 100security audits, 357security awareness, 407telephone-based, 390–391theft, 385–387training against, 406–407Trojan horses, 397updating assessment and controls, 409See also Phone phreakingsocks, 47–48Software Removal Tool (Microsoft), 6, 11Souchi, Zarox, 17Source code, viewing, 139Spam in Instant Messaging (SPIM),10–11, 15, 27Spam URL Realtime Blacklists(SURBL), 105SpamThru Trojan, 45–46SPIM (spam in Instant Messaging), 10–11,15, 27Spoofing Caller ID, 357, 395, 396Spoofing domain names, 399–400Spoofing international domain names(IDNs), 399Spybot (Milkit), 12–14SSL (secure socket layer), 288–289SSL VPNs, 290–291Stateless protocol, 306Status codes in browsers, 308–309, 309tSTOP plate (Computer SecurityProducts), 385Storage-level encryption, 287Storyboarding, 420Stripe reader, magnetic, 336Su Cheng Peng, 172SubSeven Trojan, 9Suits. See DirectRevenue class actionlawsuit; 180SolutionsSupervisory Control and Data Acquisitionsystems. See SCADASURBL (Spam URL RealtimeBlacklists), 105Surveys, 420Symantec Internet Threat report, 6Syn floods, 40–42TT.38 protocol, 355–356Tab, horizontal, 162–163Tables, Rainbow, 38Takedown services, 204TCP Syn floods, 40–42tcpdump packet sniffer, 313Telephone-based social engineering,390–391TeleSpoof, 395Tenable Network Security, 228Testing, penetration, 231–236, 269,408–409Theft, 385–387THr34t-Krew, 16Threat assessment, 418–421