Download

Index 441Threats to process control. See Processthreats and challengesTinyURL, 105TJ Maxx stores, 291TJX Companies, 291TLS (transport layer security), 288–289Top secret data, 404Tor tool, 26Torppey, Michael, 225Training against social engineering,406–407Transactions, monetary, 53Transport layer security (TLS), 288–289Tripwire configuration managementsoftware, 302Trojan code, 27, 29Trojan horses, 397“Trucking,” 312The True Cost of Motion Picture Piracy to theUS Economy, 48Uu-law codec, 307UDP (User Datagram Protocol)description, 306–307floods, 40, 42port 4569, 311, 312Unauthorized entry, 380–384Unclassified data, 403Understanding and Countering the PhishingThreat, 47Universal Serial Bus (USB) storagedevices, 287Unpatched vulnerabilities, 27–28Upgrading of systems, 228URLs, referring, 105–107US-ASCII encoding, 170–172USB (Universal Serial Bus) storagedevices, 287User Datagram Protocol. See UDPUser IDs, default, 30VValidation of compliance (credit cards),267–268Valuation of assets, 417–418Van den Berg,Youri, 17Vectors, XML. See XML attack vectorsVideo camera equipment, 348–354Virtual keyboards, 204Virtual private networks (VPNs), 290–291Virus authors, bounty for, 24VLANs, 334Voice mail phone phreaking, 395VoIP (Voice over Internet Protocol)cache poisoning, ARP (AddressResolution Protocol), 37, 320–324,324–331codecs (enCOder/DECoder), 307compression, 307–308extracting VoIP data, 315–320hiccups, 306legal issues, 370pcap library, 313–314Real Time Protocol (RTP), 306Wireshark packet sniffer, 312, 313–320,322, 331VPNs (virtual private networks), 290–291Vulnerabilitiespreventing DOM-based, 98–100redirection, 100–105remote terminal units (RTUs), 213–218RPC-DCOM, 19stack, 71unpatched, 27–28Vulnerability stack, 71WW32.Fantibag.A Trojan, 44