Hacking

Recommendations

Info

Encourage false conclusion • Develop a false premise – Provide evidence that the false premise is correct • Create a false alarm – Purposely create a condition that “raised an alarm” and then proves it was wrong. Repeat – Causes alarms to be distrusted Hack: DarkMarket Sting, EICAR signature in real virus Stuxnet?
Use multiple methods • Spectator thinks that because a method wasn’t used one time, concludes it wasn’t used ever. • Allows multiple ways to accomplish the same thing if one method will be detected • Purposely reveal method to encourage false conclusion Hack: Multiple 0days in virus
Page 1 and 2: How misdirection can be used to ste
Page 3 and 4: Assumptions
Page 5: Magicians’ Arsenal • Actions
Page 8 and 9: Bluff • “Feint” but calling a
Page 10: Temps or Timing • Timing is used
Page 13 and 14: Gaff • A visible device with a se
Page 16 and 17: Secret Accomplice, Stooge, Shill
Page 18: The Patsy, or “Fall Guy” • In
Page 21 and 22: And when naturalness isn’t possib
Page 24 and 25: Misdirection • A way to control a
Page 26 and 27: Directed Misdirection • Can be ca
Page 28: Constrained Misdirection • Hacker
Page 33 and 34: Fake Revelation • Reveal an infer
Page 36 and 37: Now let’s create a scenario…
Page 38 and 39: More preparation from the Magician
Page 40 and 41: Then he makes a phone call to Innoc
Page 42 and 43: Meanwhile… • CEO is told of pre
Page 44 and 45: And then… • Second bogus Press
Page 46 and 47: The Sucker Punch • Source code of
Page 49 and 50: The goal of the magician-hacker •
Page 52 and 53: Lessons • Press releases should b

Hacking

Create successful ePaper yourself

Delete template?

Save as template?