Hacking

Recommendations

Info

Lessons • Press releases should be signed • Detecting the magician-hacker requires understanding new actions and motivations • The obvious answer may not be the correct answer • Unrelated events may not be unrelated • Thorough forensics are critical • People, like computers, are assets too and vulnerable to a Denial of Service
Bruce Barnett deception@grymoire.com Twitter: @grymoire Google+: gplus.to/grymoire Paper: http://www.grymoire.com/Deception
Page 1 and 2: How misdirection can be used to ste
Page 3 and 4: Assumptions
Page 5: Magicians’ Arsenal • Actions
Page 8 and 9: Bluff • “Feint” but calling a
Page 10: Temps or Timing • Timing is used
Page 13 and 14: Gaff • A visible device with a se
Page 16 and 17: Secret Accomplice, Stooge, Shill
Page 18: The Patsy, or “Fall Guy” • In
Page 21 and 22: And when naturalness isn’t possib
Page 24 and 25: Misdirection • A way to control a
Page 26 and 27: Directed Misdirection • Can be ca
Page 28: Constrained Misdirection • Hacker
Page 31 and 32: Use multiple methods • Spectator
Page 33 and 34: Fake Revelation • Reveal an infer
Page 36 and 37: Now let’s create a scenario…
Page 38 and 39: More preparation from the Magician
Page 40 and 41: Then he makes a phone call to Innoc
Page 42 and 43: Meanwhile… • CEO is told of pre
Page 44 and 45: And then… • Second bogus Press
Page 46 and 47: The Sucker Punch • Source code of
Page 49 and 50: The goal of the magician-hacker •

Hacking

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?