Sit presentation - Hacking

Sit presentation - Hacking

• 1.
  HACKING Ryan Mauer, MonicaSolis, Francis Tienzo, and Mike Wong
• 2.
  Hacking: The Basics  The term hacking itself is broad in that it encompasses all forms (i.e. phones, computers, computer systems) of gathering information about another person, usually illegally and for profitable reasons.  http://www.youtube.com/watch?v=uV5u5Nl3bjM
• 3.
  Classifications of Hacking  White Hat – an ethical hacker who helps test security systems.  Black Hat – a hacker who breaks into a computer security system for personal gain or malicious intent.  Grey Hat – a mix of the white and black hat, this hacker may break into a computer system, then offer to help the company protect against hackers for a fee.  Elite Hacker – extremely skilled hackers.  Script Kiddie – a non-expert who cracks into a computer system using pre-constructed tools (i.e. another hacker‟s technique) to do so.  Neophyte – also known as a “n00b” or a “newbie” is someone who is new to hacking and knows very little about it.  Hacktivist – a hacker who breaks into websites and reorganizes them with a political, social, or otherwise ideological message.
• 4.
  Techniques  Vulnerability Scanner – a tool that scans a computer to see which networks or files are „open‟ to corrupt.  Password cracking – discovering a password by finding old data stored on a computer (can be as simple as guessing a password).  Spoofing attack (Phishing) – falsely advertising to be another website or program, and when downloaded can take personal info.  Social engineering – when a hacker tries to convince a system administrator that he is a user or supervisor who needs assistance gaining access
• 5.
  Techniques continued…  Trojan Horses – a program that appears to be doing one thing while really serving another purpose.  Viruses – a self-replicating program that spreads by duplicating copies of itself.  Worms – similar to a virus in that it is a self-replicating program, but it does not have to be opened by the user in order to infect a computer.  Key Loggers – a tool that records each key stroke made so as to retrieve passwords or private data.
• 6.
  The History ofHacking: A Timeline 1870s 1960s 1970s 1980s 1990s 2000 First Instance Positive term John Draper, One of the Creation of Microsoft is a of phone for hackers one of the first arrests the National victim of a new hacking develops most famous of the Infrastructur type of hacking exhibited by through phone Milwaukee- e Protection teenagers. MIT‟s hackers, based 414 Center. Chinese artificial nicknamed hackers. hackers claim intelligence “Captain to gain access lab. Crunch” to sensitive sites. YouTube Sesame Street hacking controversy.
• 7.
  Notorious “Black Hat”Hackers  Jonathan James: James gained notoriety when he became the first juvenile to be sent to prison for hacking at age 16. Created a backdoor to the department of defense which enabled him to view sensitive emails and capture employee usernames and passwords.  Adrian Lamo: Broke into major organizations like The New York Times and Microsoft. Dubbed the "homeless hacker," he used Internet connections at Kinko's, coffee shops and libraries to do his intrusions so as to remain „untraceable‟.
• 8.
  Famous “White Hat”Hackers  Stephen Wozniak: "Woz" is famous for being the "other Steve" of Apple.  Tim Berners-Lee: Berners- Lee is famed as the inventor of the World Wide Web
• 9.
  Hacking Today: Stuxnet  A computer worm discovered in June of 2010.  It is the first discovered malware what spies on and subverts industrial systems.  Specifically targeted an Iranian Nuclear Facility.  Brings up the question as to whether the framework will be used for future super viruses. Azerbaijan 2.57%  United States Country Infected computers: 1.56%  Iran 58.85% Pakistan 1.28%  Indonesia 18.22% Others 9.2%
• 10.
  Illegality of Hacking  Computer Fraud & Abuse Act – 1984  Put in place to reduce cracking of computer systems (hacking) and to address federal computer-related offenses.  Initially governed only cases with a compelling federal interest  After amendments, many people feel that the law is too broad
• 11.
  Illegal Actions underthe Act 1. Knowingly accessing a computer without authorization for purposes of obtaining national security data 2. Knowingly and intentionally accessing a computer without authorization in order to gain information from a financial institution, any U.S. department or agency, or any protected computer. 3. Intentionally accessing without authorization a government computer to affect the government‟s use of it. 4. Knowingly accessing a protected computer with the intent to defraud. 5. Knowingly causing the transmission of a program, information, code, or command which leads to damage or accessing a computer without authorization, which leads to significant damages. 6. Knowingly and with the intent to defraud, trafficking a password or similar information through which a computer may be accessed without authorization.
• 12.
  CFAA in theNews  Violating an internet service provider‟s terms of service agreement is now subject to criminal prosecution.  Cyber bullying – 2008, woman from Missouri charged for leading a teenage girl to commit suicide via MySpace. Guilty verdict thrown out on vagueness of the CFAA  Amendment to pending bill approved by U.S. Senate:  Would limit the interpretation of the CFAA. Would not include violation of a contractual obligation or agreement.  This would protect people for merely violating a contractual agreement with a web site or their ISP from being subject to criminal charges (vs. civil charges)  Criminalized conduct also includes: using a fake name on Facebook, lying about your weight on an online dating profile, etc.
• 13.
  Anonymous (Hacking Group)  “Hactivism”  Target mainly institutions, organizations, and government departments that the group protests against.  Aims to spread a message with each attack.  Examples: Department of Justice (after MegaUpload), Colombia‟s Defense Ministry (arrests made by Interpol)
• 14.
  Memorable events: US Government& Hacking  1999 – President Clinton passes government computer security initiative  2000 – “I Love You” virus hits the globe  2002 – President Bush creates the Department of Homeland Security.  2005 – NSA illegal wiretapping controversy  2010 – Obama administration ends wiretapping  2010 – Wikileaks controversy  2011- Cyber security legislation goes through Congress  2011 – Foreign hackers steal 24,000 Pentagon files.
• 15.
  “I Love You”Virus – May 4, 2000  Email subject line: “I Love You”  Attachment :“LOVE-LETTER-FOR- YOU.TXT.vbs”  Replaced multimedia files with itself  Sent to everyone in Outlook address book  Hit 45 million people in one day  OnelDe Guzman and Reomel Ramones of the Philippines arrested, then released  BEFORE: malware thought of as “urban myth”  AFTER: US signs Council of Europe Cybercrime Treaty to harmonize laws
• 16.
  Wikileaks Controversy  Private Bradley Manning  Gave stolen diplomatic memos to WikiLeaks  260,000 files, airstike videos from Iraq and Afghanistan  Replaced music on a Lady Gaga CD with secret files  Reported by hacker friend Adrian Lamo  Charged in Military Court & staying in medium security facility.  Pentagon‟s Response  Disable drives prom accessing data  Restricted use of memory devices  Defense Department installed fraud detection
• 17.
  Hackers steal Pentagonfiles – March 2011  Plans for missile tracking systems, satellite navigation systems, surveillance drones, and jet fighters were taken.  Didn‟t say which data system was hacked and who they suspected.  Other breaches: Lockheed, Martin, RSA Security  New cyber strategy  Tighter defense, collective effort, technological innovation  Military‟s Cyber Command coordinates operations for computer networks.  Incentives Taken:  National data breach reporting, increased penalties, possible military action response, cybersecurity (DoD, DHS, and private sector)
• 18.
  Questions:  Do you think that the US government should invest more into preventing hacking?  Do you think cyberspace is a new frontier for possible terrorist attacks? (i.e. Stuxnet)  Have any of you ever been a victim of hacking?  Should the CFAA definition be narrowed to better define what should be punished related to hacking?  What do you think about the concept of hactivism? Are there other channels for
• 19.
  Bibliography:  "Bush says he signed NSA wiretap order." CNN.com. CNN, 2005. Web. 21 Mar 2012. http://articles.cnn.com/2005-12-17/politics/bush.nsa_1_wiretaps-constitutional-responsibilities-and-authorities- national-security-agency?_s=PM:POLITICS  Hamblen, Matt. "Clinton commits 1.46B to fight cyberterrorism." CNN.com. CNN, 1999. Web. 21 Mar 2012. http://articles.cnn.com/1999-01-26/tech/9901_26_clinton.idg_1_detection-security-cyberterrorists?_s=PM:TECH  "ILOVEYOU virus." TechTarget.com. TechTarget, 2012. Web. 21 Mar 2012. http://searchsecurity.techtarget.com/definition/ILOVEYOU-virus  Kleinbard, David. "U.S. catches 'Love' virus." CNN.com. CNNMoney, 2000. Web. 21 Mar 2012. http://money.cnn.com/2000/05/05/technology/loveyou/  Reporter, Staff. "Pentagon Releases Cyberspace Strategy After Hackers Stole 24K Files." IBTimes.com. International Business Times, 2011. Web. 21 Mar 2012. http://www.ibtimes.com/articles/180746/20110715/united- states-secretary-of-defense-dod-william-lynn-department-of-defense-pentagon-online-security-d.htm  Shanker, Tom. "Hackers Gained Access to Sensitive Military Files." NYTimes.com. New York Times, 2011. Web. 21 Mar 2012. http://www.nytimes.com/2011/07/15/world/15cyber.html?_r=1&pagewanted=all  "Wikileaks suspect believed to have used CD, memory stick to get past Pentagon security."DallasNews.com. The Associated Press, 2010. Web. 21 Mar 2012. http://www.dallasnews.com/news/washington/20101130-wikileaks- suspect-believed-to-have-used-cd-memory-stick-to-get-past-pentagon-security.ece  http://www.wired.com/threatlevel/2011/11/anti-hacking-law-too-broad/  http://www.nytimes.com/2012/01/21/technology/megaupload-indictment-internet-piracy.html?_r=1  http://www.law.cornell.edu/uscode/text/18/1030  Trigaux, R.. "A history of hacking." http://www.sptimes.com/Hackers/history.hacking.html. N.p., 2000. Web. 20 Mar 2012. http://www.sptimes.com/Hackers/history.hacking.html  IT Security Editors, Top 10 most famous hackers of all time. N.p., 2011. Web. 20 Mar 2012. http://www.focus.com/fyi/top-10-most-famous-hackers-all-time/Broad, W. J., J. Markoff, and D. E. Sanger. "Israeli Test on Worm Called Crucial in Iran Nuclear Delay." New york times. New York Times, 2011. Web. 20 Mar 2012. http://www.nytimes.com/2011/01/16/world/middleeast/16stuxnet.html?pagewanted=all