z4 22~q| ) "gP0Npq)5="%%"/zhax1Lt@qUU˸\w `a\= - B. |==˗.XжkWl`=WYOm6s a ;%yy v[><0XbؐsÚnmkf= ٳ6Xʤ119^U
nSKz .*@ /u'$L l"B.w56 !˓ ,%%DRW"Qꬬl P @ב#U?R ԩL<55wyL7 @6YjUO ^vZSTԺceCر=?tS !\Dž{ }5yr2-_xfkYh ޒ˩SK}&\ 8δqٟLON bìY q v3.WIk
zTLj UTVDHV /|G]XªUB!l \SN"[( ܦ fq}Cׯ>Kj/@)+W^OEczY_?I2Vge**
Fg]:;[9th,EYNN.V@ Ǹ\ d^v_s K~ñӧ7 5I̙ кs
s͜y_ a) IDAT\L& BOV^ Kq Sb._3ivahZZzg~ uNa H[ʞ. D>yM~N7$<4?#{ <--|6eFF8O7Uo3eqwVڵkc
UN5oʱl܌rzi6R
pr56̘qc1w-]
˶鬯껣DxN R)'{
gSVODc
Xg5H>j y::z ZR]RR]ЇG, aCr1 %[Y1y r 1c7^/#R^ R9#"ra-+;shjJITT~5)**_
ry
ŵt57@ L/94ݶgO~g-+_96({X߮3{uu4_>R wlZ \&S!!%&r jhDJeT~2= q[yy8IJcc E%&rѡLK !_g Ej*&{Z[\ |z+&u:nnDbZj0qˉ$e2
YBGκ:E`լ4p'%A
+ yJ
.x}fsXbboݰ^d `XX||Ԅ xUU=ǏS}il, ++;"""7WEdi-+v; D
.zκ:\,k<jQ] Id$C[
Rh"hWʱQZQq72܆P @ Q !
A HB A$D P @ Q( ( AB
!
A HB A$D P @ Q( ( AB
!
A HB A$D P @ Q( ( AB
! G²E IENDB` ! (
~ h t t p : / / w w w . c s . g e o r g e t o w n . e d u / ~ d e n n i n g / c o s c 5 1 1 / f a l l 0 2 / i n d e x . h t m l ~ h t t p : / / w w w . c s . g e o r g e t o w n . e d u / ~ d e n n i n g / c o s c 5 1 1 / f a l l 0 2 / i n d e x . h t m l D h t t p : / / d e v o s t . t y p e p a d . c o m / c o s c 5 1 1 / D h t t p : / / d e v o s t . t y p e p a d . c o m / c o s o 5 1 1 / P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 1 2 9 6 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 1 2 9 6 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 9 7 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 9 7 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 0 0 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 0 0 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 3 0 0 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 3 0 0 . h t m l N h t t p : / / w w w . a u s a i r p o w e r . n e t / m o o r e - i w . p d f N h t t p : / / w w w . a u s a i r p o w e r . n e t / m o o r e - i w . p d f ^ h t t p : / / w w w . a u s a i r p o w e r . n e t / _ J I W - 2 0 0 2 - 1 - C K - S . p d f ^ h t t p : / / w w w . a u s a i r p o w e r . n e t / _ J I W - 2 0 0 2 - 1 - C K - S . p d f / 0 0 D A r i a l B l a c ( 0 ( z[ 0 " D T i m e s N e w R o m a n ( 0 ( z[ 0 D W i n g d i n g s R o m a n ( 0 ( z[ 0 0 D A r i a l B l a c k m a n ( 0 ( z[ 0 " @ .
@ n ? " d d @ @@ `` (
! x C Y Z \ ]
O R $ -qaREL R $ PԄ|a
b $ s/amcK-/ % b $ cCэeڶ-K* % 0 A A @ 8 , - ʚ; ʚ; g 4 ? d ? d @ z[ 0 p p p @ < 4 d d d d l 0 < 4 B d B d l < 0 ( ~ 0 _ _ _ P P T 1 0
p p > _ _ _ P P T 9 . @ I CSE468 Information Conflict Lecturer: Dr Carlo Kopp, MIEEE, MAIAA, PEng 0 J + E Lecture 10
Information Conflict - Copyright, Privacy, Spam, Espionage, Surveillance, Hacking and Cyberwar, Viruses/Worms, and Identity Theft ( Z b $ u W Reference Sources Prof Dorothy Denning (formerly Georgetown)
COSC 511 Information Warfare: Terrorism, Crime, and National Security
http://www.cs.georgetown.edu/~denning/cosc511/fall02/index.html
http://devost.typepad.com/cosc511/
Carlo Kopp - APA IW Topics Archive:
http://www.ausairpower.net/OSR-1296.html
http://www.ausairpower.net/OSR-0297.html
http://www.ausairpower.net/OSR-0200.html
http://www.ausairpower.net/OSR-0300.html
http://www.ausairpower.net/moore-iw.pdf
http://www.ausairpower.net/_JIW-2002-1-CK-S.pdf
+ % + F c & + F ? " ( ( ( ( ( ' / U
0 q U
0 U
0 # U
0 $ L U
0 M u U
0 v U
0 U
0 v Y Taxonomy of IW Categories
w [ Denial of Service Attacks
x ] Offensive vs Defensive IW
I n a n y I W e n g a g e m e n t t h e r e i s a n o f f e n s i v e p l a y e r o r a t t a c k e r , a n d a d e f e n s i v e p l a y e r o r d e f e n d e r .
S t r a t e g i c p l a n n e r s a n d m a n a g e r s w i l l t y p i c a l l y p l a y t h e d e f e n d e r s g a m e . T h e i r r o l e i s t o e n s u r e t h a t t h e o r g a n i s a t i o n s i n f r a s t r u c t u r e c a n r e s i s t I W a t t a c k s s t a r t i n g w i t h C l a s s I , a n d t h e n C l a s s I I a n d I I I I W . C l a s s I V a t t a c k s a r e u s u a l l y t h e r e s p o n s b i l i t y o f g o v e r n m e n t s .
G i v e n t h e d i v e r s i t y o f w a y s i n w h i c h I W a t t a c k s c a n b e m o u n t e d , c o n c e n t r a t i n g o n e s t a b l i s h e d s e c u r i t y t e c h n i q u e s i s n o t e n o u g h i t w i l l p r o t e c t a g a i n s t h a c k e r s a n d p h y s i c a l D e n i a l o f S e r v i c e a t t a c k s , b u t n o t a g a i n s t v i r u s e s a n d w o r m s o r o t h e r f o r m s o f a t t a c k .
I f a n o r g a n i s a t i o n d e p e n d s o n w e b s i t e s f o r b i l l i n g , n o t i f i c a t i o n s a n d s u p p o r t , l o s i n g t h a t w e b s i t e e v e n t e m p o r a r i l y c o u l d i n f l i c t s i g n i f i c a n t m o n e t a r y l o s s e s .
R e s i s t a n c e t o I W a t t a c k s m u s t b e p l a n n e d f o r f r o m t h e o u t s e t w h e n d e v e l o p i n g a n d p l a n n i n g i n f r a s t r u c t u r e . A t t e m p t i n g t o a d d d e f e n s i v e m e a s u r e s t o p r o d u c t i o n s y s t e m s c a n b e v e r y e x p e n s i v e .
@ 5 w > ~
J y ^ Practioners of IW Technique Malicious hackers and worm/virus writers inflict damage for amusement or peer group approval. They can attack globally.
Hackers, Phrackers and Whackers may steal bandwidth by penetrating networks or manipulating accounts.
Criminals may hack to acquire information, such as credit card numbers, confidential information etc, or threaten DoS attacks to extort money from a victim organisation such as a bank or telco.
Industrial and commercial espionage may be performed to steal proprietary information such as manufacturing techniques for financial gain.
Espionage against government departments, esp police and military, may be performed to gain access to national secrets, operational or technical. Foreign governments or contracted hackers may be involved.
[Info-]Terrorists may perform DoS attacks to promote their cause by inflicting economic or political damage. A car bomb deployed against a stock exchange, national bank, media site or central telephone exchange qualifies as an IW attack.
P t ' z _ @ M o o r e s L a w , B a n d w i d t h L a w v s I W N M o o r e s L a w p r e d i c t s m o n o t o n i c g r o w t h i n c o m p u t i n g p o w e r o v e r t i m e , t h e B a n d w i d t h L a w p r e d i c t s m o n o t o n i c g r o w t h i n n e t w o r k b a n d w i d t h o v e r t i m e . B o t h l a w s a r e w e l l v a l i d a t e d e m p i r i c a l l y [ K o p p ]
R a p i d g r o w t h a n d c o m m o d i f i c a t i o n o f h a r d w a r e a n d s o f t w a r e h a v e d u a l e f f e c t s o n I W :
T h e c o s t o f c o m p u t e r s y s t e m s a n d t o o l s c a p a b l e o f u s e f o r I W d e c l i n e s a n d t h e s e b e c o m e m o r e a v a i l a b l e , g l o b a l l y .
T h e c o s t o f d e f e n s i v e m e a s u r e s a n d e n c r y p t i o n t e c h n o l o g y d e c l i n e s o v e r t i m e , m a k i n g d e f e n s i v e m e a s u r e s m o r e a f f o r d a b l e .
I t i s n e c e s s a r y t o l o o k a t I W a s a n e v o l u t i o n a r y g a m e a s b e t t e r d e f e n s i v e m e a s u r e s a r e c r e a t e d , b e t t e r o f f e n s i v e m e a s u r e s e v o l v e t o o v e r c o m e t h e s e .
S t r a t e g i c p l a n n i n g a n d b u d g e t i n g m u s t a l l o w f o r e v o l u t i o n a r y g r o w t h i n d e f e n s i v e m e a s u r e s t o a c c o u n t f o r i n c r e a s i n g c a p a b i l i t i e s f o r I W o v e r t i m e .
S e n i o r m a n a g e m e n t i n m a n y o r g a n i s a t i o n s m a y n o t a p p r e c i a t e t h e s e i s s u e s a n d w i l l n e e d t o e d u c a t e d , o f t e n d e s p i t e t h e i r r e s i s t a n c e . N Z Z Z , _
\ { ` $ Privacy and Copyright Considerations I n d i v i d u a l p r i v a c y a n d c o r p o r a t e c l i e n t p r i v a c y a r e i m p o r t a n t c o n s i d e r a t i o n s . L e g i s l a t i o n e x i s t s i n m o s t d e v e l o p e d n a t i o n s i n c l u d i n g A u s t r a l i a i n t e n d e d t o p r o t e c t p r i v a c y .
M a n y t y p e s o f I W a t t a c k v i o l a t e p r i v a c y a n d t h e o n u s i s u p o n t h e c a r r i e r o r p r o v i d e r t o p r o t e c t a g a i n s t s u c h a t t a c k s . F a i l u r e t o p r o v i d e p r o p e r p r o t e c t i o n c o u l d s e e a c a r r i e r o r p r o v i d e r c r i m i n a l l y a n d c o m m e r c i a l l y l i a b l e f o r d a m a g e s .
P r i v a c y b e c o m e s c r i t i c a l w h e r e f i n a n c i a l t r a n s a c t i o n s , m e d i c a l r e c o r d s a n d p r i v a t e c o r r e s p o n d e n c e a r e i n v o l v e d .
I f a h a c k e r s t e a l s s u c h i n f o r m a t i o n , h e / s h e m a y n e v e r b e c a u g h t . T h e d a m a g e d p a r t y c o u l d l a u n c h l e g a l a c t i o n a g a i n s t t h e p r o v i d e r o r c a r r i e r o n t h e b a s i s o f i n a d e q u a t e p r o t e c t i v e m e a s u r e s b e i n g i m p l e m e n t e d , o r f i l e c h a r g e s w i t h a l a w e n f o r c e m e n t a g e n c y .
I n s o m e n a t i o n s p r i v a c y v i o l a t i o n i s a u t o m a t i c a l l y c o n s i d e r e d a c r i m i n a l o f f e n s e a n d c a r r i e r s o r p r o v i d e r s a r e h e l d r e s p o n s i b l e .
C o p y r i g h t v i o l a t i o n s a r e a s p e c i a l c a s e s i n c e t h e m a t e r i a l i s a v a i l a b l e t o t h e p u b l i c , b u t i t s d i s t r i b u t i o n i s c o n t r o l l e d . S u c h v i o l a t i o n s h a v e b e c o m e a m a j o r p o l i t i c a l a n d c o m m e r c i a l i s s u e g l o b a l l y , e s p e c i a l l y i n t h e e n t e r t a i n m e n t i n d u s t r y . | P | | a # Copyright and Intellectual Property I l l e g a l o r u n a u t h o r i s e d r e p r o d u c t i o n o f d i g i t a l m a t e r i a l s i s a m a j o r p r o b l e m .
W i t h c h e a p l y a v a i l a b l e n e t w o r k i n g , h a r d d i s k , C D - R a n d D V D b u r n e r t e c h n o l o g y , a l m o s t a n y m a t e r i a l s c a n b e r e p r o d u c e d , o f t e n i n b u l k q u a n t i t i e s , f o r l i t t l e m a t e r i a l e x p e n s e .
T h i s h a s l e d t o t h e g r o w t h o f i l l e g a l p i r a t e i n d u s t r i e s w h i c h s t e a l a n d m a r k e t d i g i t a l m a t e r i a l s , e s p e c i a l l y s o f t w a r e p r o d u c t s , a n d e n t e r t a i n m e n t p r o d u c t s s u c h a s c i n e m a , m u s i c a n d p u b l i c a t i o n s . T h e r e s u l t i s s i g n i f i c a n t l o s s e s t o t h e o w n e r s o f t h e i n t e l l e c t u a l p r o p e r t y i n t h e p r o d u c t s .
W e a k l e g i s l a t i o n i n s o m e n a t i o n s a l l o w s t h e s e t o b e c o m e h a v e n s f o r s u c h i n d u s t r i e s .
I t i s i m p o r t a n t t h a t o r g a n i s a t i o n s c a r e f u l l y a s s e s s t h e o r i g i n s o f a n y d i g i t a l m a t e r i a l s u s e d i n t e r n a l l y t o e n s u r e t h a t t h e s e a r e n o t p i r a t e c o p i e s .
A g o o d e x a m p l e w o u l d b e s o f t w a r e t o o l s u s e d w i t h i n a n o r g a n i s a t i o n . U s i n g p i r a t e d c o p i e s o r u n w i t t i n g l y d i s t r i b u t i n g s u c h m a t e r i a l s o p e n s t h e o r g a n i s a t i o n t o c i v i l l i t i g a t i o n o v e r c o p y r i g h t v i o l a t i o n o r c r i m i n a l c h a r g e s . P P q
L C } b SPAM SPAM is unauthorised and unsolicited distribution of marketing materials via email, in bulk quantities. Spammer violate the privacy of spam recipients.
Spammers will market everything from pornography, discount pharmaceuticals, junk stocks, dubious home loans, consumer products, to pirated software and CD/DVD.
Spam is also used to distribute propaganda on behalf of political and religious movements.
Modern spamming techniques use tools which use digital archives (usually harvested off the web on CD-ROM) of victim addresses, and which usually forge the sender address by using another victim address.
Spam is not illegal in most nations since legislation was injudiciously adopted which does not require prior consent by the recipient when being spammed.
It is likely that anti-spam legislation will be adopted in the developed world over coming years since spam often accounts for a significant fraction of bandwidth used causing economic losses globally. P ~ c Privacy on the Web The internet creates many opportunities for privacy violations.
Many websites use the cookie mechanism to retain state information and identity information. Cookies allow the web server to recognise systems accessing a site. In turn this information can be stored to produce profiles of visitor accesses on a site, and thus divine visitor interests or agendas.
Such information can be used to support marketing activities directed at visitors. An example is a website which uses such statistics to adaptively present advertising material to visitors.
Most web servers collect access statistics which allow operators to track which visitors are making what accesses and when. While this can be used for legitimate purposes, it also allows profiles of specific visitors to be produced.
Cookies and server statistics are usually gathered silently and visitors are unaware of their existence or possible/actual uses.
Website owners often compromise their own privacy by putting materials on websites which are not intended for distribution, but forgetting to disable read access.
Online directories now allow gathering of significant materials on individuals such as addresses, phone numbers, email addresses and other details. While most users are legitimate, criminals and terrorists also have access. Z N d $ Espionage and Intelligence Gathering ` E s p i o n a g e a n d i n t e l l i g e n c e g a t h e r i n g t h e s e c o n d o l d e s t p r o f e s s i o n - h a s a l o n g h i s t o r y . T h e a d v e n t o f d i g i t a l c o m m u n i c a t i o n s h a s m a d e s o m e a s p e c t s o f t h i s c r a f t e a s i e r , a n d s o m e m o r e d i f f i c u l t .
P r a c t i c i o n e r s m a y b e a c t i n g o n b e h a l f o f g o v e r n m e n t s i l l e g a l l y o r a s p a r t o f l a w e n f o r c e m e n t , p o l i t i c a l m o v e m e n t s a n d p a r t i e s , r e l i g i o u s m o v e m e n t s , c o m m e r c i a l o r g a n i s a t i o n s o r i n d i v i d u a l s .
M o s t e s p i o n a g e o r i n t e l l i g e n c e g a t h e r i n g a m o u n t s t o c o v e r t c o l l e c t i o n o f i n f o r m a t i o n o r m a t e r i a l s w i t h o u t t h e c o n s e n t o r k n o w l e d g e o f t h e v i c t i m .
T h i s c a n b e p e r f o r m e d b y a c o u s t i c e a v e s d r o p p i n g , v i s u a l / v i d e o s u r v e i l l a n c e , e l e c t r o n i c e a v e s d r o p p i n g o f a n a l o g u e o r d i g i t a l c h a n n e l s ( S I G I N T ) , h a c k i n g i n t o c o m p u t e r s ( C y b e r W A R ) , b r e a k i n g i n t o o f f i c e s , f i l i n g c a b i n e t s o r s a f e s ( H U M I N T ) , o r b y u n a u t h o r i s e d r e p r o d u c t i o n o f a c c e s s i b l e m a t e r i a l s ( H U M I N T ) .
W h i l e m o s t i n t e l l i g e n c e g a t h e r i n g a n d e s p i o n a g e i s p e r f o r m e d b y g o v e r n m e n t s a g a i n s t o t h e r g o v e r n m e n t s , i n d u s t r i a l e s p i o n a g e i s a l s o c o m m o n . T h e l a t t e r i s o f i n t e r e s t t o m a n a g e r s s i n c e i t c a n r e s u l t i n s i g n i f i c a n t l o s s e s . T a r g e t i n f o r m a t i o n c a n v a r y f r o m t e c h n i c a l d a t a o n p r o d u c t s o r p r o c e s s e s , t o m a r k e t i n g p l a n s , c o s t i n g i n f o r m a t i o n a n d t e n d e r p r o p o s a l d o c u m e n t s . P P
J C e Surveillance Techniques ^ S u r v e i l l a n c e c a n b e p e r f o r m e d u s i n g a c o u s t i c ( m i c r o p h o n e b u g s o r p h o n e t a p ) , v i s u a l ( f i l m o r v i d e o c a m e r a ) o r e l e c t r o n i c ( r a d i o / m o b i l e p h o n e / w i r e l e s s n e t w o r k ) i n t e r c e p t s .
I n m o s t n a t i o n s s u r v e i l l a n c e i s o n l y l a w f u l i f p e r f o r m e d b y a l a w e n f o r c e m e n t o r i n t e l l i g e n c e a g e n c y i e g o v e r n m e n t e n t i t i e s .
C o m m e r c i a l o p e r a t o r s a r e u s u a l l y p e r m i t t e d t o u s e v i d e o s u r v e i l l a n c e o f p u b l i c l y a c c e s s i b l e a r e a s i e b a n k s , A T M s , c a r p a r k s , f o y e r s e t c .
A n l a r g e s c a l e e x a m p l e o f s u c h s u r v e i l l a n c e i s t h e C C T V n e t w o r k i n L o n d o n u s e d t o a p p r e h e n d t e r r o r i s t s a f t e r t h e r e c e n t a t t e m p t s t o b o m b p u b l i c t r a n s p o r t .
L a w e n f o r c e m e n t a g e n c i e s r e l y h e a v i l y o n a c o u s t i c a n d v i s u a l s u r v e i l l a n c e t o g a t h e r i n t e l l i g e n c e o r e v i d e n c e .
M a n a g e r s n e e d t o b e a w a r e o f t h e p o t e n t i a l f o r u n l a w f u l s u r v e i l l a n c e a n d p l a n i n f r a s t r u c t u r e t o m a k e i t d i f f i c u l t t o p e r f o r m .
C o u n t e r - s u r v e i l l a n c e t e c h n o l o g i e s m a y b e i l l e g a l i n s o m e n a t i o n s f o r i n s t a n c e v o i c e s c r a m b l e r s f o r t e l e p h o n e l i n k s . Z > y f L S I G I N T / C O M I N T S i g n a l s / C o m m u n i c a t i o n s : T h e i n t e r c e p t i o n o f r a d i o s i g n a l s a n d c o m m u n i c a t i o n s h a s b e e n p r a c t i c e d s i n c e t h e a d v e n t o f w i r e l e s s c o m m u n i c a t i o n s . I t i s m o s t l y p r a c t i c e d b y t h e m i l i t a r y a n d l a w e n f o r c e m e n t d u e t o t h e c o s t o f t h e c o m p l e x e q u i p m e n t r e q u i r e d .
T h e a d v e n t o f c h e a p r a d i o s c a n n e r s h a s o p e n e d u p o p p o r t u n i t i e s f o r i n d i v i d u a l s a n d o r g a n i s a t i o n s t o i n t e r c e p t u n e n c r y p t e d o r u n s c r a m b l e d w i r e l e s s v o i c e t r a f f i c .
I n t e r c e p t s m a y b e t a r g e t e d , i e a s i n g l e i n d i v i d u a l o r s i t e i s m o n i t o r e d o n a s p e c i f i c c h a n n e l , o r t h e y m a y b e p e r f o r m e d e n m a s s e b y r e c o r d i n g s w a t h s o f t h e r a d i o s p e c t r u m f o r l a t e r s e m i - a u t o m a t e d o r m a n u a l a n a l y s i s b y h u m a n o p e r a t o r s .
W i r e l e s s c h a n n e l s w i t h o u t s t r o n g e n c r y p t i o n m u s t b e t h e r e f o r e c o n s i d e r e d i n s e c u r e a n d s h o u l d n e v e r b e u s e d t o t r a n s m i t i n f o r m a t i o n w h i c h i s s e n s i t i v e e i t h e r f r o m a p r i v a c y p e r s p e c t i v e , c o m m e r c i a l p e r s p e c t i v e , o r w h e r e s e n s i t i v e g o v e r n m e n t t r a f f i c i s i n v o l v e d . G S M m o b i l e p h o n e s a r e a g o o d e x a m p l e .
, 8
] g Network Sniffers 2 N e t w o r k s n i f f e r s a r e a v i t a l t o o l f o r l e g i t i m a t e t r a f f i c a n a l y s i s a n d n e t w o r k m a i n t e n a n c e t a s k s . T h e y c a n a l s o b e u s e d t o p e r f o r m l a w f u l a n d u n l a w f u l s u r v e i l l a n c e a n d m o n i t o r i n g o f s p e c i f i c u s e r s o r s i t e s o n a n e t w o r k .
A s n i f f e r i s a s o f t w a r e / h a r d w a r e d e v i c e w h i c h c o l l e c t s a n d d e c o d e s n e t w o r k p a c k e t s , a n d c a n o f t e n r e a s s e m b l e t r a f f i c f l o w s .
N e t w o r k p r o t o c o l s w i t h w e a k o r a b s e n t e n c r y p t i o n w i l l a l l o w t h e u s e r o f a s n i f f e r t o c o l l e c t a c c o u n t s / p a s s w o r d i n f o r m a t i o n , e m a i l t r a f f i c , f i l e t r a n s f e r s a n d w e b t r a f f i c .
S n i f f e r s w i t h w i r e l e s s n e t w o r k i n t e r f a c e s a l l o w p e n e t r a t i o n o f w i r e l e s s n e t w o r k s w i t h o u t h a v i n g p h y s i c a l a c c e s s t o a n e t w o r k p o r t o r c a b l e .
N e t w o r k p l a n n i n g n e e d s t o a c c o u n t f o r u n l a w f u l s u r v e i l l a n c e b y u s e r s o f s n i f f e r e q u i p m e n t . A c t i v e n e t w o r k p o r t s i n p u b l i c l y a c c e s s i b l e a r e a s a r e n o t a c c e p t a b l e , a n d w i r e l e s s c h a n n e l s m u s t u s e t h e s t r o n g e s t a v a i l a b l e e n c r y p t i o n t e c h n i q u e s .
I n s i d e r a t t a c k s b y s t a f f u s i n g s n i f f e r s o f t w a r e o n i n t e r n a l s y s t e m s a r e a r e a l p o s s i b i l i t y . S u p e r u s e r a c c e s s o n c o m p u t e r s s h o u l d b e c a r e f u l l y c o n t r o l l e d .
P Z 6 6 h Van Eck Radiation \ V a n E c k r a d i a t i o n i s d e f i n e d a s U n i n t e n d e d E m i s s i o n s ( U E ) i n t h e r a d i o - f r e q u e n c y b a n d s .
C o m p u t e r m o n i t o r s a n d t o a l e s s e r e x t e n t k e y b o a r d o r p o o r l y i m p e d a n c e m a t c h e d n e t w o r k c a b l e s w i l l r a d i a t e s i g n a l s a s a r e s u l t o f t h e d i g i t a l o r a n a l o g u e m o d u l a t i o n s t h e y a r e c a r r y i n g .
S p e c i a l i s e d r e c e i v e r s c a n b e u s e d t o c o l l e c t U E t h e t y p i c a l e x a m p l e c i t e d i s e q u i p m e n t w h i c h c a n r e c o n s t r u c t w h a t i s b e i n g d i s p l a y e d o n a c o m p u t e r m o n i t o r f r o m o u t s i d e t h e b u i l d i n g h o u s i n g t h e c o m p u t e r .
U E s u r v e i l l a n c e a n d i n t e l l i g e n c e g a t h e r i n g i s e x p e n s i v e a n d u s u a l l y l i m i t e d t o g o v e r n m e n t s a n d l a w e n f o r c e m e n t .
T h e U S N A C S I M 5 0 0 0 T e m p e s t s e r i e s o f s t a n d a r d s d e f i n e s d e s i g n s p e c i f i c a t i o n s a n d t e c h n i q u e s f o r c o m p u t e r e q u i p m e n t t o p r e v e n t t h e e m i s s i o n o f V a n E c k r a d i a t i o n .
M a n a g e r s i n g o v e r n m e n t o r g a n i s a t i o n s n e e d t o u n d e r s t a n d t h e r i s k s a r i s i n g f r o m U E a n d e n s u r e t h a t c o m p u t e r e q u i p m e n t u s e d f o r c l a s s i f i e d o r h i g h l y s e n s i t i v e m a t e r i a l i s s u i t a b l e f o r s u c h u s e .
Z ,
m ) Psychological Warfare (Psywar) Techniques
P s y w a r i s u s e d m o s t f r e q u e n t l y i n w a r t i m e ( r a d i o / l e a f l e t s ) , b u t i s o f t e n s e e n i n c o m m e r c i a l o r p o l i t i c a l m a s s m e d i a a d v e r t i s i n g .
P s y w a r t e c h n i q u e s a i m t o a m p l i f y e x i s t i n g a n x i e t i e s i n a t a r g e t / v i c t i m p o p u l a t i o n t o d i s r u p t t h e i r b e h a v i o u r , a n d d i s r u p t t h e c o h e s i o n o f a n o r g a n i s a t i o n o r g r o u p .
A p r e r e q u i s i t e f o r s u c c e s s f u l P s y o p s i s t h a t t h e t a r g e t o r v i c t i m p o p u l a t i o n h a s a n e x i s t i n g a n x i e t y o r p r e j u d i c e o v e r s o m e i s s u e .
S t a t e m e n t s o r c l a i m s w h i c h r e i n f o r c e s u c h a n x i e t i e s o r p r e j u d i c e s w i l l p r o d u c e d i s t r e s s o r a n g e r i n t h e v i c t i m p o p u l a t i o n .
E x a m p l e s a r e p o l i t i c a l a d v e r t i s i n g e m p h a s i s i n g i s s u e s l i k e j o b l o s s e s o r i n t e r e s t r a t e i n c r e a s e s , o r c o m m e r c i a l a d v e r t i s i n g p o i n t i n g o u t b u g s o r v u l n e r a b i l i t i e s i n c o m p u t e r p r o d u c t s . C o m m e r c i a l f o o d s t u f f a d v e r t i s i n g a l l e g i n g w e i g h t g a i n s , c a n c e r o r h e a r t d i s e a s e a l s o q u a l i f i e s a s P s y w a r .
T h e i n t e r n e t a n d m a s s m e d i a a r e t h e p r e f e r r e d c h a n n e l s f o r P s y w a r a t t a c k s .
M o s t n a t i o n s h a v e i n a d e q u a t e l e g i s l a t i o n r e g u l a t i n g t h i s a r e a .
Z { ] ! * = K n
Censorship Censorship is a mechanism used to control access to information. It typically involves denying access or punitive criminal legislation intended to deter distribution.
In developed nations censorship is mostly directed at entertainment products with explicit or violent content. In wartime censorship is used to deny an opponent knowledge of sensitive developments. Many nations apply political censorship to control public and political debate. Internet censorship exists in some nations to deny access to a wide range of materials not deemed suitable for public access.
Censorship is a double edged sword, since it can increase the attractiveness of the censored material to a potential audience.
Censorship remains a controversial issue in Western democracies since the criteria used to determine exclusion are often difficult to achieve consensus on.
Managers operating in a global market or across national boundaries need to be sensitive to censorship legislation since criminal law is often used to enforce it. Z o # Hacking, Cybercrime, Cyberwar (HCC) ,
0 H a c k i n g i s t h e t e r m u s e d t o d e s c r i b e u n a u t h o r i s e d a c c e s s t o c o m p u t e r s y s t e m s . T h e t e r m o r i g i n a l l y a p p l i e d t o p r o g r a m m e r s w h o w o r k e d o n o p e r a t i n g s y s t e m k e r n e l s b u t t h e m e d i a a n d e n t e r t a i n m e n t i n d u s t r i e s p o p u l a r i s e d t h e c u r r e n t l y a c c e p t e d u s e o f t h e t e r m .
C y b e r c r i m e i s t h e u s e o f h a c k i n g t e c h n i q u e s t o c o m m i t c r i m i n a l o f f e n c e s , u s u a l l y t h e f t o f m o n e y o r i n t e l l e c t u a l p r o p e r t y .
C y b e r w a r i s t h e u s e o f h a c k i n g t e c h n i q u e s t o p e r f o r m d e n i a l o f s e r v i c e a t t a c k s o r i n t e l l i g e n c e g a t h e r i n g f o r p o l i t i c a l o r m i l i t a r y p u r p o s e s .
H C C r e l i e s o n p o o r p a s s w o r d s e c u r i t y a n d s e c u r i t y h o l e s i n c o m p u t e r o p e r a t i n g s y s t e m s .
P h r a c k i n g ( P h o n e H a c k i n g ) i s h a c k i n g i n t o t e l e p h o n e n e t w o r k s m o s t l y t o s t e a l b a n d w i d t h .
W h a c k i n g ( W i r e l e s s H a c k i n g ) i s h a c k i n g i n t o w i r e l e s s n e t w o r k s m o s t l y t o s t e a l b a n d w i d t h .
H a c k i n g r e m a i n s a c o n t r o v e r s i a l i s s u e . I n m o s t d e v e l o p e d n a t i o n s i t i s a c r i m i n a l o f f e n c e , f r e q u e n t l y p u n i s h e d b y l o n g j a i l t e r m s . P b % )
r , p * Techniques for Gaining Unauthorised Access A w i d e r a n g e o f t e c h n i q u e s e x i s t f o r h a c k i n g i n t o c o m p u t e r s y s t e m s .
P a s s w o r d s m a y b e s t o l e n b y s n i f f i n g , o r b y e n t e r i n g o f f i c e s a n d r e a d i n g p a p e r n o t e s . P a s s w o r d s m a y a l s o b e g u e s s e d u s i n g r o b o t s , o r p u r c h a s e d f r o m u n e t h i c a l s t a f f m e m b e r s . U n s e c u r e d t e r m i n a l s l e f t l o g g e d i n m a y b e e x p l o i t e d .
T r o j a n h o r s e o r b a c k d o o r e n t r y c o d e m a y b e i n s e r t e d i n t o s y s t e m s w h e r e a h a c k e r h a s a c c e s s t o t h e o r i g i n a l s o u r c e c o d e .
S o p h i s t i c a t e d a t t a c k e r s m a y p e r f o r m i d e n t i t y s p o o f i n g b y r e p l a c i n g r e a l n e t w o r k p a c k e t s w i t h s u b s t i t u t e s .
S e c u r i t y h o l e s i n s o m e n e t w o r k a p p l i c a t i o n s m a y p e r m i t r e m o t e e n t r y b y d r i v i n g t h e a p p l i c a t i o n w i t h m e s s a g e s k n o w n t o e x p o s e t h e v u l n e r a b i l i t y .
S o f t w a r e t o o l s d e v e l o p e d f o r s e c u r i t y t e s t i n g o f n e t w o r k s c a n a l s o b e u s e d t o e x p o s e s e c u r i t y h o l e s f o r u n a u t h o r i s e d e n t r y .
R o b u s t f i r e w a l l i n g a n d s y s t e m s e c u r i t y a u d i t s a r e e s s e n t i a l t o p r o t e c t a g a i n s t u n a u t h o r i s e d s i t e e n t r i e s .
Z > = q Viruses and Worms o Viruses are malicious programs which embed themselves in file systems, operating systems or applications upon which they propagate themselves via removable storage media or networks to other systems.
Viruses may be benign or destructive in effect, and can be used to compromise security by propagating password files or email address lists.
Worms are malicious programs which consume system resources to the point where a system becomes unusable.
Highly integrated mailer and word processor programs are the most common targets of viruses and worms since they permit easy entry and propagation between systems. Some proprietary systems are considered the most vulnerable, cf Linux, BSD and commercial Unix systems.
Managers and strategic planners need to be sensitive to risks which may arise from using some commodity software products known to be susceptible to such attacks. p Z p r Identity Theft and Fraud I d e n t i t y t h e f t i s a n i n c r e a s i n g p r o b l e m i n t h e c o m p u t e r a n d c o m m u n i c a t i o n s i n d u s t r y .
T h e s i m p l e s t e x a m p l e s i n v o l v e t h e f t o f m o b i l e p h o n e s a n d c r e d i t c a r d s f o r p r o f i t .
S p a m m e r s t o d a y m o s t l y f o r g e r e t u r n a n d s e n d e r e m a i l a d d r e s s e s b y u s i n g a d d r e s s e s o f o t h e r s p a m v i c t i m s h e l d i n d i g i t a l a r c h i v e s .
I n t e r n e t n e w s g r o u p s h a v e a l s o s e e n i d e n t i t y t h e f t s w h e r e h o a x e r s p r e t e n d t o b e a c t u a l o r f i c t i o n a l p e r s o n s . A n e x a m p l e w a s a h o a x e r o n r e c . a v i a t i o n . m i l i t a r y i m p e r s o n a t i n g a r e t i r e e , w h o w a s a c t u a l l y b e d r i d d e n i n a n u r s i n g h o m e s u f f e r i n g f r o m s e v e r e s t r o k e i m p a i r m e n t .
V a l i d a t i o n o f s u b s c r i b e r i d e n t i t y f o r w e b a c c e s s i b l e s e r v i c e s c a n p r e s e n t g e n u i n e i s s u e s , e s p e c i a l l y w h e r e s i t e s a r e u s e d t o e f f e c t f i n a n c i a l t r a n s a c t i o n s .
B o g u s w e b s i t e s s e t u p t o v i s u a l l y e m u l a t e a c t u a l b a n k w e b s i t e s h a v e b e e n u s e d t o s t e a l e l e c t r o n i c b a n k i n g p a s s w o r d s , i n t u r n t o f r a u d u l e n t l y a c c e s s a c c o u n t s .
N i g e r i a n s c a m s i n v o l v i n g i m p e r s o n a t i o n s a r e n o w o f e p i d e m i c p r o p o r t i o n s i n t h e s p a m m e r c o m m u n i t y .
P s & Denial of Service Attacks vs Extortion t D e n i a l o f S e r v i c e a t t a c k s c a n b e u s e d a s a t o o l t o e x t o r t m o n e y f r o m v i c t i m s .
O r g a n i s a t i o n s w h i c h r e l y o n u n i n t e r r u p t e d c o m p u t e r o p e r a t i o n t o e f f e c t f i n a n c i a l t r a n s a c t i o n s , o r w h i c h r e l y o n w e b s e r v e r s f o r c l i e n t a c c e s s , a r e t h e m o s t c o m m o n t a r g e t s o f s u c h a t t a c k s .
T h e a t t a c k e r w i l l c a u s e r e p e a t e d s e r v i c e l o s s a n d t h e n e x t o r t m o n e y b y p r o m i s i n g t o c e a s e a t t a c k s .
C y b e r a t t a c k s - a s t h e a t t a c k e r m a y b e l o c a t e d o n a n o t h e r c o n t i n e n t , i n a n a t i o n w i t h w e a k o r a b s e n t c y b e r c r i m e l e g i s l a t i o n , m a j o r p r o b l e m s a r i s e w i t h i d e n t i f y i n g t h e a t t a c k e r , a n d w i t h p r o s e c u t i n g t h e a t t a c k e r .
R a d i o - f r e q u e n c y / e l e c t r i c a l a t t a c k s t h e a t t a c k e r w i l l b e g e o g r a p h i c a l l y l o c a l b u t m a y n o t l e a v e a d e t e c t a b l e s i g n a t u r e o r f o o t p r i n t p e r m i t t i n g l a w e n f o r c e m e n t t o a p p r e h e n d o r p r o s e c u t e .
U s u a l l y D o S e x t o r t i o n i s t s p r e y o n o r g a n i s a t i o n s w i t h p o o r e x p e r t i s e l e v e l s i n c o m p u t e r / n e t w o r k a d m i n i s t r a t i o n a n d s e c u r i t y .
I n g e n e r a l D o S a t t a c k s c a n b e d i f f i c u l t t o p r o v e a n d p r o s e c u t e .
B Z m
$ V b N
w
*
X 3 t Tutorial Q & A
Case Studies Discussion/ / ` f f f 33 ` 3KI 3 ff ` 33 f f ` / p ` 3 % * 3 | ` Jy 3f ff3 f ` 3 f f3 ̙ ` 3 3f f 33 ` D D yq 3f ` ̙ 3 n ` w 3 ff ` } ff > ? " d d @ ? n K d @ P n A @ F ` d n ? " d d @ @@ `` P R @ ` ` p > >
d (
d
d
6 # " ` `
X & 2006, Monash University, Australia ' '
d
6 # " ` ` `
B * ( T X
d " X
d
N d # " ` P
2 0
d
6 d # " ` U
0 0
d
S " U Y
*
d
c $ D " Y W
*
d
c $ t " Y U
*
d
c $ "
*
d
S $ # " ` S V
0 0
d
S | " Y
*
d
c $ " X
*
d
< p # " ` `
T Click to edit Master title style !
! $
d
0 " `
R Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level !
S
d
6 # " ` ^ `
@ * f
d
C 0 A L o g o R G B - 2 5 6 " I % H
d 0 h ? } ff 8 0 _ _ _ P P T 1 0 .
07
P i x e l u
h u
(
h b T
h "
h
T O d
# "
2 0
h
c $ hR
" 9 ) e
0 0 b e
h # " e
h
S V " i e
0 0
h
S Y " 9 )
0 0
h
S [ " 0
0 0
h
S Ta " ? e
0 0
h
S d " )
0 0
h
S f " ? G
0 0
h
S *
h
6 } # " ` `
X & 2006, Monash University, Australia ' '
h
6 # " ` ` `
B *
h
0 ą " P
T Click to edit Master title style !
!
h
0 T "
P
W # Click to edit Master subtitle style $
$ f
h
C 0 A L o g o R G B - 2 5 6 " w H
h 0 h ? } ff 8 0 _ _ _ P P T 1 0 .
07
0 z r 0
(
0 ± P
P *
0 (ȱ
R *
d
c $ ?
0 Hñ
0
R Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level !
S
6 α _ P
P *
6 hԱ _
R *
H
0 h ? 33 8 0 _ _ _ P P T 1 0 . @ p < (
p ~
p s * h P
~
p s * ܐ h
P
H
p 0 h ? ̙ 33
< (
~
s * d `
~
s * ,B d `
H
0 h ?
l d (
x
c $ ( d `
J
C " A i w 0 C B
s * h ? } ff 8 0 _ _ _ P P T 1 0 . ~e
l d (
x
c $ d `
J
C " A i w 1 B
s * h ? } ff 8 0 _ _ _ P P T 1 0 . Ї 0
0 0 (
x
c $ 8 d `
x
c $ h= d `
H
0 h ? } ff 8 0 _ _ _ P P T 1 0 . H 0
@ $ 0 (
$ x
$ c $ S d `
x
$ c $ W d `
H
$ 0 h ? } ff 8 0 _ _ _ P P T 1 0 . M% 0
P ( 0 (
( x
( c $ m d `
x
( c $ Dr d `i
H
( 0 h ? } ff 8 0 _ _ _ P P T 1 0 . P\,_ 0
` , 0 (
, x
, c $ < d `
x
, c $ d `
H
, 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ο3 0
p 0 0 (
0 x
0 c $ ġ d `
x
0 c $ @ d `
H
0 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ї` 0
4 0 (
4 x
4 c $ d `
x
4 c $ d `
H
4 0 h ? } ff 8 0 _ _ _ P P T 1 0 . җ0 0
8 0 (
8 x
8 c $ ѧ d `
x
8 c $ է d `/
H
8 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ӗ 0
< 0 (
< x
< c $ d `
x
< c $ @ d `
H
< 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ח0 5 0
@ 0 (
@ x
@ c $ d `
x
@ c $ D
d `
H
@ 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ٗ@g 0
D 0 (
D x
D c $ 4! d `
x
D c $ % d `
H
D 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ڗp) 0
H 0 (
H x
H c $ 7 d `
x
H c $ < d `
H
H 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ܗA{ 0
L 0 (
L x
L c $ S d `
x
L c $ XX d `
H
L 0 h ? } ff 8 0 _ _ _ P P T 1 0 . ݗ 0
0 ` 0 (
` x
` c $ ,Щ d `
x
` c $ թ d `
H
` 0 h ? } ff 8 0 _ _ _ P P T 1 0 . `I٧ 0
@ d 0 (
d x
d c $ d `
x
d c $ d `
H
d 0 h ? } ff 8 0 _ _ _ P P T 1 0 . d 0
P h 0 (
h x
h c $ d `
x
h c $ d `
H
h 0 h ? } ff 8 0 _ _ _ P P T 1 0 . 2 0
` l 0 (
l x
l c $ d `
x
l c $ p d `
H
l 0 h ? } ff 8 0 _ _ _ P P T 1 0 . Ӄ> 0
p p 0 (
p x
p c $ 4 d `
x
p c $ 8 d `
H
p 0 h ? } ff 8 0 _ _ _ P P T 1 0 . 0 0
t 0 (
t x
t c $ K d `
x
t c $ 0L d `
H
t 0 h ? } ff 8 0 _ _ _ P P T 1 0 . V- 0
x 0 (
x x
x c $ @b d `
x
x c $ f d `
H
x 0 h ? } ff 8 0 _ _ _ P P T 1 0 . pwٛ $
$ (
r
S d `
r
S 4 d `
H
0 h ? } ff 8 0 _ _ _ P P T 1 0 . XX J $ @
0 t 4 (
t d
t c $
t s * ұ
@
H
t 0 h ? ̙ 33 8 0 _ _ _ P P T 1 0 . 3 r , @ ) u J * b
p B z " Z @ ?
"
, ! (
~ h t t p : / / w w w . c s . g e o r g e t o w n . e d u / ~ d e n n i n g / c o s c 5 1 1 / f a l l 0 2 / i n d e x . h t m l ~ h t t p : / / w w w . c s . g e o r g e t o w n . e d u / ~ Oh +'0 U h p
( 4
@ L T F CSE5806 Telecommunications Management Lecturer: Dr Carlo Kopp, PEng Kopp 06 Master-2005 Dr Carlo Kopp om 91 C Microsoft PowerPoint ati@ ̯: @ z@ (YX w G S g ) ' """ ))) UUU MMM BBB 999 | PP 3 f 3 33 f3 3 3 3 f 3f ff f f f 3 f ̙ 3 f f 3 3 3 f 3 3 3 3 33 333 f33 33 33 33 f3 3f3 ff3 f3 f3 f3 3 33 f3 3 ̙3 3 3 33 f3 3 3 3 33 f3 3 3 3 f 3 f f f f f f 3f 33f f3f 3f 3f 3f ff 3ff fff ff ff f 3f ff f ̙f f f 3f f f f f 3f f f 3 33 f 3 f 3f f3 f f 3 3 f ̙ ̙ 3̙ ff ̙ ̙ ̙ 3 f̙ 3 f 3 33 f3 3 3 3 f 3f ff f f f 3 f ̙ 3 f 3 f 3 f 3 33 f3 3 3 3 f 3f ff f f f 3 f ̙ 3 f 3 f ff ff f ff f f ! ___ www 4 ' A x ( x K ʦ """ ))) UUU MMM BBB 999 | PP 3 f 3 33 3f 3 3 3 f f3 ff f f f 3 f 3 f ̙ f 3 3 3 3 f 3 3 3 33 333 33f 33 33 33 3f 3f3 3ff 3f 3f 3f 3 33 3f 3 3 3 3 33 3f 3̙ 3 3 33 3f 3 3 3 f f 3 f f f f f f3 f33 f3f f3 f3 f3 ff ff3 fff ff ff f f3 ff f f f f f3 f̙ f f f f3 f f 3 33 f 3 f f3 3f f f 3 3 f 3 ff ̙ 3 f 3 f 3 33 3f 3 3 3 f f3 ff f f f ̙ ̙3 ̙f ̙ ̙ ̙ 3 f ̙ 3 f 3 f 3 33 3f 3 3 3 f f3 ff f f f 3 f 3 f ̙ 3 f ff ff f ff f f ! ___ www ݼݼݼݼýݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼݽ ݼݼݼ¼ݽ ݼݼݽݼݼݼݽü ݼݽݼݼݼݼݼݼݼݼ⽼ݼݼݼݽݼݼݼݼݼݼݽݼݼݼݼݼݼݼݼݼݼݽݼݼݼݼݼݼݼݼݽݼݼݼݼݽ¼ݼݼݼݼ½ݼݼݼݽݼݼݼݼݼݼݼݽݼݼݼݼݼݼݼ¼ݽ¼ݽ ݼݼݼݽݼݼݽ½ ݼݼݼݼݼݽݼ ݼݼݼݼݼݽ ݼݼݼݼ⽼ݼ⼼ݼݽ ݼݼݼݼݼݼ ݼݼݼ½ݽ ݼݼݼݼݼ ݼݼݼݽݼݼݼݼݼ ݼݼݼݼݼ ݼݼݼݼݼݼ ݼݼݼüü ݼݼݼݼݼݽݼݽݼݼ½ݽݽݼ¼ݼݽݼݼݼüݼݼݼݼ¼¼ݼݽ½ݼݽݼݼݼݼ¼ݼݼݼݼݼ½ݼݼݼݽݼݼݼݼݼݼݼݼݼݼݽݼݼݼ ݼݼݽ ݼݼݼݼݼݼ ݼݼݼݼݽݼݼݼݽݼݽݼ½ݽݼݼݼ_____________________________________________________________________________________ݼݼݼݵ______________________________________________________________________ݼݼݼ_______________________________________________________________________________________ݼݼݼݵ_______________________________________________________________ݼݼݼݼ________________________________________________________________________________________ݼݼݼݵ____________________________________________________________________________ݼݽݼݼ_________________________________________________________________________ݼݼݼݼ__________________________________________________________________________________ݼݼݼ_______________________________________________________________________ݼݼݼݵ_______________________________________________________________________________ݼݼݼݵ________________________________________________________________________ݼݼݽݼݼݼݵ________________________________________________ݼݼݼݼݼݼݼݵ________________________________________________ݼݼݼݼݼݼݼ_________________________________________________________ݼݽݼݼݼ_______________________________________________________________________ݼݼݼݼݵ_____________________________________________________________________ݼݼݼݽݼݼݵ____________________________________________________________________________ݼݼݼݼݼݼݼ___________________________________________________________________ݼݼݼݼݼݼݼ_____________________________________________________________________ݼݼݼݼݼݼݼݵ_______________________________________________________________________________ݼݼݼݼݼݼ________________________________________________________________ݼݼݼݼݼݵ_________________________________________________________________________________ݼüݼݼݼݼݵ________________________________________________ݽݼݼݼݼݼݵ_________________________________________________________________ݼݼݽݼݼݼ_______________________________________________ݼݼݼݼݼ____________________________________________________________________ݼݼݼݼݼݼݵ___________________________________________________________________________ݼݼݼݼݼ_______________________________________________________________________ݽݼݼݼݼݼ________________________________________________________________________ݼݼݼݼݼݼ_________________________________________________________________ݼݼݼݼݼݼݵ____________________________________________________________ݽ⼽ݼݼݼݼݼݵ____________________________________________________________________ݼݽݼݼݼݼ_____________________________________________________________ݼݽݼ¼ݼݼݼݵ____________________________________________________________ݼݼݼ⽼ݼݼݼݵ_______________________________________________________________ݼݼݼݼݼݼݼݼݼ________________________________________________________ݼݼݼݼݼݼݼݼݼݼ________________________________________________________________ݼݼݼݼݼݼݼݵ________________________________________________________________ݼݼݼݼ½ݼݼݼݼ____________________________________________________ݼݼݼݼݼݼ¼ݼݼݼݼ_____________________________________________________________________ݼݽݼݼݼݼݼݼݼݵ____________________________________________________ݼݼݽݼݼݼݼݼ____________________________________________________________ݼݼݼݼݽݼݼݼݵ___________________________________________________________________ݼݼݼݼݼ¼ݼݼݼݼ____________________________________________________ݽݼݼݽݼݼݼݼݼݼݼýݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼݼm"CJݼݼݼݼݼݽݼݼݼݼsmJIrtݼݼݼ¼ݽ⼼ݼݼݼݘsKPJnQKmKݼݼݽݼݼݼݽüݼݼKJrssrKPݼݽݼݼݼݼ⼼ݼݼýnPsJnݼݼݼݼ⽼ݼݼݼݼݼsmKPrsstݼݼݽݼݼݼݼJKJJJmJmmݼݼݼݼݼݽݼ⼼ݼݼݼQmQrKJsݼݼݼݼݼݼnssnݼݼݼݽݼݼ⟽ݼݼݼݼݼݼݽ¼ݽݼݼݼݼݽ¼»ݼݼݼݼ½ݻݼݼݼݽûûݼݼݼݼݼݼ⼼»ݼݽݼݼݼݼݼݼݼ¼ݽ¼ݽ⼻ܻüݼݼݼݽݼݼݽ½mrݼݼݼݼݼݽݼûnrmrmݼݼݼݼݼݽmmmmݼݼݼݼ⽼ݼ⼼ݼݽⵘrrrݼݼݼݼݼݼޘ¼mrݼݼݼ½ݽ♴sݼݼݼݼݼrݼݼݼݽݼݼݼݼݼݼݼݼݼݼ % _
QDr Carlo Kopp D r C a r l o K o p p
p On-screen Show Monash Uni. 3 A
Arial Times New Roman
Wingdings Arial Black Pixel J CSE468 Information Conflict Lecturer: Dr Carlo Kopp, MIEEE, MAIAA, PEng Reference Sources Taxonomy of IW Categories Denial of Service Attacks Offensive vs Defensive IW Practioners of IW Technique ! Moores Law, Bandwidth Law vs IW % Privacy and Copyright Considerations $ Copyright and Intellectual Property SPAM Privacy on the Web % Espionage and Intelligence Gathering Surveillance Techniques ' SIGINT/COMINT Signals/Communications Network Sniffers Van Eck Radiation * Psychological Warfare (Psywar) Techniques Censorship $ Hacking, Cybercrime, Cyberwar (HCC) + Techniques for Gaining Unauthorised Access Viruses and Worms Identity Theft and Fraud ' Denial of Service Attacks vs Extortion Tutorial Fonts Used Design Template
Slide Titles 8 @ _PID_HLINKS A l 0 @ h t t p : / / w w w . c s . g e o r g e t o w n . e d u / ~ d e n n i n g / c o s c 5 1 1 / f a l l 0 2 / i n d e x . h t m l # h t t p : / / d e v o s t . t y p e p a d . c o m / c o s o 5 1 1 / ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 1 2 9 6 . h t m l ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 9 7 . h t m l ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 0 0 . h t m l ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 3 0 0 . h t m l ( h t t p : / / w w w . a u s a i r p o w e r . n e t / m o o r e - i w . p d f 0 h t t p : / / w w w . a u s a i r p o w e r . n e t / _ J I W - 2 0 0 2 - 1 - C K - S . p d f % _
QDr Carlo Kopp D r C a r l o K o p p
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ R o o t E n t r y dO ) (YX*
P i c t u r e s C u r r e n t U s e r ( G S u m m a r y I n f o r m a t i o n ( 4U P o w e r P o i n t D o c u m e n t ( 3 D o c u m e n t S u m m a r y I n f o r m a t i o n 8 d e n n i n g / c o s c 5 1 1 / f a l l 0 2 / i n d e x . h t m l D h t t p : / / d e v o s t . t y p e p a d . c o m / c o s c 5 1 1 / D h t t p : / / d e v o s t . t y p e p a d . c o m / c o s o 5 1 1 / P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 1 2 9 6 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 1 2 9 6 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 9 7 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 9 7 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 0 0 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 0 0 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 3 0 0 . h t m l P h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 3 0 0 . h t m l N h t t p : / / w w w . a u s a i r p o w e r . n e t / m o o r e - i w . p d f N h t t p : / / w w w . a u s a i r p o w e r . n e t / m o o r e - i w . p d f ^ h t t p : / / w w w . a u s a i r p o w e r . n e t / _ J I W - 2 0 0 2 - 1 - C K - S . p d f ^ h t t p : / / w w w . a u s a i r p o w e r . n e t / _ J I W - 2 0 0 2 - 1 - C K - S . p d f / 0 0 D A r i a l B l a c 0 z[ 0 " D T i m e s N e w R o m a n 0 z[ 0 D W i n g d i n g s R o m a n 0 z[ 0 0 D A r i a l B l a c k m a n 0 z[ 0 " @ .
@ n ? " d d @ @@ `` (
! x C Y Z \ ]
O R $ -qaREL R $ PԄ|a
b $ s/amcK-/ % b $ cCэeڶ-K* % 0 A A @ 8 , - ʚ; ʚ; g 4 ? d ? d z[ 0 p p p @ < 4 d d d d L 0 < 4 B d B d L < 0 ( ~ 0 _ _ _ P P T 1 0
p p > _ _ _ P P T 9 . @ I CSE468 Information Conflict Lecturer: Dr Carlo Kopp, MIEEE, MAIAA, PEng 0 J + E Lecture 10
Information Conflict - Copyright, Privacy, Spam, Espionage, Surveillance, Hacking and Cyberwar, Viruses/Worms, and Identity Theft ( Z b $ u W Reference Sources Prof Dorothy Denning (formerly Georgetown)
COSC 511 Information Warfare: Terrorism, Crime, and National Security
http://www.cs.georgetown.edu/~denning/cosc511/fall02/index.html
http://devost.typepad.com/cosc511/
Carlo Kopp - APA IW Topics Archive:
http://www.ausairpower.net/OSR-1296.html
http://www.ausairpower.net/OSR-0297.html
http://www.ausairpower.net/OSR-0200.html
http://www.ausairpower.net/OSR-0300.html
http://www.ausairpower.net/moore-iw.pdf
http://www.ausairpower.net/_JIW-2002-1-CK-S.pdf
+ % + F c & + F ? " ( ( ( ( ( ' / U
0 q U
0 U
0 # U
0 $ L U
0 M u U
0 v U
0 U
0 v Y Taxonomy of IW Categories
w [ Denial of Service Attacks
x ] Offensive vs Defensive IW
I n a n y I W e n g a g e m e n t t h e r e i s a n o f f e n s i v e p l a y e r o r a t t a c k e r , a n d a d e f e n s i v e p l a y e r o r d e f e n d e r .
S t r a t e g i c p l a n n e r s a n d m a n a g e r s w i l l t y p i c a l l y p l a y t h e d e f e n d e r s g a m e . T h e i r r o l e i s t o e n s u r e t h a t t h e o r g a n i s a t i o n s i n f r a s t r u c t u r e c a n r e s i s t I W a t t a c k s s t a r t i n g w i t h C l a s s I , a n d t h e n C l a s s I I a n d I I I I W . C l a s s I V a t t a c k s a r e u s u a l l y t h e r e s p o n s b i l i t y o f g o v e r n m e n t s .
G i v e n t h e d i v e r s i t y o f w a y s i n w h i c h I W a t t a c k s c a n b e m o u n t e d , c o n c e n t r a t i n g o n e s t a b l i s h e d s e c u r i t y t e c h n i q u e s i s n o t e n o u g h i t w i l l p r o t e c t a g a i n s t h a c k e r s a n d p h y s i c a l D e n i a l o f S e r v i c e a t t a c k s , b u t n o t a g a i n s t v i r u s e s a n d w o r m s o r o t h e r f o r m s o f a t t a c k .
I f a n o r g a n i s a t i o n d e p e n d s o n w e b s i t e s f o r b i l l i n g , n o t i f i c a t i o n s a n d s u p p o r t , l o s i n g t h a t w e b s i t e e v e n t e m p o r a r i l y c o u l d i n f l i c t s i g n i f i c a n t m o n e t a r y l o s s e s .
R e s i s t a n c e t o I W a t t a c k s m u s t b e p l a n n e d f o r f r o m t h e o u t s e t w h e n d e v e l o p i n g a n d p l a n n i n g i n f r a s t r u c t u r e . A t t e m p t i n g t o a d d d e f e n s i v e m e a s u r e s t o p r o d u c t i o n s y s t e m s c a n b e v e r y e x p e n s i v e .
@ 5 w > ~
J y ^ Practioners of IW Technique Malicious hackers and worm/virus writers inflict damage for amusement or peer group approval. They can attack globally.
Hackers, Phrackers and Whackers may steal bandwidth by penetrating networks or manipulating accounts.
Criminals may hack to acquire information, such as credit card numbers, confidential information etc, or threaten DoS attacks to extort money from a victim organisation such as a bank or telco.
Industrial and commercial espionage may be performed to steal proprietary information such as manufacturing techniques for financial gain.
Espionage against government departments, esp police and military, may be performed to gain access to national secrets, operational or technical. Foreign governments or contracted hackers may be involved.
[Info-]Terrorists may perform DoS attacks to promote their cause by inflicting economic or political damage. A car bomb deployed against a stock exchange, national bank, media site or central telephone exchange qualifies as an IW attack.
P t ' z _ @ M o o r e s L a w , B a n d w i d t h L a w v s I W N M o o r e s L a w p r e d i c t s m o n o t o n i c g r o w t h i n c o m p u t i n g p o w e r o v e r t i m e , t h e B a n d w i d t h L a w p r e d i c t s m o n o t o n i c g r o w t h i n n e t w o r k b a n d w i d t h o v e r t i m e . B o t h l a w s a r e w e l l v a l i d a t e d e m p i r i c a l l y [ K o p p ]
R a p i d g r o w t h a n d c o m m o d i f i c a t i o n o f h a r d w a r e a n d s o f t w a r e h a v e d u a l e f f e c t s o n I W :
T h e c o s t o f c o m p u t e r s y s t e m s a n d t o o l s c a p a b l e o f u s e f o r I W d e c l i n e s a n d t h e s e b e c o m e m o r e a v a i l a b l e , g l o b a l l y .
T h e c o s t o f d e f e n s i v e m e a s u r e s a n d e n c r y p t i o n t e c h n o l o g y d e c l i n e s o v e r t i m e , m a k i n g d e f e n s i v e m e a s u r e s m o r e a f f o r d a b l e .
I t i s n e c e s s a r y t o l o o k a t I W a s a n e v o l u t i o n a r y g a m e a s b e t t e r d e f e n s i v e m e a s u r e s a r e c r e a t e d , b e t t e r o f f e n s i v e m e a s u r e s e v o l v e t o o v e r c o m e t h e s e .
S t r a t e g i c p l a n n i n g a n d b u d g e t i n g m u s t a l l o w f o r e v o l u t i o n a r y g r o w t h i n d e f e n s i v e m e a s u r e s t o a c c o u n t f o r i n c r e a s i n g c a p a b i l i t i e s f o r I W o v e r t i m e .
S e n i o r m a n a g e m e n t i n m a n y o r g a n i s a t i o n s m a y n o t a p p r e c i a t e t h e s e i s s u e s a n d w i l l n e e d t o e d u c a t e d , o f t e n d e s p i t e t h e i r r e s i s t a n c e . N Z Z Z , _
\ { ` $ Privacy and Copyright Considerations I n d i v i d u a l p r i v a c y a n d c o r p o r a t e c l i e n t p r i v a c y a r e i m p o r t a n t c o n s i d e r a t i o n s . L e g i s l a t i o n e x i s t s i n m o s t d e v e l o p e d n a t i o n s i n c l u d i n g A u s t r a l i a i n t e n d e d t o p r o t e c t p r i v a c y .
M a n y t y p e s o f I W a t t a c k v i o l a t e p r i v a c y a n d t h e o n u s i s u p o n t h e c a r r i e r o r p r o v i d e r t o p r o t e c t a g a i n s t s u c h a t t a c k s . F a i l u r e t o p r o v i d e p r o p e r p r o t e c t i o n c o u l d s e e a c a r r i e r o r p r o v i d e r c r i m i n a l l y a n d c o m m e r c i a l l y l i a b l e f o r d a m a g e s .
P r i v a c y b e c o m e s c r i t i c a l w h e r e f i n a n c i a l t r a n s a c t i o n s , m e d i c a l r e c o r d s a n d p r i v a t e c o r r e s p o n d e n c e a r e i n v o l v e d .
I f a h a c k e r s t e a l s s u c h i n f o r m a t i o n , h e / s h e m a y n e v e r b e c a u g h t . T h e d a m a g e d p a r t y c o u l d l a u n c h l e g a l a c t i o n a g a i n s t t h e p r o v i d e r o r c a r r i e r o n t h e b a s i s o f i n a d e q u a t e p r o t e c t i v e m e a s u r e s b e i n g i m p l e m e n t e d , o r f i l e c h a r g e s w i t h a l a w e n f o r c e m e n t a g e n c y .
I n s o m e n a t i o n s p r i v a c y v i o l a t i o n i s a u t o m a t i c a l l y c o n s i d e r e d a c r i m i n a l o f f e n s e a n d c a r r i e r s o r p r o v i d e r s a r e h e l d r e s p o n s i b l e .
C o p y r i g h t v i o l a t i o n s a r e a s p e c i a l c a s e s i n c e t h e m a t e r i a l i s a v a i l a b l e t o t h e p u b l i c , b u t i t s d i s t r i b u t i o n i s c o n t r o l l e d . S u c h v i o l a t i o n s h a v e b e c o m e a m a j o r p o l i t i c a l a n d c o m m e r c i a l i s s u e g l o b a l l y , e s p e c i a l l y i n t h e e n t e r t a i n m e n t i n d u s t r y . | P | | a # Copyright and Intellectual Property I l l e g a l o r u n a u t h o r i s e d r e p r o d u c t i o n o f d i g i t a l m a t e r i a l s i s a m a j o r p r o b l e m .
W i t h c h e a p l y a v a i l a b l e n e t w o r k i n g , h a r d d i s k , C D - R a n d D V D b u r n e r t e c h n o l o g y , a l m o s t a n y m a t e r i a l s c a n b e r e p r o d u c e d , o f t e n i n b u l k q u a n t i t i e s , f o r l i t t l e m a t e r i a l e x p e n s e .
T h i s h a s l e d t o t h e g r o w t h o f i l l e g a l p i r a t e i n d u s t r i e s w h i c h s t e a l a n d m a r k e t d i g i t a l m a t e r i a l s , e s p e c i a l l y s o f t w a r e p r o d u c t s , a n d e n t e r t a i n m e n t p r o d u c t s s u c h a s c i n e m a , m u s i c a n d p u b l i c a t i o n s . T h e r e s u l t i s s i g n i f i c a n t l o s s e s t o t h e o w n e r s o f t h e i n t e l l e c t u a l p r o p e r t y i n t h e p r o d u c t s .
W e a k l e g i s l a t i o n i n s o m e n a t i o n s a l l o w s t h e s e t o b e c o m e h a v e n s f o r s u c h i n d u s t r i e s .
I t i s i m p o r t a n t t h a t o r g a n i s a t i o n s c a r e f u l l y a s s e s s t h e o r i g i n s o f a n y d i g i t a l m a t e r i a l s u s e d i n t e r n a l l y t o e n s u r e t h a t t h e s e a r e n o t p i r a t e c o p i e s .
A g o o d e x a m p l e w o u l d b e s o f t w a r e t o o l s u s e d w i t h i n a n o r g a n i s a t i o n . U s i n g p i r a t e d c o p i e s o r u n w i t t i n g l y d i s t r i b u t i n g s u c h m a t e r i a l s o p e n s t h e o r g a n i s a t i o n t o c i v i l l i t i g a t i o n o v e r c o p y r i g h t v i o l a t i o n o r c r i m i n a l c h a r g e s . P P q
L C } b SPAM SPAM is unauthorised and unsolicited distribution of marketing materials via email, in bulk quantities. Spammer violate the privacy of spam recipients.
Spammers will market everything from pornography, discount pharmaceuticals, junk stocks, dubious home loans, consumer products, to pirated software and CD/DVD.
Spam is also used to distribute propaganda on behalf of political and religious movements.
Modern spamming techniques use tools which use digital archives (usually harvested off the web on CD-ROM) of victim addresses, and which usually forge the sender address by using another victim address.
Spam is not illegal in most nations since legislation was injudiciously adopted which does not require prior consent by the recipient when being spammed.
It is likely that anti-spam legislation will be adopted in the developed world over coming years since spam often accounts for a significant fraction of bandwidth used causing economic losses globally. P ~ c Privacy on the Web The internet creates many opportunities for privacy violations.
Many websites use the cookie mechanism to retain state information and identity information. Cookies allow the web server to recognise systems accessing a site. In turn this information can be stored to produce profiles of visitor accesses on a site, and thus divine visitor interests or agendas.
Such information can be used to support marketing activities directed at visitors. An example is a website which uses such statistics to adaptively present advertising material to visitors.
Most web servers collect access statistics which allow operators to track which visitors are making what accesses and when. While this can be used for legitimate purposes, it also allows profiles of specific visitors to be produced.
Cookies and server statistics are usually gathered silently and visitors are unaware of their existence or possible/actual uses.
Website owners often compromise their own privacy by putting materials on websites which are not intended for distribution, but forgetting to disable read access.
Online directories now allow gathering of significant materials on individuals such as addresses, phone numbers, email addresses and other details. While most users are legitimate, criminals and terrorists also have access. Z N d $ Espionage and Intelligence Gathering ` E s p i o n a g e a n d i n t e l l i g e n c e g a t h e r i n g t h e s e c o n d o l d e s t p r o f e s s i o n - h a s a l o n g h i s t o r y . T h e a d v e n t o f d i g i t a l c o m m u n i c a t i o n s h a s m a d e s o m e a s p e c t s o f t h i s c r a f t e a s i e r , a n d s o m e m o r e d i f f i c u l t .
P r a c t i c i o n e r s m a y b e a c t i n g o n b e h a l f o f g o v e r n m e n t s i l l e g a l l y o r a s p a r t o f l a w e n f o r c e m e n t , p o l i t i c a l m o v e m e n t s a n d p a r t i e s , r e l i g i o u s m o v e m e n t s , c o m m e r c i a l o r g a n i s a t i o n s o r i n d i v i d u a l s .
M o s t e s p i o n a g e o r i n t e l l i g e n c e g a t h e r i n g a m o u n t s t o c o v e r t c o l l e c t i
! " # $ % & ' ( + , - . o n o f i n f o r m a t i o n o r m a t e r i a l s w i t h o u t t h e c o n s e n t o r k n o w l e d g e o f t h e v i c t i m .
T h i s c a n b e p e r f o r m e d b y a c o u s t i c e a v e s d r o p p i n g , v i s u a l / v i d e o s u r v e i l l a n c e , e l e c t r o n i c e a v e s d r o p p i n g o f a n a l o g u e o r d i g i t a l c h a n n e l s ( S I G I N T ) , h a c k i n g i n t o c o m p u t e r s ( C y b e r W A R ) , b r e a k i n g i n t o o f f i c e s , f i l i n g c a b i n e t s o r s a f e s ( H U M I N T ) , o r b y u n a u t h o r i s e d r e p r o d u c t i o n o f a c c e s s i b l e m a t e r i a l s ( H U M I N T ) .
W h i l e m o s t i n t e l l i g e n c e g a t h e r i n g a n d e s p i o n a g e i s p e r f o r m e d b y g o v e r n m e n t s a g a i n s t o t h e r g o v e r n m e n t s , i n d u s t r i a l e s p i o n a g e i s a l s o c o m m o n . T h e l a t t e r i s o f i n t e r e s t t o m a n a g e r s s i n c e i t c a n r e s u l t i n s i g n i f i c a n t l o s s e s . T a r g e t i n f o r m a t i o n c a n v a r y f r o m t e c h n i c a l d a t a o n p r o d u c t s o r p r o c e s s e s , t o m a r k e t i n g p l a n s , c o s t i n g i n f o r m a t i o n a n d t e n d e r p r o p o s a l d o c u m e n t s . P P
J C e Surveillance Techniques ^ S u r v e i l l a n c e c a n b e p e r f o r m e d u s i n g a c o u s t i c ( m i c r o p h o n e b u g s o r p h o n e t a p ) , v i s u a l ( f i l m o r v i d e o c a m e r a ) o r e l e c t r o n i c ( r a d i o / m o b i l e p h o n e / w i r e l e s s n e t w o r k ) i n t e r c e p t s .
I n m o s t n a t i o n s s u r v e i l l a n c e i s o n l y l a w f u l i f p e r f o r m e d b y a l a w e n f o r c e m e n t o r i n t e l l i g e n c e a g e n c y i e g o v e r n m e n t e n t i t i e s .
C o m m e r c i a l o p e r a t o r s a r e u s u a l l y p e r m i t t e d t o u s e v i d e o s u r v e i l l a n c e o f p u b l i c l y a c c e s s i b l e a r e a s i e b a n k s , A T M s , c a r p a r k s , f o y e r s e t c .
A n l a r g e s c a l e e x a m p l e o f s u c h s u r v e i l l a n c e i s t h e C C T V n e t w o r k i n L o n d o n u s e d t o a p p r e h e n d t e r r o r i s t s a f t e r t h e r e c e n t a t t e m p t s t o b o m b p u b l i c t r a n s p o r t .
L a w e n f o r c e m e n t a g e n c i e s r e l y h e a v i l y o n a c o u s t i c a n d v i s u a l s u r v e i l l a n c e t o g a t h e r i n t e l l i g e n c e o r e v i d e n c e .
M a n a g e r s n e e d t o b e a w a r e o f t h e p o t e n t i a l f o r u n l a w f u l s u r v e i l l a n c e a n d p l a n i n f r a s t r u c t u r e t o m a k e i t d i f f i c u l t t o p e r f o r m .
C o u n t e r - s u r v e i l l a n c e t e c h n o l o g i e s m a y b e i l l e g a l i n s o m e n a t i o n s f o r i n s t a n c e v o i c e s c r a m b l e r s f o r t e l e p h o n e l i n k s . Z > y f L S I G I N T / C O M I N T S i g n a l s / C o m m u n i c a t i o n s : T h e i n t e r c e p t i o n o f r a d i o s i g n a l s a n d c o m m u n i c a t i o n s h a s b e e n p r a c t i c e d s i n c e t h e a d v e n t o f w i r e l e s s c o m m u n i c a t i o n s . I t i s m o s t l y p r a c t i c e d b y t h e m i l i t a r y a n d l a w e n f o r c e m e n t d u e t o t h e c o s t o f t h e c o m p l e x e q u i p m e n t r e q u i r e d .
T h e a d v e n t o f c h e a p r a d i o s c a n n e r s h a s o p e n e d u p o p p o r t u n i t i e s f o r i n d i v i d u a l s a n d o r g a n i s a t i o n s t o i n t e r c e p t u n e n c r y p t e d o r u n s c r a m b l e d w i r e l e s s v o i c e t r a f f i c .
I n t e r c e p t s m a y b e t a r g e t e d , i e a s i n g l e i n d i v i d u a l o r s i t e i s m o n i t o r e d o n a s p e c i f i c c h a n n e l , o r t h e y m a y b e p e r f o r m e d e n m a s s e b y r e c o r d i n g s w a t h s o f t h e r a d i o s p e c t r u m f o r l a t e r s e m i - a u t o m a t e d o r m a n u a l a n a l y s i s b y h u m a n o p e r a t o r s .
W i r e l e s s c h a n n e l s w i t h o u t s t r o n g e n c r y p t i o n m u s t b e t h e r e f o r e c o n s i d e r e d i n s e c u r e a n d s h o u l d n e v e r b e u s e d t o t r a n s m i t i n f o r m a t i o n w h i c h i s s e n s i t i v e e i t h e r f r o m a p r i v a c y p e r s p e c t i v e , c o m m e r c i a l p e r s p e c t i v e , o r w h e r e s e n s i t i v e g o v e r n m e n t t r a f f i c i s i n v o l v e d . G S M m o b i l e p h o n e s a r e a g o o d e x a m p l e .
, 8
] g Network Sniffers 2 N e t w o r k s n i f f e r s a r e a v i t a l t o o l f o r l e g i t i m a t e t r a f f i c a n a l y s i s a n d n e t w o r k m a i n t e n a n c e t a s k s . T h e y c a n a l s o b e u s e d t o p e r f o r m l a w f u l a n d u n l a w f u l s u r v e i l l a n c e a n d m o n i t o r i n g o f s p e c i f i c u s e r s o r s i t e s o n a n e t w o r k .
A s n i f f e r i s a s o f t w a r e / h a r d w a r e d e v i c e w h i c h c o l l e c t s a n d d e c o d e s n e t w o r k p a c k e t s , a n d c a n o f t e n r e a s s e m b l e t r a f f i c f l o w s .
N e t w o r k p r o t o c o l s w i t h w e a k o r a b s e n t e n c r y p t i o n w i l l a l l o w t h e u s e r o f a s n i f f e r t o c o l l e c t a c c o u n t s / p a s s w o r d i n f o r m a t i o n , e m a i l t r a f f i c , f i l e t r a n s f e r s a n d w e b t r a f f i c .
S n i f f e r s w i t h w i r e l e s s n e t w o r k i n t e r f a c e s a l l o w p e n e t r a t i o n o f w i r e l e s s n e t w o r k s w i t h o u t h a v i n g p h y s i c a l a c c e s s t o a n e t w o r k p o r t o r c a b l e .
N e t w o r k p l a n n i n g n e e d s t o a c c o u n t f o r u n l a w f u l s u r v e i l l a n c e b y u s e r s o f s n i f f e r e q u i p m e n t . A c t i v e n e t w o r k p o r t s i n p u b l i c l y a c c e s s i b l e a r e a s a r e n o t a c c e p t a b l e , a n d w i r e l e s s c h a n n e l s m u s t u s e t h e s t r o n g e s t a v a i l a b l e e n c r y p t i o n t e c h n i q u e s .
I n s i d e r a t t a c k s b y s t a f f u s i n g s n i f f e r s o f t w a r e o n i n t e r n a l s y s t e m s a r e a r e a l p o s s i b i l i t y . S u p e r u s e r a c c e s s o n c o m p u t e r s s h o u l d b e c a r e f u l l y c o n t r o l l e d .
P Z 6 6 h Van Eck Radiation \ V a n E c k r a d i a t i o n i s d e f i n e d a s U n i n t e n d e d E m i s s i o n s ( U E ) i n t h e r a d i o - f r e q u e n c y b a n d s .
C o m p u t e r m o n i t o r s a n d t o a l e s s e r e x t e n t k e y b o a r d o r p o o r l y i m p e d a n c e m a t c h e d n e t w o r k c a b l e s w i l l r a d i a t e s i g n a l s a s a r e s u l t o f t h e d i g i t a l o r a n a l o g u e m o d u l a t i o n s t h e y a r e c a r r y i n g .
S p e c i a l i s e d r e c e i v e r s c a n b e u s e d t o c o l l e c t U E t h e t y p i c a l e x a m p l e c i t e d i s e q u i p m e n t w h i c h c a n r e c o n s t r u c t w h a t i s b e i n g d i s p l a y e d o n a c o m p u t e r m o n i t o r f r o m o u t s i d e t h e b u i l d i n g h o u s i n g t h e c o m p u t e r .
U E s u r v e i l l a n c e a n d i n t e l l i g e n c e g a t h e r i n g i s e x p e n s i v e a n d u s u a l l y l i m i t e d t o g o v e r n m e n t s a n d l a w e n f o r c e m e n t .
T h e U S N A C S I M 5 0 0 0 T e m p e s t s e r i e s o f s t a n d a r d s d e f i n e s d e s i g n s p e c i f i c a t i o n s a n d t e c h n i q u e s f o r c o m p u t e r e q u i p m e n t t o p r e v e n t t h e e m i s s i o n o f V a n E c k r a d i a t i o n .
M a n a g e r s i n g o v e r n m e n t o r g a n i s a t i o n s n e e d t o u n d e r s t a n d t h e r i s k s a r i s i n g f r o m U E a n d e n s u r e t h a t c o m p u t e r e q u i p m e n t u s e d f o r c l a s s i f i e d o r h i g h l y s e n s i t i v e m a t e r i a l i s s u i t a b l e f o r s u c h u s e .
Z ,
m ) Psychological Warfare (Psywar) Techniques
P s y w a r i s u s e d m o s t f r e q u e n t l y i n w a r t i m e ( r a d i o / l e a f l e t s ) , b u t i s o f t e n s e e n i n c o m m e r c i a l o r p o l i t i c a l m a s s m e d i a a d v e r t i s i n g .
P s y w a r t e c h n i q u e s a i m t o a m p l i f y e x i s t i n g a n x i e t i e s i n a t a r g e t / v i c t i m p o p u l a t i o n t o d i s r u p t t h e i r b e h a v i o u r , a n d d i s r u p t t h e c o h e s i o n o f a n o r g a n i s a t i o n o r g r o u p .
A p r e r e q u i s i t e f o r s u c c e s s f u l P s y o p s i s t h a t t h e t a r g e t o r v i c t i m p o p u l a t i o n h a s a n e x i s t i n g a n x i e t y o r p r e j u d i c e o v e r s o m e i s s u e .
S t a t e m e n t s o r c l a i m s w h i c h r e i n f o r c e s u c h a n x i e t i e s o r p r e j u d i c e s w i l l p r o d u c e d i s t r e s s o r a n g e r i n t h e v i c t i m p o p u l a t i o n .
E x a m p l e s a r e p o l i t i c a l a d v e r t i s i n g e m p h a s i s i n g i s s u e s l i k e j o b l o s s e s o r i n t e r e s t r a t e i n c r e a s e s , o r c o m m e r c i a l a d v e r t i s i n g p o i n t i n g o u t b u g s o r v u l n e r a b i l i t i e s i n c o m p u t e r p r o d u c t s . C o m m e r c i a l f o o d s t u f f a d v e r t i s i n g a l l e g i n g w e i g h t g a i n s , c a n c e r o r h e a r t d i s e a s e a l s o q u a l i f i e s a s P s y w a r .
T h e i n t e r n e t a n d m a s s m e d i a a r e t h e p r e f e r r e d c h a n n e l s f o r P s y w a r a t t a c k s .
M o s t n a t i o n s h a v e i n a d e q u a t e l e g i s l a t i o n r e g u l a t i n g t h i s a r e a .
Z { ] ! * = K n
Censorship Censorship is a mechanism used to control access to information. It typically involves denying access or punitive criminal legislation intended to deter distribution.
In developed nations censorship is mostly directed at entertainment products with explicit or violent content. In wartime censorship is used to deny an opponent knowledge of sensitive developments. Many nations apply political censorship to control public and political debate. Internet censorship exists in some nations to deny access to a wide range of materials not deemed suitable for public access.
Censorship is a double edged sword, since it can increase the attractiveness of the censored material to a potential audience.
Censorship remains a controversial issue in Western democracies since the criteria used to determine exclusion are often difficult to achieve consensus on.
Managers operating in a global market or across national boundaries need to be sensitive to censorship legislation since criminal law is often used to enforce it. Z o # Hacking, Cybercrime, Cyberwar (HCC) ,
0 H a c k i n g i s t h e t e r m u s e d t o d e s c r i b e u n a u t h o r i s e d a c c e s s t o c o m p u t e r s y s t e m s . T h e t e r m o r i g i n a l l y a p p l i e d t o p r o g r a m m e r s w h o w o r k e d o n o p e r a t i n g s y s t e m k e r n e l s b u t t h e m e d i a a n d e n t e r t a i n m e n t i n d u s t r i e s p o p u l a r i s e d t h e c u r r e n t l y a c c e p t e d u s e o f t h e t e r m .
C y b e r c r i m e i s t h e u s e o f h a c k i n g t e c h n i q u e s t o c o m m i t c r i m i n a l o f f e n c e s , u s u a l l y t h e f t o f m o n e y o r i n t e l l e c t u a l p r o p e r t y .
C y b e r w a r i s t h e u s e o f h a c k i n g t e c h n i q u e s t o p e r f o r m d e n i a l o f s e r v i c e a t t a c k s o r i n t e l l i g e n c e g a t h e r i n g f o r p o l i t i c a l o r m i l i t a r y p u r p o s e s .
H C C r e l i e s o n p o o r p a s s w o r d s e c u r i t y a n d s e c u r i t y h o l e s i n c o m p u t e r o p e r a t i n g s y s t e m s .
P h r a c k i n g ( P h o n e H a c k i n g ) i s h a c k i n g i n t o t e l e p h o n e n e t w o r k s m o s t l y t o s t e a l b a n d w i d t h .
W h a c k i n g ( W i r e l e s s H a c k i n g ) i s h a c k i n g i n t o w i r e l e s s n e t w o r k s m o s t l y t o s t e a l b a n d w i d t h .
H a c k i n g r e m a i n s a c o n t r o v e r s i a l i s s u e . I n m o s t d e v e l o p e d n a t i o n s i t i s a c r i m i n a l o f f e n c e , f r e q u e n t l y p u n i s h e d b y l o n g j a i l t e r m s . P b % )
r , p * Techniques for Gaining Unauthorised Access A w i d e r a n g e o f t e c h n i q u e s e x i s t f o r h a c k i n g i n t o c o m p u t e r s y s t e m s .
P a s s w o r d s m a y b e s t o l e n b y s n i f f i n g , o r b y e n t e r i n g o f f i c e s a n d r e a d i n g p a p e r n o t e s . P a s s w o r d s m a y a l s o b e g u e s s e d u s i n g r o b o t s , o r p u r c h a s e d f r o m u n e t h i c a l s t a f f m e m b e r s . U n s e c u r e d t e r m i n a l s l e f t l o g g e d i n m a y b e e x p l o i t e d .
T r o j a n h o r s e o r b a c k d o o r e n t r y c o d e m a y b e i n s e r t e d i n t o s y s t e m s w h e r e a h a c k e r h a s a c c e s s t o t h e o r i g i n a l s o u r c e c o d e .
S o p h i s t i c a t e d a t t a c k e r s m a y p e r f o r m i d e n t i t y s p o o f i n g b y r e p l a c i n g r e a l n e t w o r k p a c k e t s w i t h s u b s t i t u t e s .
S e c u r i t y h o l e s i n s o m e n e t w o r k a p p l i c a t i o n s m a y p e r m i t r e m o t e e n t r y b y d r i v i n g t h e a p p l i c a t i o n w i t h m e s s a g e s k n o w n t o e x p o s e t h e v u l n e r a b i l i t y .
S o f t w a r e t o o l s d e v e l o p e d f o r s e c u r i t y t e s t i n g o f n e t w o r k s c a n a l s o b e u s e d t o e x p o s e s e c u r i t y h o l e s f o r u n a u t h o r i s e d e n t r y .
R o b u s t f i r e w a l l i n g a n d s y s t e m s e c u r i t y a u d i t s a r e e s s e n t i a l t o p r o t e c t a g a i n s t u n a u t h o r i s e d s i t e e n t r i e s .
Z > = q Viruses and Worms o Viruses are malicious programs which embed themselves in file systems, operating systems or applications upon which they propagate themselves via removable storage media or networks to other systems.
Viruses may be benign or destructive in effect, and can be used to compromise security by propagating password files or email address lists.
Worms are malicious programs which consume system resources to the point where a system becomes unusable.
Highly integrated mailer and word processor programs are the most common targets of viruses and worms since they permit easy entry and propagation between systems. Some proprietary systems are considered the most vulnerable, cf Linux, BSD and commercial Unix systems.
Managers and strategic planners need to be sensitive to risks which may arise from using some commodity software products known to be susceptible to such attacks. p Z p r Identity Theft and Fraud I d e n t i t y t h e f t i s a n i n c r e a s i n g p r o b l e m i n t h e c o m p u t e r a n d c o m m u n i c a t i o n s i n d u s t r y .
T h e s i m p l e s t e x a m p l e s i n v o l v e t h e f t o f m o b i l e p h o n e s a n d c r e d i t c a r d s f o r p r o f i t .
S p a m m e r s t o d a y m o s t l y f o r g e r e t u r n a n d s e n d e r e m a i l a d d r e s s e s b y u s i n g a d d r e s s e s o f o t h e r s p a m v i c t i m s h e l d i n d i g i t a l a r c h i v e s .
I n t e r n e t n e w s g r o u p s h a v e a l s o s e e n i d e n t i t y t h e f t s w h e r e h o a x e r s p r e t e n d t o b e a c t u a l o r f i c t i o n a l p e r s o n s . A n e x a m p l e w a s a h o a x e r o n r e c . a v i a t i o n . m i l i t a r y i m p e r s o n a t i n g a r e t i r e e , w h o w a s a c t u a l l y b e d r i d d e n i n a n u r s i n g h o m e s u f f e r i n g f r o m s e v e r e s t r o k e i m p a i r m e n t .
V a l i d a t i o n o f s u b s c r i b e r i d e n t i t y f o r w e b a c c e s s i b l e s e r v i c e s c a n p r e s e n t g e n u i n e i s s u e s , e s p e c i a l l y w h e r e s i t e s a r e u s e d t o e f f e c t f i n a n c i a l t r a n s a c t i o n s .
B o g u s w e b s i t e s s e t u p t o v i s u a l l y e m u l a t e a c t u a l b a n k w e b s i t e s h a v e b e e n u s e d t o s t e a l e l e c t r o n i c b a n k i n g p a s s w o r d s , i n t u r n t o f r a u d u l e n t l y a c c e s s a c c o u n t s .
N i g e r i a n s c a m s i n v o l v i n g i m p e r s o n a t i o n s a r e n o w o f e p i d e m i c p r o p o r t i o n s i n t h e s p a m m e r c o m m u n i t y .
P s & Denial of Service Attacks vs Extortion t D e n i a l o f S e r v i c e a t t a c k s c a n b e u s e d a s a t o o l t o e x t o r t m o n e y f r o m v i c t i m s .
O r g a n i s a t i o n s w h i c h r e l y o n u n i n t e r r u p t e d c o m p u t e r o p e r a t i o n t o e f f e c t f i n a n c i a l t r a n s a c t i o n s , o r w h i c h r e l y o n w e b s e r v e r s f o r c l i e n t a c c e s s , a r e t h e m o s t c o m m o n t a r g e t s o f s u c h a t t a c k s .
T h e a t t a c k e r w i l l c a u s e r e p e a t e d s e r v i c e l o s s a n d t h e n e x t o r t m o n e y b y p r o m i s i n g t o c e a s e a t t a c k s .
C y b e r a t t a c k s - a s t h e a t t a c k e r m a y b e l o c a t e d o n a n o t h e r c o n t i n e n t , i n a n a t i o n w i t h w e a k o r a b s e n t c y b e r c r i m e l e g i s l a t i o n , m a j o r p r o b l e m s a r i s e w i t h i d e n t i f y i n g t h e a t t a c k e r , a n d w i t h p r o s e c u t i n g t h e a t t a c k e r .
R a d i o - f r e q u e n c y / e l e c t r i c a l a t t a c k s t h e a t t a c k e r w i l l b e g e o g r a p h i c a l l y l o c a l b u t m a y n o t l e a v e a d e t e c t a b l e s i g n a t u r e o r f o o t p r i n t p e r m i t t i n g l a w e n f o r c e m e n t t o a p p r e h e n d o r p r o s e c u t e .
U s u a l l y D o S e x t o r t i o n i s t s p r e y o n o r g a n i s a t i o n s w i t h p o o r e x p e r t i s e l e v e l s i n c o m p u t e r / n e t w o r k a d m i n i s t r a t i o n a n d s e c u r i t y .
I n g e n e r a l D o S a t t a c k s c a n b e d i f f i c u l t t o p r o v e a n d p r o s e c u t e .
B Z m
$ V b N
w
*
X 3 t Tutorial Q & A
Case Studies Discussion/ / r
t ?
,
! " # $ % & ' ) ՜. +,D ՜. +,
p On-screen Show Monash Uni. 3 A
Arial Times New Roman
Wingdings Arial Black Pixel J CSE468 Information Conflict Lecturer: Dr Carlo Kopp, MIEEE, MAIAA, PEng Reference Sources Taxonomy of IW Categories Denial of Service Attacks Offensive vs Defensive IW Practioners of IW Technique ! Moores Law, Bandwidth Law vs IW % Privacy and Copyright Considerations $ Copyright and Intellectual Property SPAM Privacy on the Web % Espionage and Intelligence Gathering Surveillance Techniques ' SIGINT/COMINT Signals/Communications Network Sniffers Van Eck Radiation * Psychological Warfare (Psywar) Techniques Censorship $ Hacking, Cybercrime, Cyberwar (HCC) + Techniques for Gaining Unauthorised Access Viruses and Worms Identity Theft and Fraud ' Denial of Service Attacks vs Extortion Tutorial Fonts Used Design Template
Slide Titles 8 @ _PID_HLINKS A l 0 @ h t t p : / / w w w . c s . g e o r g e t o w n . e d u / ~ d e n n i n g / c o s c 5 1 1 / f a l l 0 2 / i n d e x . h t m l # h t t p : / / d e v o s t . t y p e p a d . c o m / c o s o 5 1 1 / ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 1 2 9 6 . h t m l ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 9 7 . h t m l ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 2 0 0 . h t m l ) h t t p : / / w w w . a u s a i r p o w e r . n e t / O S R - 0 3 0 0 . h t m l ( h t t p : / / w w w . a u s a i r p o w e r . n e t / m o o r e - i w . p d f 0 h t t p : / / w w w . a u s a i r p o w e r . n e t / _ J I W - 2 0 0 2 - 1 - C K - S . p d f