>> In this section, we're going to
start talking about attacks.
There are so many different types
>> of attacks out there,
>> network attacks, malware attacks.
It really helps to break them down
>> and look at the different types,
>> so that way we know how to mitigate them.
Our agenda is as follows.
We're going to start by talking
about the types of attackers,
and we'll look at the types of attacks.
Knowing the attackers and types of attacks,
and the motivations for them
>> will be helpful for us.
>> We'll look at the different attack vectors,
areas from which these attacks come.
We'll talk about their payloads,
we'll look at network-based attacks,
attacks on passwords, wireless attacks,
and then application attacks.
Now, we'll talk about types of attackers.
The term hacker was originally a positive term,
and then it became negative,
and now it's become positive again.
People talk about having life hacks,
>> and that's a good thing.
>> People who do hacks have found
>> clever ways to do things,
>> and that's the way the term hacker
>> was viewed in relation to computer skills.
>> But then, it became negative in meaning.
Technically, a hacker is someone
>> who's extremely skilled,
>> and then attacker is someone with malicious intent.
Under the category of hackers,
a white hat hacker is an ethical hacker.
It's also synonymous with a pen tester.
A black hat hacker is someone
who hacks with malicious intent,
usually for personal gain.
A gray hat hacker is somewhere in the middle.
Sometimes, you'll hear about somebody
who takes a new release of software,
and then they hack it to see
>> if there are any vulnerabilities.
>> If there are, they contact the software vendor
>> and inform them of the vulnerabilities,
>> and suggest that they fix them.
But if the vendor ignores it
and doesn't act upon that warning,
then the gray hat releases
that information to the public
by posting it on the Internet,
and then that leads to malicious activity.
Script Kiddies as a derogatory term.
It means someone with no real skills,
someone who copies and paste scripts
>> and runs basic scripts,
>> but doesn't understand what they are doing.
The thing about Script Kiddies
>> is that they can be dangerous,
>> because they don't know what they are doing,
>> and don't understand the potential damage
>> they could cause.
>> Hacktivists are people who perform hacking
>> in order to serve a political or social agenda.
>> You may have heard of some of them,
like Anonymous and LulzSec.
During the 2016 US election,
there were some hacktivist attacks
>> to protest the way the founder
>> of WikiLeaks was being treated.
>> For example, the Democratic National
>> Committee was hacked.
>> State-sponsored attacks in cyber warfare are real,
and it's incredibly critical that we defend
ourselves and our nation's secrets,
and our power grids, and water supplies, etc.
Much of that is controlled by
computer systems that can be
attacked in state-sponsored attacks.
We've also seen the reports about
Russia interfering with our elections.
These are things that we want to take really seriously.
When we talk about state-sponsored attacks,
these are usually attacks
called advanced persistent threats.
The attackers have plenty of time.
If they don't find what they want today,
then they can wait until next week,
or next month, or next year.
They often have pretty high-end sophisticated tools,
and they just keep chipping away
until they have what they are looking for.
Do not underestimate the power of internal threats.
Eighty percent of all fraud is initiated
>> from within an organization,
>> and two-thirds of security-related
incidents are unintentional.
We've got the potential
>> for malicious attackers inside the organization.
>> But we also have people with no ill intent
>> who accidentally delete files,
>> or modify records,
or give out too much information on the phone.
There are so many security incidents
that have no malicious intent,
and we've got to protect those too.
When we're talking about fraud,
we have to think about the principle
>> of least privilege.
>> Just give people the bare minimum
to do what they need to do.
Use need to know,
so that only people who have
>> a specific need for data
>> have access to that data.
>> Separations of duties is huge in preventing fraud.
Make sure no one is unchecked.
We always want to make sure no one
has too much power in the network.
Good policies, background checks,
those are the things are going to be
the best way to mitigate internal threats.