Peter Shipley, a renowned - and reformed - hacker, and more recently the founder of Network Security Associates a security consulting business in Berkeley, California, offered his own intimate view of what types of hacks are most common today, and what can be done to defend against them.

Shipley said that malicious hacks can be classified into four categories: disclosure of information, such as theft of credit card numbers; destruction of data, which can be an act of economic terrorism; alteration of data, such as grade fixing; and denial-of-service attacks, including SYN floods and smurfing. The motivation for such attacks ranges from financial to revenge to peer respect, Shipley said.

Shipley and the other panelists for the "Net Hacks and Defenses" discussion attributed the lack of security in computer networks to disbelief, laziness, and overconfidence. Free Web-based email services are a classic example of a network vulnerability, he said.

"All of your Hotmail is readable by the world," said Shipley, introducing the topic of sniffers, one of the fundamental tools used to monitor and intercept data over a network. He then presented a list of protocols that can be exploited using hacking tools: telnet, http, SNMP, SNTP, POP, FTP, and many other baseline standards used to send email, files, and other communications over the Net and computer networks.
1 Comment   Add this link to...  Tell a friend   Bury

Comments Who Voted Related Links