Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Saturday, 4 February, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

How to spot a hacker – and how not to grown your own hackers

by The Gurus
July 21, 2015
in Editor's News
Hacker
Share on FacebookShare on Twitter

Hackers come in many shapes and forms. Many of them are located thousands of miles away working for criminal gangs, or even as part of some state-sponsored army bent on stealing your secrets. Those remote hackers will always be there, and you will never come into physical contact with them.
But there are also the hackers who wheedle their way into your organisation and undermine your security from the inside. They are potentially the more dangerous, because they work inside your firewalls. However, they are also the people you have some chance of identifying and stopping – if you know what to look for.
IT Security Guru collected a group of people whose job it is to do just this, and asked them to give their advice to our readers.
This is a flavour of what they said…..
Jenny Radcliff, who specialises in penetration testing, observed that many malicious insiders begin as normal employees, but slowly become disenchanted with the organisation and it treats them. “Organisations end up growing their own hackers,” she said. “They have employees who are not fans of the company itself, and even if these employees don’t become hackers themselves, they will feel no obligation to resist a hacker.”
She said that organisations needed to work harder to show their appreciation for their workers, and listen to their complaints. “People will complain and they will want it unload about what they think is wrong. If you allow them to do that, it can stop resentment building up,” she said.
Peter Wood, chief executive of FirstBase Technologies, is also an experienced penetration tester. He said that some employees turn rogue when trust breaks down between them and their employers. Once that happens, they may either try to damage the organisation, or make little effort to defend it from attack.
The experts also explained how they go about their pentesting exercises, and revealed some of their tricks of the trade.
Neil Hare-Brown, CEO of STORM Guidance, said he was amazed at companies that took the view that “We’ve got it covered”, because that betrayed a level of arrogance which made those very organisations open to threat.
He explained that by looking through publicly available information – such as LinkedIn, Facebook, 192.com and so on – it was easy to steal an identity and begin fraudulent activity. He said companies were often very shocked to see how easy it was to gather the information together.
Peter Wood revealed that ‘helplessness’ had worked very well for him in extracting information from companies during pentests. For example, he might call a helpdesk sounding in a panic and in need of some information to get a very urgent job done quickly. Within 20 minutes, he said he usually gathered the information he needed to gain access to systems.
He said he also sometimes wears a buttonhole camera to record his conversations with people as he talks his way through security, in order to prove how easy it can be. “There are some devious sods out there, and so I have to show them what they are up against,” he said.
Jenny Radcliff said she employed four factors – fear, flattery, greed and timing (eg just before Christmas, or summer holidays) – to get through security in companies and to get the information she wanted. “I never have to use technology, I just use human factors to get what I want,” she said.
The lesson from them all was that security awareness is not enough. For security to be effective, employees need to be motivated to protect the organisation and their fellow workers. Low morale or unresolved grievances can sow the seed for malicious actions, or make those employees prime targets for hackers.
All three pentesters also encouraged a culture of openness in organisations. “Don’t have a blame culture,” said Neil Hare-Brown. “If something bad happens, encourage people to report it so everyone can learn from the experience.”
The panel of experts were speaking at the IT Security Guru CISO Debate, which took place in June.

FacebookTweetLinkedIn
Tags: Cyber SecurityHackHackerhackinginfosecit securitypen tester
ShareTweetShare
Previous Post

Can there be a winner in the Crypto Wars?

Next Post

Anonymous Crashes the Mounties' Website

Recent News

london-skyline-canary-wharf

Ransomware attack halts London trading

February 3, 2023
Ransomware conversations: Why the CFO is pivotal to discussing and preparing for risk

Ransomware conversations: Why the CFO is pivotal to discussing and preparing for risk

February 2, 2023
JD Sports admits data breach

JD Sports admits data breach

January 31, 2023
Acronis seals cyber protection partnership with Fulham FC

Acronis seals cyber protection partnership with Fulham FC

January 30, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information