110 likes | 492 Views
Ethical hacking Is all hacking created equal?. Craig Rimando Luke White. Introduction. “hacking” - negative connotation Not always that way Originally a compliment Not all hacking necessarily bad “Good” hacking? Ethical hacking?. The dark side. “Bad” hacking groups Anonymous
E N D
Ethical hacking Is all hacking created equal? Craig Rimando Luke White
Introduction • “hacking” - negative connotation • Not always that way • Originally a compliment • Not all hacking necessarily bad • “Good” hacking? Ethical hacking?
The dark side • “Bad” hacking groups • Anonymous • Lulzsec • Black hat hackers • DoS /DDoS • Identity Theft • Website Defacement • Leaking Incriminating or Personal Information • Viruses / Worms
Is all hacking bad? • Is there a grey area? • Honorable or benign motivations • Protect computer networks • Deter hackers from hacking in the future • Should any form of hacking be permitted? • Counter hacking • Certified ethical hacking • Clipper chip
Counter hacking • Pre-emptive or reactionary response to a hacking attack • Ethical Worms • Sovereignty over own computer but not the Internet • For the greater good • Self-Defense • Innocent Third Party • Who is in control • Identify other victims • Find the origin or next hop point • Jerome Heckenkamp case
Certified ethical hackers • Some company’s are founded on beneficial hacking • Security Explorations • “providing various services in the area of security and vulnerability research” • Discovered and reported numerous Java bugs • Billions of users at risk • EC-Council • Offers a professional certification – Certified Ethical Hacker • Employed by company, penetrate networks like a hacker • Purpose: find & fix security vulnerabilities
Clipper Chip • Discussed and developed 1990’s government plan • Installed in electronic communication with unique government encryption • Only government could decrypt • Valid warrant needed for each tap • Same longstanding law as for wire taps • Downside: Some people feared government would abuse its power • Upside: monitor known criminals and terrorists • Decrease the amount of crime – deter criminal activity • Increase the government’s ability to fight crime
Conclusion • Not all hacking is necessarily bad. • Some can be ethically justified • Intended to protect users / public • Deter future attacks • Find security flaws/ Code innovations • Infringe on privacy rights?