Exploiting Weakness by Phil Robinson, Professional Hacker

1. Securing Your
Business in
the Digital
Age
Phil Robinson, (Ethical!) Professional Hacker
HACKER VIEW:
Exploiting Weakness

2. About Me
Experienced Professional Hacker […security consultant!], working in the industry for over 15
years
Delivered penetration tests, security reviews and consultancy engagements to UK Government,
public sector, global companies to SMEs
CESG Certified Professional (Security and Information Risk Advisor and IA Architect)
Tigerscheme Senior Security Tester (Infrastructure & Applications)
Assisted with the development of security testing standards and certifications in the United
Kingdom
Delivered or managed thousands of security assessments and consultancy projects
2

3. Who Were You Expecting?
3

4. Who Were You Expecting?
4

5. Surely Not… (no ‘hoodies’)
5

6. What Were You Expecting?
6

7. Or…
7

8. Or Perhaps…
8

9. Hackers United…
…by common traits:
Wish to learn more about their discipline, develop knowledge
Desire to make something do something unintended
Lateral thinking
Patience & persistence
To make money! £££
9

10. Phishing
10

11. Don’t Click That Link!
11

12. Vishing
12

13. Cryptolocker
13

14. Enterprise Attacks
14

15. What Do Cyber Criminals Want From You?
Money… from:
Extortion & blackmail
Procuring or selling your assets
(business plans, IPR, blueprints etc)
Selling information you hold (target
lists, credit card numbers, identities)
15

16. What Do Cyber Criminals Want From You?
Fame, ‘Lulz’… and making a point:
Defacement
Hacktivism
Exert influence on a target (e.g. Sony)
16

17. DANGER: DO NOT Feed The Hackers!
Too much exposure to the Internet
Weak network architectures
Lack of risk management around the cloud
Organisational information leakage
Lack of staff cyber security awareness
Insufficient monitoring of events
17

18. Thank You!
Contact:
phil.robinson@prisminfosec.com
https://www.prisminfosec.com
@Phil_R0binson
18

19. Securing Your
Business in
the Digital
Age
Securing Your Business in the Digital Age
Cabinet War Rooms, 14th October 2015