Cybercrime and Espionage: An Analysis of Subversive Multi-Vector Threats

Front Cover......Page 1
Cybercrime and Espionage An Analysis of SubversiveMultivector Threats......Page 4
Copyright......Page 5
Contents......Page 6
Foreword......Page 10
Preface......Page 12
About the authors......Page 16
Acknowledgements......Page 14
Introduction......Page 17
He Who Does Not Prevent a Crime When He Can, Encourages It......Page 18
What's Old Is New Again......Page 19
A Changing World......Page 23
Cybercriminal Statistics: U.S. and Abroad......Page 24
The Statistics of Cybercrime......Page 25
Separating the Wheat from the Chaff: Qualifying Amateurs and Professionals......Page 26
Trends in 2011......Page 29
Myopic to the Catastrophic: Advanced Persistent Threats......Page 32
Points of Confluence: Events That Have Shaped the Future of Privatized Cybercrime and Espionage......Page 34
The Coming Decade......Page 35
Summary......Page 36
Communication......Page 37
Criminal Activity......Page 43
Summary......Page 49
Introduction......Page 51
Transborder Data Flow Restrictions......Page 52
ISO Security Standards......Page 56
Health Insurance Portability and Accountability Act (HIPAA)......Page 57
Family Education Rights and Privacy Act (FERPA)......Page 58
Payment Card Industry Data Security Standard (PCI DSS)......Page 59
North America Electric Reliability Corporation: Critical Infrastructure Protection (NERC CIP)......Page 61
Summary......Page 62
References......Page 63
Introduction......Page 65
Environmental Security......Page 66
The Silos of Security......Page 68
Two-Factor Authentication......Page 70
Converging the Great Physical Divide......Page 73
Physical Device Security (Cryptography)......Page 75
Proximity-Based Access Control......Page 77
Summary......Page 78
References......Page 79
Asymmetric Forms of Information Gathering......Page 81
Blended Reconnaissance......Page 82
Social Engineering and Social Networking......Page 84
Point, Click, and Own......Page 89
References......Page 95
Introduction......Page 97
Espionage and Its Influence on Next-Generation Threats......Page 98
Intelligence Types......Page 107
Traditional Forms of Intelligence Gathering......Page 112
Summary......Page 129
Introduction......Page 131
Classifying the Cyber Actor......Page 132
Attack Sophistication Model......Page 133
Modus Operandi......Page 136
The Importance of Attribution......Page 137
Criminal and Organized Syndicates......Page 139
Nation States......Page 143
Subnational Entities......Page 144
Summary......Page 147
References......Page 148
Sun Tzu and The Art of War......Page 151
Defining the Subversive Multivector Threat (SMT)......Page 155
Summary......Page 166
Seven Commonalities of Subversive Multivector Threats......Page 169
Five Names in Threats You Should Know......Page 177
Next-Generation Techniques and Tools for Avoidance and Obfuscation......Page 189
Summary......Page 190
References......Page 191
Introduction......Page 193
Black, White, and Gray: Motives and Agendas of Cyber Actors with Respect to Cybercrime and Espionage......Page 194
Onion Routed and Anonymous Networks......Page 202
WikiLeaks......Page 207
Project Aurora......Page 211
Summary......Page 212
Introduction......Page 213
Malware Quality Assurance Testing......Page 214
IP Attribution......Page 227
IP Spoofing......Page 233
References......Page 238
Introduction......Page 239
Legacy Firewalls......Page 240
Antivirus......Page 241
What Is in a Name?......Page 242
MOSAIC......Page 245
Advanced Meta-Network Security Analysis......Page 250
Next Generation Security Framework......Page 252
References......Page 261
Index......Page 263