ethics and hacking 2

What they are??
•Ethics :
 Moral principles that govern a person's or group's behaviour.
•Hacking :
 The practice of modifying the features of a system, in order to accomplish a goal outside of the creator's original purpose.

Hacking: How it all began??
•Been around for more than a century.
•1960s – MIT’s artificial intelligence lab became staging grounds for hackers.
•1970s – John Draper makes a long-distance call for free.


•1980s – Kevin Mitnick, secretly monitors the e-mail of MCI and Digital Equipment security officials.
•1990s – Hackers break into and deface federal Web sites, including the U.S. Department of Justice, U.S. Air Force, CIA, NASA and others.

SINE IIT Bombay Why is security needed ??
•Information is a strategic resource.
•A significant portion of the organizational budget is spent on managing information.
•Have several security related objectives:
 Confidentiality - keep info secret
 Integrity - protect info accuracy
 Availability - ensure info delivery

Ethical Hacking: An Introduction
•Process of legally hacking the information that is considered to be confidential.
•a.k.an Intrusion Testing, Penetration Testing or Red Teaming.

•An expert hired by an organisation to attempt to attack their network and computer system the same way a hacker would.
•Uses the same techniques & tactics used by the hackers.
•End result is the company’s ability to prevent an intrusion, before it occurs.

Types of Hackers
•Script Kiddies :
Amateurs, copy others codes to attack
•White Hat Hackers :
Professional term for ethical hackers
•Black Hat Hackers :
Professional term for malicious hackers
•Gray Hat Hackers :
Combination of both, hack to learn
Self-proclaimed ethical hackers

•Hacktivists :
Hacker + Activists
•State-Sponsored Hackers :
Limitless time & funding by govt.
•Spy Hackers :
Hired hackers by corporations
•Cyber Terrorists:
Motivated by religious / political beliefs
Spread fear, terror, and commit murders

Steps Involved :
•Foot printing/Information Gathering :
Gathering potential information about the target system.
A good hacker consumes 90% of the time for this phase.
•Scanning :
Network is scanned for any vulnerabilities.

•System Hacking :
Involves actual hacking
Taking advantage of vulnerabilities found during scanning, & penetrate the victim’s system.
•Maintaining Access :
Making provisions by planting backdoors
•Covering Tracks :
Removing all the traces of his presence in system by removing log files & event logs