A HACKER S PERSPEC TIVE ON THE H U M AN ELEMENT IN SEC U RITY. Coleman Wolf, CPP, CISSP Environmental Systems Design, Inc

Transcription

1 1 A HACKER S PERSPEC TIVE ON THE H U M AN ELEMENT IN SEC U RITY Coleman Wolf, CPP, CISSP Environmental Systems Design, Inc cwolf@esdglobal.com

2 A Hacker s Perspective on 2 the H U M AN HAC K ING W E T WARE HAC K I NG Coleman Wolf, CPP, CISSP Environmental Systems Design, Inc Chicago, IL 2

3 A Hacker s Perspective on 3 the Brain Computer Mind Cyberspace Virus Virus 3

4 A Hacker s Perspective on 4 the Drivers Human Hacking Demo Benefit Lunch 4

5 A Hacker s Perspective on 5 the W H AT D R I V E S A H A C K E R Deeper level of understanding Motivations Mastery technical challenge Curiosity exploration Amusement trolling Social hacktivist Profit espionage, extortion, ransom 5

6 A Hacker s Perspective on 6 the P E R S U A S I O N Influence: The Psychology of Persuasion (Robert Cialdini) 1. Scarcity 2. Authority 3. Liking 4. Social Proof 5. Reciprocity 6. Consistency Social Engineering Ransomware and Adware 6

7 A Hacker s Perspective on 7 the 7

8 A Hacker s Perspective on 8 the P E R C E P T I O N Data validity and relevancy Inattention blindness Data smog (signal/noise) Internet of Things (IoT) example Contextual influences SQL Injection - unvalidated inputs Man-in-the Middle monitor/control data input 8

9 A Hacker s Perspective on 9 the M E M O R Y Data integrity Witness credibility Retention Alteration Reconstructive memory Stack/Buffer Overflow implanted information 9

10 A Hacker s Perspective on 10 the 8 Byte Buffer U S E R N A M E Byte Buffer Overflow E X C E S S I V E D A T A

11 A Hacker s Perspective on 11 the L E A R N I N G A N D K N O W L E D G E Data processing Brain abhors a vacuum Find pattern and assign agents To give meaning/causality to event To simplify the complex Illusory Truth Effect Spoofing - falsified identity Beware of bias 11

12 A Hacker s Perspective on 12 the D E C I S I O N Data output Attackers may use social engineering or persuasion Information overload and data smog as a diversion tactic Tendency to use default settings under mental load Increased (and unconscious) trust in our machines Denial of Service analysis paralysis and forced filtering Race Condition interrupting the OODA loop 12

13 A Hacker s Perspective on 13 the Unfolding Circumstances OBSERVE ORIENT DECIDE ACT Implicit Guidance and Control Cultural Traditions Outside Information Observations Genetic Analysis & Heritage Synthesis Decision Action Unfolding Interaction with the Environment New Information Feedback Previous Experience Unfolding Interaction with the Environment Feedback Feedback 13

14 A Hacker s Perspective on 14 the C O G N I T I V E B I A S Belief systems Cultural Education Experience Anecdotal evidence Negative bias Positive bias (Confirmation bias) 14

15 A Hacker s Perspective on 15 the D E M O N S T R AT I O N Wait, what just happened? Inattentional blindness Uncertainty of goal or desired outcome Tendency to follow narration and visual cues Information overload Distraction Brain fills gaps 15

16 A Hacker s Perspective on 16 the T H E TA K E - AWAY S Recognize tactics used: Persuasion, diversion tactics, social engineering, etc. Recognize memory limitations Understand the mindset of threat actors Be aware of your own biases Use sound logic rather than weak reasoning Use these techniques 16