ch 17

Question 1

Equifax Breach

Answer 1

monitors creditworthiness of US citizens
got 143 M customer’s data
* also hit UK and Canadians
* vulnerability in Apache Struts (failed to patch it in 2 months)
* most $$$ breach (Billions)

Question 2

Target Breach

Answer 2

Installed malware in payment system 
FireEye security system used by Target notified of sw but ignored (feature to auto delete malware disabled)
* hackers from Odessa and Moscow
* ID in mid-Dec
* probably entered through 3rd party vendor
* hid under "BladeLogic" sw 
40 M cards and 70 M customers
90 lawsuits

Question 3

average cost of data reach

Answer 3

$11.7 M

Question 4

Avg time to ID breach

Answer 4

201 Days

Question 5

Avg time to contain breach

Answer 5

70 Days

Question 6

bad guy motivations

Answer 6

• acct theft
• steal data
• compromise assets for other crimes
• extortion
• IP theft
• espionage
• terrorism
• prank
• protest (Hacktivism)
• revenge (disgruntled employee)

Question 7

data harvesters

Answer 7

criminals that infiltrate systems and collect data for illegal resale

Question 8

cash-out fraudsters

Answer 8

criminals who buy assets from data harvesters for illegal financial gain
* use credit card #s to buy goods, create fake accts for fraud

Question 9

Botnets

Answer 9

hordes of infiltrated computers, linked and controlled remotely (zombie networks)

• do DDoS attacks
• can send 100 B spam msg a day

Question 10

ransomware

Answer 10

total costs 8 Billion

* City of Atlanta fell to SamSam ransomware

Question 11

Gary Min

Answer 11

Scientist at DuPont

* tried to sell info at $400 B of Co.

Question 12

stuxnet

Answer 12

most known act of cyberwarfare

• worm infiltrated Iran nuclear facilities and reprogrammed to spring devices to destroy themselves
• attack would report normal readings so operators didn’t know
• e/copy could infect 3 other machines
• self-destructed at future date

Question 13

pranksters

Answer 13

aka griefers or trolls

Question 14

Edward Snowden

Answer 14

• CIA employee and NSA contractor
• leaked 1.7 M digital docs from US, British, and Australian agencies to press
• revealed gov NSA & FBI stalking on ppl through Google, Fb, Yahoo!, Microsoft, and Apple
• unlim. access to phone records from Verizon’s customers

Question 15

hacker

Answer 15

1) someone who breaks into computer systems

2) clever programmer

Question 16

hack

Answer 16

1) breaking into a computer system

2) clever solution

Question 17

white hat hackers

Answer 17

uncovers computer weaknesses w/o exploiting them

improves system sec

Question 18

black hat hackers

Answer 18

computer criminal

Question 19

Phishing

Answer 19

Con that uses tech

tries to get sensitive info or tricking