Modern Open Source Intelligence (OSINT Sample Clauses

Modern Open Source Intelligence (OSINT. OSINT is used in the preparation phases of an SE attack and its goal is the measurement of the digital footprint and shadow, with licit or illicit (e.g., fake identities) methods. Open source intelligence (OSINT) solutions provide access to a wealth of internal and external data from millions of sources with the intention of helping both governmental agencies and private sector businesses make informed decisions every day [47] , which demonstrates that it is used not only for malicious intents. 14 Source: PandaLabs Report 2013, xxxx://xxx.xx/MjFYBm 15 Therefore the watering pool attacks and the malware ad-hoc infections are nowadays one of the most actively exploited techniques of infection [10]. 16 Two recent sample are the Trojan.VikNok.2014 (xxxx://xxxxxxxxxxxxx.xxx/2014/05/beware- cyber-criminals-spreading-click.html) and the Trojan.PoSeidon.2015 (xxxx://xxxxxxxxxxxxx.xxx/2015/03/poseidon-point-of-sale-malware.html), but also CARBANAK and XXXXX share these general characteristics. In the information security sector OSINT is used to gather knowledge of the system under attack (e.g. via google hacking [48] or dumpster diving17 or extraction of documents metadata18). It is a classic method that has been used for a few years now and it could be named “OSINT of classic sources”, see Figure 8. Apart from this, the increased amount of data shared on social networks (see Chapter 3) and the fact the processing it is not complicated have made Social Intelligence19 and Social Data Mining techniques mainstream. One of the last additions to the long list of OSINT technologies is the Linked-open-Data, that that is being increasingly used across the web, even vertically for specific web giants (e.g., the Google universe of services) which allows to cross-correlate also other data and enrich the digital footprint and shadow previously defined in this document20: large data can be mined for intimidation such as facts of malware, anomaly, or phishing. As said above, the OSINT could be abused to gather knowledge in the preparation phases of a SE attack, for example, using an aggressive information gathering process. The information could be collected in two ways: • Actively: Creating of a fake profile on a social network and request friendship to victims in order to access information shared privately • Passively: Collecting information that has been freely shared across the web and correlating it to different cyber profiles (this operation is called remediation). 17 Es....