Secret Service's Little-Known Role: Protecting Citizens as Well as Leaders It may surprise readers to learn that the United States Secret Service is actively engaged in the fight against Internet crime and computer-based fraud.
If asked what they know of the Secret Service, most Americans would likely point to the special agent with the sunglasses and earpiece standing behind the president. They would not imagine that many of those same agents who protect our highest elected leaders are also responsible for protecting consumers against criminal activity on the Internet.
Although the Secret Service has had the statutory responsibility for protecting the president, vice president and other designated officials since 1901, the origins of the Secret Service actually date back to 1865. We were created as a small bureau in the Department of the Treasury to suppress widespread counterfeiting during a time of financial crisis in our country.
Over the years this investigative mission has evolved into a statutory mandate to protect our nation's banking and financial infrastructure. While the Secret Service remains the lead federal agency for investigating counterfeit scams, our investigative jurisdiction has expanded to include credit card fraud, identity theft, bank fraud and telecommunications fraud. Congress has authorized us to protect the president, but it has also authorized us to protect your pocketbook.
As much as the PC has revolutionized our economy and our culture, it has also become the gateway into a new dimension of criminal activity where consumer protections are few and sophisticated methods to steal and defraud are many.
Thursday, January 24, 2002
Information Security URLography
Inforensics: Information Forensics, Reconstructions & Recovery:
the application of forensic techniques to investigate crimes involving, either directly or indirectly, information, computer and/or communication technology.
Inforensics: Information Forensics, Reconstructions & Recovery:
the application of forensic techniques to investigate crimes involving, either directly or indirectly, information, computer and/or communication technology.
ENCRYPTION SOFTWARE with forensic software countermeasures
Forensic software exploits Windows® security leaks for computer evidence recovery and for electronic discovery in litigation. This is usually the real method by which "the suspect's encryption was cracked." It's also commercially available to industrial spies and criminals, who use it to defeat hard drive data encryption by side channel attacks.
Most e-mail encryption software (such as PGP®) is vulnerable to forensic software attacks, if (mis-)used to encrypt files for secure storage rather than for transmission. Most "Windows® encryption software" has no forensic software countermeasures, making the strength of their ciphers (encryption algorithms) or key-sizes irrelevant .
If you're concerned about practicing due diligence in protecting sensitive information, but you're forced to keep it on a Windows® PC, perhaps we can help. We supply standards-compliant cryptosystems with forensic software countermeasures, specifically designed to protect sensitive data on Windows® PCs and laptops.
Forensic software exploits Windows® security leaks for computer evidence recovery and for electronic discovery in litigation. This is usually the real method by which "the suspect's encryption was cracked." It's also commercially available to industrial spies and criminals, who use it to defeat hard drive data encryption by side channel attacks.
Most e-mail encryption software (such as PGP®) is vulnerable to forensic software attacks, if (mis-)used to encrypt files for secure storage rather than for transmission. Most "Windows® encryption software" has no forensic software countermeasures, making the strength of their ciphers (encryption algorithms) or key-sizes irrelevant .
If you're concerned about practicing due diligence in protecting sensitive information, but you're forced to keep it on a Windows® PC, perhaps we can help. We supply standards-compliant cryptosystems with forensic software countermeasures, specifically designed to protect sensitive data on Windows® PCs and laptops.
PGP creator: Surveillance must be curbed
Phil Zimmermann, the creator of the Pretty Good Privacy encryption tool, says that widespread surveillance is leading us into an Orwellian future
Phil Zimmermann, creator of Pretty Good Privacy encryption -- better known as PGP -- was in Italy this week for the InfoSecurity conference. ZDNet Italy caught up with him to discuss the technical, social and politic implications of his encryption tool.
Phil Zimmermann, the creator of the Pretty Good Privacy encryption tool, says that widespread surveillance is leading us into an Orwellian future
Phil Zimmermann, creator of Pretty Good Privacy encryption -- better known as PGP -- was in Italy this week for the InfoSecurity conference. ZDNet Italy caught up with him to discuss the technical, social and politic implications of his encryption tool.
Tuesday, January 22, 2002
Inside Encrypting File System, Part 1
Securing a computer system entails employing measures that protect the computer's data from viewing or manipulation by unauthorized users. Security measures at the network interface prevent intruders from gaining entry to the computer, and file-system security prevents the computer's authorized users from accessing data they're not supposed to access. However, a computer that is isolated from the Internet behind a firewall and that has stringent file-system security policies in place remains unsecured if no strategy exists to guard the computer's physical security. If unauthorized users have physical access to a computer, they can remove the computer's hard disks and perform offline analysis of the disks' data. When users can view a hard disk's contents on a different computer, file-system security (e.g., the kind NTFS ACLs provide on Windows NT or Windows 2000— Win2K—systems) is of no value. This problem is especially acute for laptop computers because two NTFS file-system drivers that ignore NTFS security—NTFSDOS and an NTFS driver for Linux—let even casual thieves easily view NTFS files.
Securing a computer system entails employing measures that protect the computer's data from viewing or manipulation by unauthorized users. Security measures at the network interface prevent intruders from gaining entry to the computer, and file-system security prevents the computer's authorized users from accessing data they're not supposed to access. However, a computer that is isolated from the Internet behind a firewall and that has stringent file-system security policies in place remains unsecured if no strategy exists to guard the computer's physical security. If unauthorized users have physical access to a computer, they can remove the computer's hard disks and perform offline analysis of the disks' data. When users can view a hard disk's contents on a different computer, file-system security (e.g., the kind NTFS ACLs provide on Windows NT or Windows 2000— Win2K—systems) is of no value. This problem is especially acute for laptop computers because two NTFS file-system drivers that ignore NTFS security—NTFSDOS and an NTFS driver for Linux—let even casual thieves easily view NTFS files.
Encrypting File System Primer: Basics and Best Practices
With the introduction of Windows 2000, Microsoft implemented a number of security-based improvements aimed at making their flagship operating system (OS) more robust and attractive for enterprise deployment. They’ve built on existing technology from NT 4.0 and added several features, which take advantage of standards that for years have been proven effective in the industry. The result is an OS less dependent of flawed proprietary standards, such as NTLM and WINS, which have been plagued with numerous vulnerabilities and over the years have made the job of system security an even more difficult task.
Among the many improvements in Windows 2000, one of the more notable ones is the addition of the Encrypting File System (EFS). EFS is a means of protecting user data which takes advantage of two well known industry standards: Data Encryption Standard X (DESX) and RSA public key exchange. It is supported in all versions of Windows 2000, and works transparently (without user input) to encrypt and decrypt files for user access. In the past, a user would have to encrypt and decrypt files using a third party application which had to be purchased and installed separately on their system, and which most often depended on the user entering a correct password. With EFS, this is no longer a necessity. As always however, most security measures are only effective if your users are properly informed, and EFS is no exception. As such, we’ll take a look at EFS, what it is how it works, and more importantly, what you need to know to make it work effectively for you.
With the introduction of Windows 2000, Microsoft implemented a number of security-based improvements aimed at making their flagship operating system (OS) more robust and attractive for enterprise deployment. They’ve built on existing technology from NT 4.0 and added several features, which take advantage of standards that for years have been proven effective in the industry. The result is an OS less dependent of flawed proprietary standards, such as NTLM and WINS, which have been plagued with numerous vulnerabilities and over the years have made the job of system security an even more difficult task.
Among the many improvements in Windows 2000, one of the more notable ones is the addition of the Encrypting File System (EFS). EFS is a means of protecting user data which takes advantage of two well known industry standards: Data Encryption Standard X (DESX) and RSA public key exchange. It is supported in all versions of Windows 2000, and works transparently (without user input) to encrypt and decrypt files for user access. In the past, a user would have to encrypt and decrypt files using a third party application which had to be purchased and installed separately on their system, and which most often depended on the user entering a correct password. With EFS, this is no longer a necessity. As always however, most security measures are only effective if your users are properly informed, and EFS is no exception. As such, we’ll take a look at EFS, what it is how it works, and more importantly, what you need to know to make it work effectively for you.
Monday, January 21, 2002
Turning Snooping Into Art
It’s a privacy-busting boogeyman to civil libertarians, an anti-terror panacea to lawmakers. And now Carnivore, the FBI’s infamous Internet surveillance program, has become an inspiration to a group of the Web's leading artists.
In a collaborative art project called, creatively enough, "Carnivore," Flash guru Joshua Davis and digital artist Mark Napier, along with other artists, have crafted programs that create audiovisual representations of data traffic that’s observed and hijacked from a local area network.
It’s a privacy-busting boogeyman to civil libertarians, an anti-terror panacea to lawmakers. And now Carnivore, the FBI’s infamous Internet surveillance program, has become an inspiration to a group of the Web's leading artists.
In a collaborative art project called, creatively enough, "Carnivore," Flash guru Joshua Davis and digital artist Mark Napier, along with other artists, have crafted programs that create audiovisual representations of data traffic that’s observed and hijacked from a local area network.
Virtual lies face foolproof software
Software that can detect when people are lying in their e-mails sounds a bit far-fetched, but its manufacturers declare it is true.
SAS Institute, which makes fraud-detection systems for banks and phone companies, will on Monday announce a product that can sift through e-mails and other electronic text to catch elusive nuances such as tone.
Software that can detect when people are lying in their e-mails sounds a bit far-fetched, but its manufacturers declare it is true.
SAS Institute, which makes fraud-detection systems for banks and phone companies, will on Monday announce a product that can sift through e-mails and other electronic text to catch elusive nuances such as tone.
Friday, January 18, 2002
Privacy International
Privacy International (PI) is a human rights group formed in 1990 as a watchdog on surveillance by governments and corporations. PI is based in London, England, and has an office in Washington, D.C. PI has conducted campaigns throughout the world on issues ranging from wiretapping and national security activities, to ID cards, video surveillance, data matching, police information systems, and medical privacy.
Privacy International (PI) is a human rights group formed in 1990 as a watchdog on surveillance by governments and corporations. PI is based in London, England, and has an office in Washington, D.C. PI has conducted campaigns throughout the world on issues ranging from wiretapping and national security activities, to ID cards, video surveillance, data matching, police information systems, and medical privacy.
Cyber Solutions Tools Center
CIAC's Cyber Solutions Tools Center (CSTC), located at the Lawrence Livermore National Laboratory, provides solutions to U.S. Government agencies facing today's security challenges in information technology. We maintain information protection core-competencies through high-tech, integrated INFOSEC incident response, product development, and consulting services.
The CIAC is composed of three complementary business units: Operational Incident Response; Advanced Security Projects; and Secure Systems Services.
The Operational Incident Response group assists the Department of Energy in its information protection efforts by providing computer security incident response related services.
The CIAC is composed of security-cleared information security professionals with backgrounds in computer science, information systems, and engineering specializing in awareness, training, and education; Electronic Commerce security; electronic security assessment; firewall and web security; incident response; Internet and Intranet security; intrusion detection; malicious code detection and eradication; network security; policies and procedures; risk management; and system and software engineering.
CIAC's Cyber Solutions Tools Center (CSTC), located at the Lawrence Livermore National Laboratory, provides solutions to U.S. Government agencies facing today's security challenges in information technology. We maintain information protection core-competencies through high-tech, integrated INFOSEC incident response, product development, and consulting services.
The CIAC is composed of three complementary business units: Operational Incident Response; Advanced Security Projects; and Secure Systems Services.
The Operational Incident Response group assists the Department of Energy in its information protection efforts by providing computer security incident response related services.
The CIAC is composed of security-cleared information security professionals with backgrounds in computer science, information systems, and engineering specializing in awareness, training, and education; Electronic Commerce security; electronic security assessment; firewall and web security; incident response; Internet and Intranet security; intrusion detection; malicious code detection and eradication; network security; policies and procedures; risk management; and system and software engineering.
How Goner suspects were tracked down
Messages coded into the Goner worm and monitoring of the IRC channel used to control its activities led to the arrest of four suspected Israeli virus writers over the weekend.
One of the actions of Goner, which normally spreads as an infected attached-to-email message, is to install denial of service scripts for the mIRC Internet Relay Chat client. By monitoring the #pentagonex channel used to control the worm's activities, security experts working for DALnet IRC were able to track down its suspected creators.
Messages coded into the Goner worm and monitoring of the IRC channel used to control its activities led to the arrest of four suspected Israeli virus writers over the weekend.
One of the actions of Goner, which normally spreads as an infected attached-to-email message, is to install denial of service scripts for the mIRC Internet Relay Chat client. By monitoring the #pentagonex channel used to control the worm's activities, security experts working for DALnet IRC were able to track down its suspected creators.
Thursday, January 17, 2002
DIBS USA Inc - World Leaders in Computer Forensics
DIBS USA Inc is a privately owned, independent US corporation, specializing in forensic computing, with activities in three main areas.
DIBS USA Inc is a privately owned, independent US corporation, specializing in forensic computing, with activities in three main areas.
HashKeeper
HashKeeper is a database application of value primarily to those conducting forensic examinations of computers on a somewhat regular basis. The application uses the MD5 file signature algorithm to establish unique numeric identifiers (hash values) for known files and compares those known hash values against the hash values of unknown files on a seized computer system. Where those values match, the examiner can say, with statistical certainty, that the unknown files on the seized system have been authenticated and therefore do not need to be examined.
HashKeeper is a database application of value primarily to those conducting forensic examinations of computers on a somewhat regular basis. The application uses the MD5 file signature algorithm to establish unique numeric identifiers (hash values) for known files and compares those known hash values against the hash values of unknown files on a seized computer system. Where those values match, the examiner can say, with statistical certainty, that the unknown files on the seized system have been authenticated and therefore do not need to be examined.
BEST PRACTICES FOR SEIZING
ELECTRONIC EVIDENCE
A Joint Project of the International Association of Chiefs of Police
and the United States Secret Service.
Links
- Get MIRC IRC Software
- Get Prevention/Powerpoint Presentations (Prevention/Awareness)
- Get Internet/Online Service Provider List#1 and List#2
- Get Sunny Parmar's Online Investigation Manual (Email Request)
- Look-up National Police Contact List By CITY/STATE
- Join HTCC & Get on Police High Tech Contact List
- Join CFID/Get on the Computer Forensics Investigators Digest (Email)
- Get Computer Security Manual
- Get Free Encryption programs
- Get Neo Trace Tracking Program
- Get WS-Ping Pro Tracking Program
- Get Revelation Password Crack
- Get the ICSA Anti-Spoofing Test Tool
- Get New Defender Programs
- Get Steganos Encryption/Data Hiding Software Suite
- Get Evidence Eliminator Software (Use Caution)
- Get Forensic Software List (1)
- Get Forensic Software List (2)
- Get File Extension Information (Look-Up File Extensions)
- Get Federal Guidelines on Computer Search & Seizure
- Get example Affidavit-Search Warrant for Computers (Child Porn)
- Get some Federal Laws Pertaining to Computer Crime
- Get MD5 Hash Values for Child Porn Images (Email Request)
- Get how to Read/Trace E-Mail Info.
- Get the Port Number List
Evidence Eliminator - What evidence is on your hard drive?
Links to interesting Forensic Services.
These sites offer services, software programs and information about recovering deleted data from hard drives.
Links to interesting Forensic Services.
These sites offer services, software programs and information about recovering deleted data from hard drives.
Quality Security Tools
In May/June of 2000, we conducted a survey of 1200 Nmap users from the nmap-hackers mailing list to determine their favorite security tools. Each respondant could list up to 5.
I was so impressed by the list they created that I am putting the top 50 up here where everyone can benefit from them. I think anyone in the security field would be well advised to go over the list and investigate any tools they are unfamiliar with. I also plan to point newbies to this page whenever they write me saying "I do not know where to start".
In May/June of 2000, we conducted a survey of 1200 Nmap users from the nmap-hackers mailing list to determine their favorite security tools. Each respondant could list up to 5.
I was so impressed by the list they created that I am putting the top 50 up here where everyone can benefit from them. I think anyone in the security field would be well advised to go over the list and investigate any tools they are unfamiliar with. I also plan to point newbies to this page whenever they write me saying "I do not know where to start".
Wednesday, January 16, 2002
Electronic Harassment Specialists
It is our goal to help victims of Electronic Harassment. This is done with decades of well trained, experienced and knowledgeable professionals. Electronic Harassment occurs in almost every country in the world, it knows no borders. Neither do we. We will not rest until Electronic Harassment is properly legislated or eliminated.
It is our goal to help victims of Electronic Harassment. This is done with decades of well trained, experienced and knowledgeable professionals. Electronic Harassment occurs in almost every country in the world, it knows no borders. Neither do we. We will not rest until Electronic Harassment is properly legislated or eliminated.
Subscribe to:
Posts (Atom)
