Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CYBF 670 > Module 4 - Non-State Organizations > Flashcards

Module 4 - Non-State Organizations Flashcards

1
Q

What is scope?

A

Every nation that has government sponsored cyber warfare programs also have NSOs operating within borders.

May be hired by military or government orgs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Types of NSOs

A

6 types:

  • Individuals
  • Self-identified groups of hackers
  • Loose collection of individuals functioning as a group
  • Corporations/businesses
  • Organized crime
  • Terrorists, but rarely
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Russian Hactivists

A
  • Problem for Russian government
  • Sought out by military and mafia
  • Loosely connected to youth groups
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Chinese Hactivists

A
  • Problem for Chinese government (attack targets internal to the country)
  • Sought by PLA and recruited to attend universities
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Rogue State / non-state Hacktivists

A
  • Cyber Criminals for own gain
  • Iran and Hezbollah alliance
  • Patriotic hacking when non-state actors feel imperative to act on behalf of state (Israel & Palestine conflict, India and Pakistan conflict)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Targets and Techniques

A

3 main

  • web site defacement (political message)
  • DDoS through bots
  • Theft (Identity, Credit Cards, Info to transfer to currency)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Skillsets of NSOs

A
  • Script kiddies
  • Malware authors
  • Social engineers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Script Kiddies

A

often derogatory
Use code and tools developed by others
No particular skill in launching attacks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Malware Authors

A

specialized skill
knowledge of OS of the target
Possibly identify zero day exploits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Social engineers

A

gain valuable information by preying on poor OPSEC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Corporations (as NSO)

A
  • espionage to gain competetive advantage
  • theft of trade secrets and research
  • domestic or international
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Organized Crime (as NSO)

A
  • theft of data and money
  • identity theft
  • advanced malware such as Zeus and SpyEye
  • Botnets capable of sending large quantities of spam
  • money transferred internationally
  • in countries such as Russia and Ukraine, form a relation to the government and law enforcement
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Communication methods

A

IRCs with encrypted comms
hacker forums
Leetspeak and handles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Notable NSO actors - Hammond events

A

Jeremy Hammond (aka Robin Hood), assoc with LulzSec
2006-2007
attack conservative group website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Notable NSO actors - LulzSec events

A

2011, Jeremy Hammond
Target: Stratfor
- release list of clients 5 million emails to WikiLeaks
- Stratfor -> 1.75 million for lawsuits

2011, Raynaldo Rivera (age 20)
Target: Sony game system
Attack: SQL Injection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Notable NSO actors - Anonymous events

A

Motivations: social issues
Target: Syrian websites - OpSyria Initiative
Comms through social networking, Pastebin, and 4chan.org

---
2011
Christopher Weatherhead
Target: PayPal
Attack: DDoS
Cost to fix: 3.5 million pounds

Target: Stratfor (intel company)
Barrett Lancaster Brown, 31
Charges: access device fraud, trafficking in stolen authentication features, identity theft related to sharing credit card info

17
Q

Notable NSO actors - CabinCr3w

A

offshoot of Anonymous
Higinio O. Ochoa III

Target: >= 4 websites of US law enforcement

  • website defacement, content loaded
  • 1 picture contained EXIF data (geolocation)
18
Q

Name 5 notable NSO hactivist groups:

A 
LulzSec
Anonymous
CabinCr3w
Project PM (positive)
Izz ad-Din al-Qassam Cyber-Fighters
19
Q

Notable NSO actors - Project PM

A

online entity with intent to develop new ways to use the Internet for positive change to encourage others to adapt such methods.

  • Operation MetalGear
  • Operation Pursuant
20
Q

Operation MetalGear

A
  • associated with Project PM group
  • crowd-sourced investigation into intelligence contracting industry and role in development of “persona management” software
  • wiki.echelon2.org
21
Q

Operation Pursuant

A
  • involves encouraging individuals to form their own pursuants in order to pursue similar crowd-sourced investigations or otherwise engage in online activism of whatever sort they choose.
  • check on corrupt institutions
  • wiki.echelon2.org
22
Q

Notable NSO actors - Izz ad-Din al-Qassam Cyber-Fighters

A

2012
Target: US Banks
Attack: DDoS
Motive: YouTube video casting Islam in a negative light

23
Q

Catching NSOs

A
  • some feel most likely to be caught
  • indiv. do not have resources to hide their attacks/attribution
  • Indiv, do not receive protection of respective governments
  • Skill levels vary greatly from script kiddies to seasoned hackers/crackers
24
Q

Positive NSOs

A
  • some NSOs serve as positive participants in cyber warfare and enable defensive measures.

(security research firms, public universities, anti-virus firms)

25
Q

Protective Roles (Rattray and Healey)

A 
7 different roles:
User (mixed)
Attacker (negative)
Target (negative)
Source (negative)
Responder (positive)
Provider (positive)
Improver (positive)

CYBF 670 (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions