This document discusses who owns sensitive information, how it is taken, and how to protect it. It notes that hackers, cyber mafia, cyber terrorists, movies, cyber armies, and Wikileaks can own sensitive information. Information is often taken through password theft, insecure infrastructure, insecure data protection, lack of security policies/procedures, intrusion/hacking, and social engineering. The document provides examples of how Bradley Manning leaked classified US airstrike videos and diplomatic cables to Wikileaks by copying them to a Lady Gaga CD. It recommends upgrading security awareness, following security manuals, using strong authentication/encryption, antivirus software, and realizing that no system is completely secure and security requires human diligence

1. Who Own your
Sensitive Information ?
How It was Taken & How To Protect It
SNKI - 29, December 2010 - y3dips

2. Who Own It ?

3. HACKER

4. CYBER MAFIA

5. CYBER TERRORIST

6. Movie

7. CYBER ARMY

8. WIKILEAKS

9. Who Own It ?

10. How It Was Taken ?

11. Famous Attack Vector
• Password (Authentication)
• Insecure Infrastructure
• Insecure Data Protection
• There isnt any Policy and Procedure
• Intrusion/hacking
• Social Engineering

12. PASSWORD TREAT

13. INSECURE INFRASTRUCTURE

14. Hacking Example

15. Video Demo

16. WikiLeaks

17. Bradley
Manning
an Army
Intellegence
analyst

18. US Airstrikes

19. Wikileaks Publication
• Baghdad “AirStrikes” Incident
• Copy the Data into a “LADY GAGA”
labeled CD
• Bradley Submit to Wikileaks
• Wikileaks confirm 3 Month
Decrypting it - but it never encrypted
said Bradley.
http://www.wired.com/threatlevel/2010/06/wikileaks-chat/#ixzz0qYdG9xzE

20. Attack Vector
• Unprotected “Private” Network
• Unpatched/Out of date server/system
• Zip - aes256 - password protected
partial usage
• Lack on Physical Security - 5 digit
door access = knock

21. WikiLeaks

22. Secret US Embassy Cables

23. Secret US Embassy Cables

24. How To Protect It ?

26. • Upgrade your Security Awareness
• Read The “Security” Manual
• Give a serious attention to your
Authentication/Credentials
• Use a relatively Strong Encryption
(e.g for file, network communication)
• Use AntiVirus, Firewall, e.t.c

27. Password Management

28. File/Partition Encryption

29. No System 100% Secure
Is a Process
SECURITY
Human is the Weakest Link

31. Reference
• http://google.com “For most of the Images”
• http://wired.com “for Bradley and Lamo Chat transkrip”
• http://guardian.co.uk “For US Embassy Cablegate Diagrams”

32. Who Own your
Sensitive Information ?
How It was Taken & How To Protect It
@y3dips - me@ammar.web.id