An interesting article from TheRegister: 10 reasons why the Black Hats have us outgunned
- The Black Hats form a well integrated community that shares knowledge effectively.
- Becoming a Black Hat is a career option even for those who are not super geeks.
- There are even specialist virus tools designed to circumvent specific AV products.
- There are SDKs for the more advanced hackers.
- There's a market for your data.
- There are botnets to rent.
- Some rogue websites are very subtly managed.
- Good hackers know how to stay safe (they stay abroad)
- The banking system has its channels
- Not all businessmen are entirely averse to the odd hack (on a competitor)
We , Security Professionals, need to 'network' more and share knowledge. In that perspective, don't forget about the ISSA-BE (Monday) and OWASP (Friday) meeting in Belgium this week.
Bonus: A Security Market for Lemons (Schneier.com)
Bonus: Zero-Day Threats, Part 2: Who’s Behind Them and Why? (McAfee Avertlabs)
Security4all Blog
Twitter
Slideshare
Facebook
Digg
Flickr
3 comments:
I also saw this list, it's not thought out. For example, I fail to see why 7, 9 and 10 give BH and edge over WH.
The list surely looks a little strange and not something that someone investigated properly. But hey, Benny is right, there isn't a real cooperation going on in Belux security land, surely there are some initiatives going on but nothing structured, on the other hand there also isn't a lot of movement in the awareness area. Maybe we should do something there ... Belgian Security Podcast, joined blogging, events, as long as it is open en not vendor-related I'm surely up for anything.
The actual article expains each point more in detail:
Point 7: There are security companies using spiders to detect malware loaded wabsite, but there are hackers out there that have blacklists of these ip address spaces. It's a cat and mouse game.
Point 9: There are ways of receiving money that is hardly tracable (accepting money for DDoS
Point 10: Not all business people are afraid of using hackers to gain a competetive advantage.
Thank you for your feedback. Some of us are talking and trying to get the Belgian security community together. Keep up the good work and we might get there.
Post a Comment