cs261n internet network security surveillance who am i
play

CS261N: Internet/Network Security Surveillance Who am I? Computer - PowerPoint PPT Presentation

Aug 01, 2023 •669 likes •1.06k views

CS261N: Internet/Network Security Surveillance Who am I? Computer Science PhD Candidate at UC Berkeley Co-Founder of Bahrain Watch Senior Researcher at Citizen Lab Value Description 0 Not targeted , e.g. spam or financially motivated

  1. CS261N: Internet/Network Security Surveillance

  2. Who am I? ● Computer Science PhD Candidate at UC Berkeley ● Co-Founder of Bahrain Watch ● Senior Researcher at Citizen Lab

  4. Value Description 0 Not targeted , e.g. spam or financially motivated 1 Targeted but not customized ... obviously false 2 Targeted and poorly customized . Content is generally relevant ... May look questionable 3 Targeted and customized . May use a real person/organization ... Content is specifically relevant to the target and looks legitimate 4 Targeted and well-customized . Uses a real person/organization and content to convince the target the message is legitimate. Probably directly addressing the recipient ... May be sent from a hacked account. 5 Targeted and highly customized using sensitive data , likely using inside/sensitive information that is directly relevant to the target.

  5. Value Description 1 The sample contains no code protection such as packing, obfuscation, or anti-reversing tricks 1.25 The sample contains a simple method of protection , such as code protection using reversible publicly available tools, self-disabling in the presence of AV 1.5 The sample contains multiple minor code protection techniques (anti-reversing, packing, VM / reversing tools detection) that require some low-level knowledge. 1.75 The sample contains at least one advanced protection method such as rootkit functionality or a custom virtualized packer 2 The sample contains multiple advanced protection Techniques , and is clearly designed by a professional software engineering team

  11. “It is a secret investigation involving private methods of our department that cannot be disclosed” Col. Fawaz Alsumaim Cyber Crime Unit

  12. Order to uncover the user of an IP address of @alkawarahnews Batelco (residential ISP) Mohammed Salah Acting Chief Prosecutor, Capital Region

  14. After receiving permission from the Public Prosecutor to gain information about the user of the protocol number, we found that the user is registered under the name of Faisal Ali Ibrahim Mohammed Al Shufa. Through the investigations that we conducted it is clear that the person running the account is the named person’s son Ali Faisal Ali Ibrahim Al Shufa. The individual is spreading tweets insulting His Majesty the King, such as “Al Kawarah/ Burning images of the dictator Hamad … ” and “the mercenaries of the fallen Hamad are violently suppressing now … ”

  15. (Arrested activist) Greetings, I am a translator of the revolution. Do you need translation of this?

  16. (Arrested activist) Greetings, I am a translator of the revolution. Do you need translation of this?

  17. (Arrested activist) Greetings, I am a translator of the revolution. Do you need translation of this? goo.gl analytics: Clicks: 1 Referrer: www.facebook.com Country: BH

  18. Created: 2012-12-08T19:05:36+00:00 Click : 2012-12-09T19:57:18+03:00 Diff : 21h51m42s

  22. Disable this option on your iPhone

  26. The "Million Dollar Dissident" Ahmed Mansoor: ● Signed UAE pro-democracy petition in 2011 ● UAE human rights activist New secrets about torture of Emiratis in state prisons

  27. The "Million Dollar Dissident"

  28. The "Million Dollar Dissident" CVE-2016-4657 Visiting a maliciously crafted website may lead to arbitrary code execution CVE-2016-4655 An application may be able to disclose kernel memory CVE-2016-4656 An application may be able to execute arbitrary code with kernel privileges

  29. Scoring 1 The sample contains no code protection such as packing, obfuscation, or anti-reversing tricks 2 Targeted and poorly customized . Content is generally relevant ... May look questionable

  30. Device Surveillance ● Commercialization : The same products are used by governments across the world

  31. Boom!

  33. SpyCall: Illustrated *43# (call waiting)

  34. SpyCall: Illustrated Special number! Cancel vibration Cancel ringer Stop backlight Modify call logs

  35. SpyCall: Illustrated Legit call!

  36. SpyCall: Illustrated Hold RING RING BZZZZZZZZZ FLASH FLASH

  37. The NSA's QUANTUM NSA Do we want to pwn this user? Yes? INJECT Traffic COPIED 0day Legit Response

Recommend

Network Security Architecture 1 Additional Reading Firewalls and Internet Security:

Network Security Architecture 1 Additional Reading Firewalls and Internet Security:

Network Security Architecture 1 Additional Reading Firewalls and Internet Security: Repelling the Wily Hacker, Cheswick, Bellovin, and Rubin. New second edition Firewall and Internet Security, the Second Hundred (Internet)

801 views • 78 slides
(In)Visibility and Surveillance Questions Surveillance & Security Positives to surveillance

(In)Visibility and Surveillance Questions Surveillance & Security Positives to surveillance

(In)Visibility and Surveillance Questions Surveillance & Security Positives to surveillance added security. Negatives to surveillance loss of privacy Dis-Appearance dis-appearance refers to the processes whereby a visible

496 views • 15 slides
What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Economics of network security Harald Vranken 1 Economics of network security Note that

Economics of network security Harald Vranken 1 Economics of network security Note that

Advanced Network Security (2019-2020) Economics of network security Harald Vranken 1 Economics of network security Note that network in this lecture means Physical communication network (eg. Internet, telephony, fax, telegraph)

769 views • 49 slides
Detecting Security Problems and Internet Measurement Evaluating Security Solutions The

Detecting Security Problems and Internet Measurement Evaluating Security Solutions The

Detecting Security Problems and Internet Measurement Evaluating Security Solutions The Internet as a whole is poorly CS 239 measured Advanced Topics in Network And, hence, poorly understood Security No existing network-wide

354 views • 4 slides
Do we need a new Internet? Part 1: Basic Issues Adrian Perrig Network Security Group, ETH

Do we need a new Internet? Part 1: Basic Issues Adrian Perrig Network Security Group, ETH

Do we need a new Internet? Part 1: Basic Issues Adrian Perrig Network Security Group, ETH Zrich Imagine a building or structure that represents the Internet The Internet The Internet is perceived to be like the pyramids: monumental

776 views • 19 slides
Network Security Network Security Adolfo Rodriguez CPS 214 Telco/Internet Comparison

Network Security Network Security Adolfo Rodriguez CPS 214 Telco/Internet Comparison

Network Security Network Security Adolfo Rodriguez CPS 214 Telco/Internet Comparison Telco/Internet Comparison Internet Telephone System no central authority central authority end systems in control network in control

1.07k views • 59 slides
Do we need a new Internet? Part 2: Motivations for Change Adrian Perrig Network Security Group,

Do we need a new Internet? Part 2: Motivations for Change Adrian Perrig Network Security Group,

Do we need a new Internet? Part 2: Motivations for Change Adrian Perrig Network Security Group, ETH Zrich Worst Internet Security Problems? Malware (worms, viruses, etc.) Spyware Ransomware APT HTTP-based attacks Spam,

424 views • 17 slides
Securing Internet Communication: TLS, contd Network security CS 161: Computer Security Prof.

Securing Internet Communication: TLS, contd Network security CS 161: Computer Security Prof.

Securing Internet Communication: TLS, contd Network security CS 161: Computer Security Prof. Raluca Ada Popa Feb 27, 2018 Some slides credit David Wagner Announcements Midterm grades released Regrades: Read the follow-ups on the

1.75k views • 156 slides
Experiencing a new Internet Architecture Adrian Perrig, Network Security Group The Internet is on

Experiencing a new Internet Architecture Adrian Perrig, Network Security Group The Internet is on

Experiencing a new Internet Architecture Adrian Perrig, Network Security Group The Internet is on Fire! Lack of sovereignty Frequent outages https://downdetector.com Constant DDoS attacks https://www.digitalattackmap.com

730 views • 48 slides
Introduction to Network Security Chapter 3 The Internet Dr. Doug Jacobson - Introduction to 1

Introduction to Network Security Chapter 3 The Internet Dr. Doug Jacobson - Introduction to 1

Introduction to Network Security Chapter 3 The Internet Dr. Doug Jacobson - Introduction to 1 Network Security - 2009 Topics The Internet Addressing Client Server Routing Dr. Doug Jacobson - Introduction to 2 Network

940 views • 24 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Internet of Things Security A Survey by Avi Webberman Outline What is the Internet of Things

Internet of Things Security A Survey by Avi Webberman Outline What is the Internet of Things

Internet of Things Security A Survey by Avi Webberman Outline What is the Internet of Things (IoT)? Why is IoT Security so Important? Dyn DDOS Attack What are the security challenges of an IoT network? A Proposed Taxonomy

176 views • 14 slides
Outline Preliminaries: Internet protocols, PKI, X.509, Encoding Internet Security

Outline Preliminaries: Internet protocols, PKI, X.509, Encoding Internet Security

Outline Preliminaries: Internet protocols, PKI, X.509, Encoding Internet Security Protocols Application layer security (email) PGP, S/MIME Transport layer security Bart Preneel SSL / TLS June 2003 Network layer

571 views • 19 slides
Compiler Infrastructure Systems and Internet Infrastructure Security (SIIS) Laboratory Page 1

Compiler Infrastructure Systems and Internet Infrastructure Security (SIIS) Laboratory Page 1

Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA Compiler Infrastructure Systems and Internet Infrastructure Security

603 views • 23 slides
Namespaces Systems and Internet Infrastructure Security (SIIS) Laboratory Page 1 Outline Sects

Namespaces Systems and Internet Infrastructure Security (SIIS) Laboratory Page 1 Outline Sects

Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA Namespaces Systems and Internet Infrastructure Security (SIIS)

1.13k views • 49 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #15 Oct 20 th 2005 CSCI 6268/TLEN 5831, Fall 2005 Announcements Reading: How to 0wn the Internet See schedule page

647 views • 49 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #13 Oct 7 th 2004 CSCI 6268/TLEN 5831, Fall 2004 Announcements Two new readings were assigned How to 0wn the Internet in

768 views • 39 slides
CMPSC 497 Security Basics Trent Jaeger Systems and Internet Infrastructure Security (SIIS)

CMPSC 497 Security Basics Trent Jaeger Systems and Internet Infrastructure Security (SIIS)

Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA CMPSC 497 Security Basics Trent Jaeger Systems and Internet

397 views • 28 slides
Advanced Systems Security: Introduction to OS Security Trent Jaeger Systems and Internet

Advanced Systems Security: Introduction to OS Security Trent Jaeger Systems and Internet

Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA Advanced Systems Security: Introduction to OS Security Trent

770 views • 28 slides
Using Game Theory To Solve Network Security A brief survey by Willie Cohen Network Security

Using Game Theory To Solve Network Security A brief survey by Willie Cohen Network Security

Using Game Theory To Solve Network Security A brief survey by Willie Cohen Network Security Overview By default networks are very insecure Connected to the open internet There are a number of well known methods for securing a

659 views • 21 slides
Constraint Solving Systems and Internet Infrastructure Security (SIIS) Laboratory Page 1 Outline

Constraint Solving Systems and Internet Infrastructure Security (SIIS) Laboratory Page 1 Outline

Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA Constraint Solving Systems and Internet Infrastructure Security (SIIS)

455 views • 18 slides
The Internet Security Alliance The Internet Security Alliance is a collaborative effort with

The Internet Security Alliance The Internet Security Alliance is a collaborative effort with

The Internet Security Alliance The Internet Security Alliance is a collaborative effort with Carnegie Mellon University. It is a cross-sector, internationally- based trade association devoted to cyber security. ISA has individual corporate

349 views • 30 slides
Network/Internet Threats/Attacks 1 Internet Structure backbone ISP local network Internet

Network/Internet Threats/Attacks 1 Internet Structure backbone ISP local network Internet

Lecture 17 CS 134 Spring 2019 Network/Internet Threats/Attacks 1 Internet Structure backbone ISP local network Internet service Autonomous system (AS) is a provider (ISP) local network collection of IP networks under control of a

643 views • 25 slides

More recommend