Seven Deadliest Usb Attacks

by Anderson, Brian

• ISBN13: 9781597495530
• ISBN10: 1597495530
• Format: Paperback
• Copyright: 2010-04-22
• Publisher: Syngress Media Inc

Summary

Keep up with the latest hacks, attacks, and exploits affecting USB technology. The authors highlight the best ways to defend against these vicious hacks with step-by-step instruction, and deliver techniques to make one's computer and network impenetrable.

Table of Contents

About the Authors	p. ix
Introduction	p. xi
USB Hacksaw	p. 1
Sharing Away your Future	p. 2
Anatomy of the Attack	p. 5
Universal Serial Bus	p. 5
U3 and Flash Drive CD-ROM Emulation	p. 5
Inside the Hacksaw Attack	p. 6
Hacksaw Removal	p. 17
What is the Big Deal?	p. 17
Regulators, Mount Up	p. 18
Evolution of the Portable Platform	p. 20
Portable Platforms	p. 20
Hacksaw Development	p. 22
Defending against This Attack	p. 23
Summary	p. 26
Endnotes	p. 26
USB Switchblade	p. 27
Passing Grades	p. 28
Inside the Switchblade	p. 31
Switchblade Tool Summaries	p. 32
Switchblade Assembly	p. 38
Why Should I Care?	p. 51
Evolving Aspects	p. 52
Privilege Elevation	p. 54
Defensive Techniques	p. 54
System Execution Prevention and USB Antidote	p. 55
Biometrics and Token Security	p. 57
Password Protection Practices	p. 57
Windows Group Policy Options	p. 60
Browser Settings and Screen Savers	p. 61
Summary	p. 63
USB-Based Virus/Malicious Code Launch	p. 65
Invasive Species among Us	p. 66
An Uncomfortable Presentation	p. 67
Anatomy of the Attack	p. 69
Malicious Code Methodologies	p. 69
Autorun	p. 74
How to Recreate the Attack	p. 79
Evolution of the Attack	p. 85
Why all the Fuss?	p. 88
Botnets	p. 88
Distributed Denial-of-Service Attacks	p. 88
E-mail Spamming	p. 88
Infecting New Hosts	p. 89
Identity Theft	p. 89
Transporting Illegal Software	p. 89
Google AdSense and Advertisement Add-On Abuse	p. 89
Defending against this Attack	p. 90
Antimalware	p. 92
Summary	p. 96
Endnotes	p. 96
USB Device Overflow	p. 97
Overflow Overview	p. 97
Analyzing this Attack	p. 99
Device Drivers	p. 99
Going with the Overflow	p. 100
USB Development and the Hole in the Heap	p. 103
Ever-Present Exposures	p. 105
Overflow Outlook	p. 106
Defensive Strategies	p. 107
Drivers	p. 107
Physical Protection Mechanisms	p. 114
Summary	p. 115
Endnote	p. 116
RAM dump	p. 117
Gadgets Gone Astray	p. 118
Digital Forensic Acquisition Examination	p. 118
Computer Online Forensic Evidence Extractor or Detect and Eliminate Computer-Assisted Forensics?	p. 119
Memory Gatherings	p. 120
Reconstructing the Attack	p. 122
Mind your Memory	p. 133
Advancements in Memory Analysis	p. 136
ManTech DD	p. 136
Additional Analysis Tools	p. 140
Future Memories	p. 141
The Room with an Evil View	p. 141
Hindering the Gatherers	p. 143
Security Framework, Programs, and Governance	p. 143
Trackers and Remote Management	p. 145
BIOS Features	p. 147
Trustless Execution Technology and Module Platform	p. 148
Enhancing the Encryption Experience	p. 149
BitLocker and TrueCrypt	p. 150
Summary	p. 151
Endnotes	p. 151
Pod Slurping	p. 153
Attack of the Data Snatchers	p. 154
Anatomy of a Slurp	p. 155
How to Recreate the Attack	p. 156
Risky Business	p. 157
Pod Proliferation	p. 158
Advancements in This Attack	p. 159
Breaking Out of Jobs' Jail	p. 160
Mitigating Measures	p. 170
Put your Clients on a Data Diet	p. 170
Hijacking an iPhone	p. 173
Summary	p. 175
Endnotes	p. 176
Social Engineering and USB come Together for a Brutal Attack	p. 177
Brain Games	p. 178
Hacking the Wetware	p. 179
Reverse Social Engineering	p. 179
Penetration of a Vulnerable Kind	p. 180
Elevated Hazards	p. 204
Legitimate Social Engineering Concerns	p. 205
Generations of Influences	p. 206
USB Multipass	p. 208
Thwarting These Behaviors	p. 208
Security Awareness and Training	p. 208
Behavioral Biometrics	p. 210
Windows Enhancements	p. 211
Summary	p. 216
Overview	p. 216
Endnotes	p. 217
Index	p. 219
Table of Contents provided by Ingram. All Rights Reserved.