cybercrime - lse summer school 2010 mg270

LSE Summer School 2010MG270: Business Development and ICT Innovation

9th July 2010

“Cybercrime 2.0: When the Cloud Turns Dark”

Carlos Esteban LibreroDario GattiRoberto Held

Cybercrime refers to any crime that involves a computer and a network.

What crimes?

Crimes that primarily target computer networks or devices include:• Malware (malicious code)• Denial-of-service attacks• Computer viruses

Crimes that merely use computer networks or devices include:• Cyber stalking• Fraud and identity theft• Phishing scams• Information warfare

While the first hackers wanted to exhibit their technical superiority...

…today they are primarily motivated by economic interests.

Cyber-wars

Who will win?

Types of Cybercrime

• Spam - sending out of junk e-mails for commercial purposes;

• Malware programs – Virus, worms, trojan horse;

• Drug Trafficking

Types of Cybercrime

• Cyber Terrorism – hacking official websites;

• Obscene or Offensive Content – Adults only!!

Security Tips

• Keep programs Updated:– Anti-virus;– Firewall;– Internet;

Programs out-of-date => very insecure

Possible Solutions

• Automatic updates;

• User education;

• More efficient malware detectors;

Social Engineering Attacks

• Process of manipulating users;

• Free examples – antivirus test;

WEB ATTACKS• Growing complexity -> new vulnerabilities

• Launching malware throw web browsers / web servers

• Exploiting = download payloads

Procedure• Infecting Web Server->redirecting to infected

servers (SQL and Redirecting via .htaccess)

• Exploit web user (download payloads)

-> drive-by downloads-> social engineering

attacks (continuous growth)

Security

• System identifying malicious content throw GOOGLE search.

• Browsers (Safari, Firefox…) use information to prevent users’ visits.

Pirate Bay Attack• 4 million accounts

exposed

• Break into vulnerable database

• History and personal information (passwords, e-mails…)

Cybercrime is a critical issue not only for pages and applications on the Web.

Its implications can be greater and can affect also the real world.

Blackout that may have been caused by hackers in 2009, Brazil.

And, if you have enjoyed our presentation, you can find it at:

http://www.slideshare.net/class2010mg270