Attacks could be made economically unfeasible
Attacks could be made economically unfeasible

Experts beat script kiddies at their own game

Time to turn the tables, say security experts

Written by Iain Thomson at the RSA Conference in San Francisco

Script kiddies could be easier to defeat than at first thought, security experts have claimed.

The phenomenon of technology amateurs who use virus and hacking toolkits to launch attacks on websites and servers has caused numerous security headaches. But their methods of operation can be turned against them, according to a panel of experts speaking at this year's RSA Conference.

"If we could make every email cost three cents, spam would go away," explained Daniel Houser, technical director for a Fortune 500 company. "It's about making attacks economically unfeasible, then they'll just go away."

He explained that hackers would formerly spend time investigating specific systems, spending hours researching their targets, going through office litter to find information and then launching attacks based on that background work.

In contrast, today's script kiddies simply download tools from the internet and scan automatically to try and find vulnerable systems, finding targets of opportunity rather than tackling specific companies.

The proposed solution is to use spare IP addresses to set up dummy servers, similar to honeypots used to collect information on hacker attacks. These could be used to mask a company's real internet portal.

John Rockwood, IT director at Nationwide, said: "We are trying to create a honey network. You can hide internet facing boxes in a haystack so huge that it's economically unfeasible to attack.

"You can intermix your real boxes in with the false boxes because script kiddies are not going to have the patience to go through each one and try and figure them out."

Rockwood and Hauser agreed that script kiddies were part of "the MTV generation" with short attention spans. By making it difficult to determine correct targets, the amateur hackers would move on to easier sites.

Tags:

reader comments

related articles

InfoSecurity Europe 2005

Most computer hacking an 'inside job'

Biggest threat from current or former employees, warns Met Police 26 Apr 2005

 

IT administrators told to get hacking

Time to learn the tricks of the trade, says security expert 21 Feb 2005

RSA Conference 2005

The information security event of the year rolls into San Francisco 15 Feb 2005

From Russia with malice

Organised online crime has risen dramatically in the former Soviet Union - and it's still growing 05 Jan 2005

Security

The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack. 15 Apr 2004

related whitepapers

today's top stories

WiMax: Threat or opportunity?

We examine the merits of WiMax and its benefits relative to other wireless technologies in our latest video 13 Oct 2008

Learning from the credit crunch to avoid a broadband crunch

While it might be the most pressing issue de jour , the financial system isn’t the only area where government needs to... 10 Oct 2008

How careerism can warp IT procurement

Many working in IT put their career interests before those of their employer when weighing up purchasing options 10 Oct 2008

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Computing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security

We discuss the effect of shotgun mergers and acquisitions on financial services IT staff, and examine the industry regulator's plan to fine directors for information security breaches 09 Oct 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job


IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Are you worried about your job prospects in IT over the next 12 months?

Are you worried about your job prospects in IT over the next 12 months?

Will the economic crisis affect your job prospects?

Previous poll results

Latest audio and video articles

Remote workerVideo

WiMax: Threat or opportunity?

We examine the merits of WiMax and its benefits relative to other wireless technologies in our latest video 13 Oct 2008

programming codeVideo

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Latest in-depth articles

Financial Services Authority buildingAnalysis

FSA threatens executives with fines

Senior management to be held accountable for security lapses at banks 09 Oct 2008

Comment

Broadband must be a spending priority

For the economic health of the nation, the government would do better to bankroll an optical fibre rollout rather than prop up profligate banks 09 Oct 2008

Advertisement

Primary Navigation