Network Security Library

Network Security Library / Phishing

The Vishing Guide

Date - Nov 14, 2007

Author - Gunter Ollmann

Vishing is a relatively new term used to describe voice + phishing. It is basically an exploitation on VoIP (Voice over IP), used to socially engineer the victim into providing personal information often used for Identity Theft or to gain access to their financial accounts.

Phishing: An Interesting Twist On A Common Scam

Date - Jun 22, 2005

Author - Darren Miller

Imagine you are the CIO of a national financial institution and you've recently deployed a state of the art online transaction service for your customers. To make sure your company's network perimeter is secure, you executed two external security assessments and penetration tests. When the final report came in, your company was given a clean bill of health. At first, you felt relieved, and confident in your security measures. Shortly thereafter, your relief turned to concern. "Is it really possible that we are completely secure?" Given you're skepticism, you decide to get one more opinion.

The Phishing Guide - Understanding & Preventing Phishing Attacks

Date - Jun 08, 2005

Author - Gunter Ollmann

Phishing is the new 21st Century Crime. Organizations and their customers constantly fall prey to "Phishing Schemes". While Phishers develop evermore sophisticated attacks, network administrators, and their customers grow wary of system security and the official looking requests that mimic official business requests. This paper covers the technologies and security flaws Phishers exploit to conduct their attacks and steal your information. The information contained here should help network and security professionals arm themselves against the exploits of Phishing Scams.

Network Security Library topic  

[	26	]	Anti Spam	[	12	]	Anti Virus	[	44	]	Auditing
[	60	]	Auth. & Access Control	[	3	]	Content Management	[	103	]	Cryptography
[	12	]	Disaster Recovery	[	36	]	Firewalls & VPN's	[	6	]	Forensics
[	41	]	Harmless hacking book	[	1	]	Honeypots	[	14	]	Information Warfare
[	26	]	Intrusion Detection	[	7	]	Law	[	3	]	Managed Security Solutions
[	50	]	Misc	[	24	]	Mobile Code	[	32	]	NCSC&DoD Rainbow series
[	13	]	NetWare	[	31	]	Network Security	[	4	]	Patch Management
[	3	]	Phishing	[	38	]	Policy & Standards	[	25	]	Privacy
[	21	]	Software Engineering	[	2	]	Trojans	[	2	]	Underground
[	82	]	Unix Security	[	19	]	Web Security	[	39	]	Windows Security
[	6	]	Wireless Security