Information Security News mailing list archives

Security Experts Discuss Hacking Trends


From: InfoSec News <isn () C4I ORG>
Date: Thu, 24 Aug 2000 20:47:35 -0500

http://www.techweb.com/wire/story/TWB20000824S0009

By Marcia Savage, CRN
Aug 24, 2000 (8:39 AM)

When it comes to the underground computer scene, there's a lot more to
be worried about than "script kiddies." Experts suggest a new wave of
hackers is forming on the horizon, and its goal will be more than
malicious mischief.

"There may be a whole new realm of the underground, and it may not be
a group of kids," said G. Mark Hardy, managing director at Guardent, a
Waltham, Mass., security services firm. "It may be sponsored by
national elements with intents hostile to our country. The
neighborhood is changing."

Hardy spoke at a panel discussion of the latest trends on the hacker
scene at WebSec2000. The MIS Training Institute and its security
division, the Information Security Institute, sponsored the event.

The underground has evolved from victimless tinkering with systems in
the '70s to corporate espionage and malicious attacks in the '90s,
Hardy said. In 2000, "you really need to worry about crime
syndicates," he said.

While script kiddies will always pose a nuisance, "most of your damage
is going to come from someplace else," he said.

Jacob Carlson, a security consultant, noted a recent trend towards
attacking multiple computers.

"A lot of people like to break into as many systems as possible, not
just one," he said. "It's disturbing that it's that easy to do."

An attack on more than 100 machines makes it that much more difficult
to track down the culprit, added Diana Kelley, general manager at the
research labs at security vendor Symantec Corp. (stock: SYMC) ,
Cupertino, Calif.

Panelists also noted that skilled hackers are leaving the underground
for work in the corporate world.

"The underground does seem to be dwindling," Carlson said. "They're
not so much selling out as buying in."

ISN is hosted by SecurityFocus.com
---
To unsubscribe email LISTSERV () SecurityFocus com with a message body of
"SIGNOFF ISN".


Current thread: