‘Ethical’ hackers put security to test
The experts were cracking systems set at ever-higher levels of security in a contest called Capture the Flag. It was devised by security firms GTSP and Telspace Systems to test the skills of professional security consultants as they break through servers protected by everything from out-of the-box security software through to the most heavily guarded systems.
Contestants worked through seven levels of protection with different challenges at each level, said Telspace Systems MD Dino Covotsos. To “capture the flag” they must hack each layer.
The experts showing their skills at Futurex were among 136 specialists from 26 countries attending the International Information Security Conference in Sandton. Their job is to look for vulnerabilities in their clients’ networks through “ethical” hacking to expose the flaws.
The demonstration aimed to educate users and help them secure their systems, said Jacques van Heerden of GTSP. “We will be holding informational sessions to educate visitors about how to make sure their systems are secured. We’ll have interactive sessions where we show them the various vulnerabilities and how to secure against them.”
Bluetooth was also in the spotlight, said Van Heerden, as many users were ignorant of how easy it was for hackers to access cellphones and personal digital assistants via wireless technology. “It’s very easy for hackers to get access to your information if your phone is not secured.”
Visitors to the event are receiving a personal demonstration of the attacks if they are carrying vulnerable Bluetooth devices. “We will be monitoring to see if there are unsecured Bluetooth devices in the vicinity, then let the users know they are vulnerable and offer to help them become more secure.”
The number of malicious attacks has increased dramatically as organised crime syndicates hack for information that can be sold, used to steal money or to hold a company to ransom.
“Our primary aim is to educate users and raise awareness,” said Van Heerden. “To do that we have to make it real and show real people the very real impact of security vulnerabilities.”
Covotsos said South African companies had become more aware of security issues but were still not always doing enough to secure their systems.
“Companies are starting to take the security threats seriously. However, our results in attempting to hack into clients’ systems are never unsuccessful, which indicates the systems are still not as secure as they could be.”
Futurex runs at Sandton Convention Centre until tomorrow.
Loading ...