Ver:
Obtención de
información a base de rebuscar en los cubos de basura.
A method of
social engineering in which criminals raid rubbish bins to gather telling
personal information.
http://www.getsafeonline.org/
Dumpster Diving
is obtaining passwords and corporate directories by searching through discarded
media.
http://www.sans.org/security-resources/glossary-of-terms/
Dumpster diving
is looking for treasure in someone else's trash. (A dumpster is a large trash
container.) In the world of information technology, dumpster diving is a
technique used to retrieve information that could be used to carry out an
attack on a computer network. Dumpster diving isn't limited to searching
through the trash for obvious treasures like access codes or passwords written
down on sticky notes. Seemingly innocent information like a phone list,
calendar, or organizational chart can be used to assist an attacker using social engineering techniques to gain access to the
network. To prevent dumpster divers from learning anything valuable from your
trash, experts recommend that your company establish a disposal policy where
all paper, including print-outs, is shredded in a cross-cut shredder before
being recycled, all storage media is erased, and all staff is educated about
the danger of untracked trash.
http://searchsecurity.techtarget.com/
Temas relacionados