Explore BrainMass

Dumpster Diving: Protecting Information

One of the things a security analyst must consider when protecting their infrastructure and information is the ability of an attacker to access information about an organization, systems they utilize, and the information their protecting. One of the techniques an attacker uses is reconnaissance. Reconnaissance is the first phase an attacker uses to gather information. This information is used to learn as much as possible about the target to determine competitive intelligence. The attacker might even uses legitimate and non-legitimate tools to monitor and scan a target system. This information is critical for an attacker to strategies their attack. Reconnaissance can also be referred to as "Footprinting."

Reconnaissance as simple as dumpster diving can divulge sensitive information. What kind of information do you think you could gather in dumpster diving? (Please answer)

Select five of the following and review what they offer and write a summary of what it does and why you would think it would help an IT security analyst.

- Whois database utility or website or;
- GEOSpider or
- Web Site
- Web Site
- Web site
- Web site
- SpiderFoot
- NEO Trace
- Angry IP
- Solarwinds
- Sensepost Footprint Tools
- BiLE Suite
- Alchemy Network Tool
- Advanced Administrative Tool
- My IP Suite
- Wikto Footprinting Tool
- SmartWhois
- ActiveWhois
- LanWhois
- CountryWhois
- WhereIsIP
- Ip2country
- CallerIP
- Web Data Extractor Tool
- Online Whois Tools
- What is MyIP
- DNS Enumerator
- SpiderFoot
- Nslookup

Solution Preview

You should understand that dumpster diving is sifting through waste to find items that have been discarded by their owners but are useful to the dumpster diver. Valuable information that can be gathered from dumpster diving includes information about business competitors. These include analysis reports, government reports, and discarded presentation. Also, dumpster diving can give important competition related information such as price lists, advertising budgets, promotions being used, tenders being submitted, and patent applications. The other important information that can be obtained during dumpster diving includes suppler information, participation details in trade shows, sales force reports, seminars organized/attended, records of terms with ...

Solution Summary

Incoming and outgoing connections are explained in this response. The answer includes 6 references used.