book

Blackjacking

Name: Blackjacking
Author: Daniel V. Hoffman
ISBN: 9780470127544

by Daniel V. Hoffman

April 2007

Intermediate to advanced

312 pages

6h 52m

English

Wiley

Read now

Unlock full access

Copyright
1. 1Dedication
2. 2About the Author
3. 3Acknowledgements
4. 4What Is Blackjacking?
When Is a Computer Not a Computer?The Flow of This Book
I. Understanding the Threats and Devices
1. Understanding the Threats
Quantifying the ThreatThe Malware ThreatDirect AttackData‐Communication InterceptionAuthentication Spoofing and SniffingPhysical CompromiseMobile Device Enterprise InfrastructurePC and LAN ConnectivityFundamental Changes in Security StrategyProtecting the Mobile Device ItselfEnforcing Compliance on the Mobile DeviceAddressing Security Deficiencies AutomaticallyImplementing Layered SecurityControlling and Protecting DataThings to Remember
2. Understanding the Devices
BlackBerrysBlackBerry Business PhonesBlackBerry Handheld DevicesBlackBerry‐Enabled DevicesPocket PCsDell Axim Pocket PCsHP Pocket PCsPalm Pocket PCsMotorola Pocket PCPalm HandheldsPalm SmartphonesCell PhonesSymbian OS Cell PhonesNon–Symbian OS Cell PhonesThings to Remember
II. How BlackBerrys Are Hacked, and How to Protect Them
3. Exploiting BlackBerry Devices
Malware Is Threatening Your BlackBerryAnalyzing a Malware AttackGathering InformationSetting Up for the Attack and Covering His TracksLaunching the AttackProtecting Against This AttackLearning about New VulnerabilitiesBlackBerry Antivirus SoftwareAttacking a BlackBerry DirectlyAttacking via IP AddressAttacking via MalwareAntimalware ApplicationsEnterprise‐Grade Firewall with IDS/IPSThe BlackBerry FirewallSetting Firewall Options for Individual ApplicationsEnsuring the Device Has the Latest UpdatesEducating Users about RisksIntercepting BlackBerry CommunicationWhat Data Is Being Transmitted?How Is Data Being Transmitted?Carrier Internet AccessEvDOGSMGPRSBluetoothEncrypting Bluetooth DataControlling PairingsProtecting Your BlackBerry against BluetoothThe BlackBerry Wi‐Fi InterfacePhysically Compromising a BlackBerry by Spoofing and Intercepting AuthenticationHow Physical Compromise HappensPreventing Physical CompromiseProtecting a Stand‐Alone BlackBerryPreventing Unauthorized AccessThe Truth About Wiping A Lost or Stolen BlackBerryImplementing Content ProtectionSpoofing and Intercepting AuthenticationBlackBerry Security ChecklistThings to Remember

4. Hacking the Supporting BlackBerry Infrastructure
Good and Bad: A Conduit to Your LANUnderstanding the BlackBerry InfrastructureBlackBerry Infrastructure ComponentsInfrastructure Design ConsiderationsAttacking the BlackBerry InfrastructureThe Attacker's Side of the StoryInsecure Server ConfigurationInsecure TopologyBBProxyThings to Remember
5. Protecting Your PC and LAN from BlackBerrys
Controlling Data Is CriticalHow Companies Lose Control of DataHow to Control DataCreate and Communicate a Formal PolicyEnforce Security Policies with Available TechnologyThreats from BlackBerry‐Provided Internet AccessInternet AttackThe Attacker's Side of the StoryPreventing the AttackStay Up‐to‐Date with PatchesUse a Personal FirewallControlling Data Coming from a BlackBerryAnalyze the Data Coming from the BlackBerryAnalyze the Data as It Resides on the BlackBerryControl Which Devices Can Connect to Your Enterprise PCsThings to Remember
III. How PDAs Are Hacked, and How to Protect Them
6. Exploiting PDAs
Corrupting Your PDA with MalwareBackdoor Malware for the Pocket PCOther PDA MalwarePDA Antimalware ProgramsKaspersky Security for PDAsJSJ AntivirusTrend Micro Mobile SecuritySymantec AntiVirus for HandheldsMcAfee VirusScan MobileTargeting a PDA DirectlyFinding a PDAMaking a PDA StealthyPDA Firewall ApplicationsTrend Micro Mobile Security (for PDA)Airscanner Mobile Firewall (for Pocket PC)Intercepting PDA CommunicationSurfing the Internet at Public Wi‐Fi HotspotsUsing IM and Checking Email at Public Wi‐Fi HotspotsUsing Virtual Private Networks (VPN) to Secure DataPDA Authentication Spoofing and InterceptionSniffing Email AuthenticationStealing Credentials with Access Point (AP) PhishingIntercepting Authentication via SSL Man‐in‐the‐MiddleCompromising the PDA PhysicallyControlling Access to the PDAPalm PDA SecurityPocket PC SecurityEncrypting Data on the PDAPalm PDA EncryptionPocket‐PC EncryptionThings to Remember
7. Hacking the Supporting PDA Infrastructure
Connecting a PDA to the LAN Is Good and BadYou Get What You Pay ForStrengthen the Wireless InfrastructureUsing PDA VPN Clients to Protect the InfrastructureBe Smart about Providing AccessProtect Credentials—Protect the InfrastructureControl Access to Email with VPN ClientsThings to Remember
8. Protecting Your PC and LAN from PDAs
Connecting PDAs to Enterprise ResourcesTransferring Data with a Pocket PCTransferring Data with a Palm DeviceWhy Transferring Data Is a ProblemPDAs May Be ContagiousGood Intentions, Bad ResultsAnatomy of an InfectionInfection by a Pocket PCInfection by a Palm DevicePreventing PDAs from Bringing Malware into the EnterpriseEnsure PCs Are Using Antivirus Software ProperlyEnsure All PDAs Contain Antivirus SoftwareControl Whether PDAs Can Connect to PCsCentralized Management Tools for the PDAThings to Remember
IV. How Cell Phones Are Hacked, and How to Protect Them
9. Exploiting Cell Phones
Cell‐Phone MalwareThe King of All Cell‐Phone Malware?FlexiSpy: Trojan or Valid Software?Other Cell‐Phone MalwareStopping Cell‐Phone MalwareTrend Micro Mobile Security for SymbianSymantec Mobile Security for SymbianF‐Secure Mobile SecurityStealing Data via BluetoothDiscovering a Cell Phone via BluetoothAttacking a Cell Phone via BluetoothPreventing Bluetooth AttacksIntercepting Cell‐Phone CommunicationPhysical Compromise and Cell‐Phone Authentication SpoofingA Real‐World ExampleAnalyzing Physical TamperingPreventing Physical TamperingSpoofing Authentication with a Cell PhoneThings to Remember
0. Protecting the Enterprise PC and LAN from Cell Phones
Cell Phones May Bring in MalwareHow It HappensHow to Stop the AttackExposing Enterprise EmailA Creative Way to Access Enterprise EmailPrevent Email ForwardingExporting Enterprise Data and Clandestine Data GatheringMobile Phone ToolsClandestine Information GatheringThings to Remember
1. References
Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9

Overview

Today, it is almost impossible to do business without a cell phone and a BlackBerry or PDA. These devices are the lifeline for companies large and small—and nobody knows this better than a hacker. Traditionally, security for mobile devices has held a low priority. Now, a certified ethical hacker explains in this book why this must change and how to change it. Packed with sobering examples of actual attacks, this unique resource shows you how to mount your counterattack.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780470127544Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills