Sprint’s Backbone Network
Case Study: Breaking into Sprint’s Backbone Network
Many of the technical controls put into place can be circumvented with a simple phone call. Recently, famed hacker Kevin Mitnick demonstrated this by breaking into Sprint’s backbone network. Rather than mounting a buffer overrun or DoS attack, Mitnick simply placed a call posing as a Nortel service engineer and persuaded the staff at Sprint to provide login names and passwords to the company’s switches under the guise that he needed them to perform remote maintenance on the system. Once the password information had been obtained, Mitnick was able to dial in and manipulate Sprint’s networks at will. Many people believe this was an isolated incident, and they would not fall for a similar act of social engineering, but Mitnick gained notoriety during the 1980s and 1990s by applying similar techniques to computer networks around the world. Mitnick’s more notorious crimes included accessing computer systems at the Pentagon and the North American Aerospace Defense Command (NORAD), and stealing software and source-code from major computer manufacturers. Kevin Mitnick was arrested six times, and has been working as a consultant specializing in social engineering techniques, having “gone straight” after serving a five-year sentence for his most recent crime. He even has authored several books regarding social engineering including The Art of Intrusion and The Art of Deception.
1. What procedures could help prevent a similar breach of security at your organization?
2. Phishing is usually associated with identity theft, but could this tactic also be used to gain information needed to circumvent security controls?
3. Many social engineering breaches involve using what is believed to be insider information to gain the trust of individuals in an effort to obtain confidential information. Test your ability to obtain what some might consider “insider information” using a search engine to find contact or other useful information referencing your organization.
Source: Information Age (London, UK), September 10, 2002. (Dhillon, 2017-11-17, p. 41)
Dhillon, G. (2017-11-17). Information Security: Text and Cases, 2nd Edition [VitalSource Bookshelf version]. Retrieved from vbk://9781943153244
Collepals.com Plagiarism Free Papers
Are you looking for custom essay writing service or even dissertation writing services? Just request for our write my paper service, and we'll match you with the best essay writer in your subject! With an exceptional team of professional academic experts in a wide range of subjects, we can guarantee you an unrivaled quality of custom-written papers.
Get ZERO PLAGIARISM, HUMAN WRITTEN ESSAYS
Why Hire Collepals.com writers to do your paper?
Quality- We are experienced and have access to ample research materials.
We write plagiarism Free Content
Confidential- We never share or sell your personal information to third parties.
Support-Chat with us today! We are always waiting to answer all your questions.
