Slashdot Mirror
The Hacker Profiling Project
NewsForge writes "NewsForge is running a story about a project aiming to profile hackers like the police do with common criminals. Not based out of the U.S. per se, this project falls under the auspices of the United Nations Interregional Crime and Justice Research Institute (UNICRI). The project was co-founded by Stefania Ducci, in 2004, along with Raoul Chiesa." From the article: "NewsForge: What would the project concretely produce as final output? Stefania Ducci: The final goal is a real and complete methodology for hacker profiling, released under GNU/FDL. This means that, at the end of our research project, if a company will send us its (as detailed as possible) logs related to an intrusion, we — exactly like in the TV show C.S.I. when evidence is found on the crime scene — will be able to provide a profile of the attacker. By 'profile' we mean, for example, his technical skills, his probable geographic location, an analysis of his modus operandi, and of a lot of other, small and big, traces left on the crime scene. This will also permit us to observe and, wherever possible, preview new attack trends, show rapid and drastic behavior changes, and, finally, provide a real picture of the world of hacking and its international scene."
init 11 - for when you need that edge.
"exactly like in the TV show C.S.I. when evidence is found on the crime scene"
You mean they stand around in a dark room and spout techno-BS while a computer graphically and textually points out the obvious?
Oh that hacker is using Rootkit 123 so it must be somebody on the Internet!
White kid? Bad complexion? Limited social skills? Above average intelligence? Lives in parents basement?
"Round up the usual suspects"
No folly is more costly than the folly of intolerant idealism. - Winston Churchill
So if one does get cought by the UN will they just sanction them and them place them on double secret probabtion.
Knowledge = Power
P= W/t
t=Money
Money = Work/Knowledge so the less you know the more you make
Will the rankings be computerized?
Reminds me of a project the Argentinian military presented about a year ago in a security congress I went to.
The idea was to "fingerprint" hacking attempts by measuring timing in typing on terminals. Say, a hacker would attack a system, a fingerprint would be taken (of the unknown hacker's typing habits) and then on another break-in, a new fingerprint would be taken and compared to previous ones to determine if it is a formely filed hacker.
Another possibility from that idea was to use the fingerprint also to verify the user's identity (you have to enter a password, but the server also fingerprints you and denies access if the fingerprint does not match).
Definitely one of the best expositions in the congress. Pity I cannot find any papers. I found the original presentation, in spanish though, by searching for "Remote identification of keystroke patterns" on google.
GPG 0x1B479C78
Subject: One Perl Hacker; four-space indentation; 12% comments; averaging 34 lines per sub; prefers OO interface when available; abhores cuddly elses.
Cm'on now, can't we even get our terminology straight?.
AC: Only on slashdot... could the sentence "My hovercraft is full of eels." be moderated "+4, Insightful
That way when someone joins a project, you can look up his profile and read, "thinks that orange on neon green is an acceptable combination for user interfaces", and know to only let him work on the back-end of a project.
Frankly, some of those interfaces out there in FS/OS land are at least a misdemeanor. This project is long overdue.
the more accurate the calculations became, the more the concepts tended to vanish into thin air. R. S. Mulliken
Word meanings change, and can have multiple meanings. Sorry if you've some personal attatchment to those 6 letters arranged in a certain, but the fight was over long ago. Find a new word for what you're talking about, because hacker now means someone who breaks into computers. You can't fight what 99% of the population accepts as the definition, no matter what some wikipedia entry says.
AccountKiller
Comment removed based on user account deletion
This has been modded as funny but it really needs to be modded insightful. Governments the world over are trying very hard to get data such as the Amazon purchase data and store that in a useful database. Buying a book about rootkits very well may put you on a list of, oh, let's call them hackers who need to be kept track of. This, "hacker", book purchase can be cross referenced with the hacker's employment records, possibly including training received. It is all too possible that your phone or data line could be tapped and monitored because you are suspected of a crime based on nothing more than you having the skills necessary to commit said crime. Just because I am capable of lifting a baseball bat and swinging it doesn't mean that I should be an immediate suspect should someone be murdered by baseball bat. Having the ability to commit a network intrusion shouldn't make me a suspect of a network intrusion. That should only be the case if there is some indication that it was me.
So here it is: http://www.adequacy.org/stories/2001.12.2.42056.21 47.html
enjoy
I assume they mean determining the region (and I would still consider this just as untrustworthy as using the IP) by figuring in things such as the types of attacks used, apparent knowledge, what they were attacking, what information they took/used/ignored, etc as compared to trends of the same measures from different areas of the world.