The Uses of White Hat Hacking Tyler Schumacher

The Uses of White Hat Hacking Tyler Schumacher schumacherty@uwplatt. edu

White. Hat Website Security Statistics Report Spring 2009 – 7 th Edition Majority of Websites Are Vulnerable

Black Hat Hackers • Malicious • Self-Serving • Anonymous

Grey Hat Hackers • Self-Satisfying • Public Disclosure • “Taggers”

White Hat Hackers • Ethical Hackers • Employed • Former Grey or Black Hats

Risks and Limitations of Use • Qualifications • Risk of Relapse

Reasons to Use • Knowledge of Tools • Can Teach Staff • Real World Experience • Hackers Are Innovative

IT Professional White Hat Hacker • Reactive • Proactive • Client List • No Qualifications • Does Not Think Like a Criminal • Thinks Like a Criminal

Mainstream Use • Law Enforcement • HP Active Countermeasures • UK. Government • Contests

What Needs to be Done • Studies of IT Professionals • Get Statistics of White Hat Use • Teach White Hat Hacking Methods

After presentation conclusion about how the sort of thing we do on the website is the sort of thing I think the school should start offering. It gets people to think the way hackers think, see things they see them so that we can better protect ourselves against them. Look up defcon http: //en. wikipedia. org/wiki/Social_engineering_(security) http: //rent-a-hacker. com/ http: //www. hackthissite. org/ http: //www. writing. com/main/view_item/item_id/255013 http: //www. ibm. com/developerworks/library/s-crack/index. html http: //whitehatsec. com/home/resource/presentation. html http: //whitehatsec. com/home/resource/whitepapers/business_logic_flaws. h tml