Browse Definitions :
Definition

offensive security

Contributor(s): Ivy Wigmore

Offensive security is a proactive and adversarial approach to protecting computer systems, networks and individuals from attacks. Conventional security -- sometimes referred to as "defensive security" -- focuses on reactive measures, such as patching software and finding and fixing system vulnerabilities. In contrast, offensive security measures are focused on seeking out the perpetrators and in some cases attempting to disable or at least disrupt their operations.

At the RSA 2012 conference, Paul Asadoorian and John Strand presented methods that companies can use to frustrate would-be attackers, gather information about them, and cautiously retaliate without illegal actions. The men, both instructors at the SANS Institute, thought that their offensive methods for penetration testing could be used defensively.

Asadoorian and Strand recommend that companies place statements in likely network entrance points warning that anyone attempting to gain access will be subjected to an NAC-like check, which would inform the attacker that their machine data, IP and MAC addresses would be gathered.

The three components of Asadoorian and Strand's method are annoyance, attribution and attack. The annoyance component consists of frustrating the attacker's attempt through tools that establish false ports, services and directories. Once the attacker is lured into the false system, he ends up looping endlessly through it.

Attribution -- accurately identifying the attacker -- is important. One method, as Asadoorian explained, is to put a Web bug in sensitive documents. If the document is accessed, the Web bug sends back information about the system that accessed it.

According to Asadoorian, the attack component should only be an enhancement of the annoyance and attribution capabilities, rather than a truly malicious -- and illegal -- assault on the attacker. 

 

This was last updated in November 2012

Continue Reading About offensive security

Join the conversation

1 comment

Send me notifications when other members comment.

Please create a username to comment.

I've got to say every time I read something that someone has put a "buzz" word to doing your job it becomes rather offensive. The idea "Offensive Security" is nothing new in fact it's just plain & simple called DOING YOUR JOB. But for those that just have picked up the "Information Assurance" buzz because it might actually get them a income, might need to know that being in front of the mess is called doing your job and it's what you are paid to do. CISO KS
Cancel

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • privacy compliance

    Privacy compliance is a company's accordance with established personal information protection guidelines, specifications or ...

  • data governance policy

    A data governance policy is a documented set of guidelines for ensuring that an organization's data and information assets are ...

SearchSecurity

  • asymmetric cryptography (public key cryptography)

    Asymmetric cryptography, also known as public-key cryptography, is a process that uses a pair of related keys -- one public key ...

  • Evil Corp

    Evil Corp is an international cybercrime network that uses malicious software to steal money from its victims' bank accounts.

  • Plundervolt

    Plundervolt is a method of hacking that involves depriving an Intel chip of power so that processing errors occur.

SearchHealthIT

  • telemedicine (telehealth)

    Telemedicine is the remote delivery of healthcare services, such as health assessments or consultations, over the ...

  • Project Nightingale

    Project Nightingale is a controversial partnership between Google and Ascension, the second largest health system in the United ...

  • medical practice management (MPM) software

    Medical practice management (MPM) software is a collection of computerized services used by healthcare professionals and ...

SearchDisasterRecovery

SearchStorage

  • 3D NAND flash

    3D NAND is a type of non-volatile flash memory in which the memory cells are stacked vertically in multiple layers.

  • M.2 SSD

    An M.2 SSD is a solid-state drive (SSD) that conforms to a computer industry specification written for internally mounted storage...

  • RAID (redundant array of independent disks)

    RAID (redundant array of independent disks) is a way of storing the same data in different places on multiple hard disks or ...

Close