Re: Generating awareness amongst IT staff

[Faheem SIDDIQUI <fahimdxb () gmail com>]

Thanks to all the great tips you guys have given here.
Will need your assistance once I start to lay down the presentation details.

Regards

Sol_Invictus wrote:
> After that tell them that it even easier with a copy of the rainbow tables. 
>
> Some tips for them to remember..
>
> 1. Think like the bad guys.
> 2. Be suspicious
> 3. Default Deny
> 4. Know everything on you're network/system.
>
> A tip for you.
>
> Be careful not to "insult their intelligence"  Allow them to ask the
> questions if they don't understand.
>
> I've done many of these before, feel free to hit me offlist if you have any
> other questions.  
>
> Sol.
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Faheem SIDDIQUI
> Sent: Saturday, November 25, 2006 11:14 AM
> To: pen-test () securityfocus com
> Subject: Generating awareness amongst IT staff
>
> I am in the middle od preparing slides for security awareness presentation
> amongst IT staff (network admins/system/DBAs) etc.
>
> Security awareness is quite low amongst these guys and they seem to believe
> that the way have done it all these years, can continue all the remaining
> years too.
>
> Plan is, to create password hack using Ophcrack and run it during
> presentation. What else can I do to create real time engaging presentation
> so that these guys might sit up and take notice. How about doing a pen test
> on databases?
>
> Anyone has any ideas to make this presentation to largely IT technical
> staff...as engaging as possible?
>
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php?camp=70160000
> 0008bOW
> ------------------------------------------------------------------------
>
>
>
>
>   


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------