Embed Size (px)
Citation preview
05/03/2023 Secure Banking Solutions, LLC
1
Secure Banking Solutions InternshipSEPTEMBER 9TH – DECEMBER 9TH
05/03/2023 Secure Banking Solutions, LLC
2My Job Title
Christian RiesInformation Security Consultant InternEmail: [email protected]
05/03/2023 Secure Banking Solutions, LLC
3Outline of Topics
Why is Security Important? My Role at SBS Example Work
Technical Services TRAC Support Staff Projects
Social Engineering Pre-Text Calling Unknown Media
05/03/2023 Secure Banking Solutions, LLC
4Why is Security important?
C onfidentialityI ntegrityA vailability
The Pros & Cons of an overly Secured Bike
05/03/2023 Secure Banking Solutions, LLC
5My Role at SBS
Technical Services Social EngineeringSupport Staff Projects
05/03/2023 Secure Banking Solutions, LLC
6Technical Services
TRAC ‘Homework’ – Assignments Client Accounts
Projects Data Entry SBS Institute ‘Work Papers’ VA (Vulnerabilities Assessment) Vendor Management Security Awareness Training
05/03/2023 Secure Banking Solutions, LLC
7Technical Services
Gain practical and factual knowledge regarding in
depth business processes
05/03/2023 Secure Banking Solutions, LLC
8Security Awareness Training
Great Final Project to recapture information and experience gained during internship
Unique opportunity to get actual face to face experience with client
05/03/2023 Secure Banking Solutions, LLC
9Social Engineering
Human-based Pretext Calling Physical Impersonation
Computer-based Phishing Unknown Media
05/03/2023 Secure Banking Solutions, LLC
10Pretext Calling
Social Engineering over the phone Surprisingly Easy
Information is everywhere Very Effective Help Educate Clients with practical examples instead of boring
theory Example Compliance Officer
“SE” Reports
05/03/2023 Secure Banking Solutions, LLC
11Social Media
Public Information Facebook, Twitter, etc.
Makes Identity theft easy Number one source for intel Once information is online, you can’t possibly tell who has access to
it Example (Online Dead Certificate)
“Think like a bad guy” Use this weakness of new Social Norm to demonstrate importance of
Security
05/03/2023 Secure Banking Solutions, LLC
12Technical Exploitation
Using technical means to obtain information Email Malicious Files Hardware
Extremely efficient when combined with Social Engineering Phishing Physical Impersonation
05/03/2023 Secure Banking Solutions, LLC
13Unknown Media Devices
Type of Social Engineering Used to further test security controls for client
Created multiple physical devices
05/03/2023 Secure Banking Solutions, LLC
14Summary
Diverse ‘Field of Study’ related work environment Ability to gain lot’s of real world experience
05/03/2023 Secure Banking Solutions, LLC
15
Thank You For Your Time
