How to train your ninja
1 like850 views
This document outlines an agenda for conducting an e-banking security assessment. It discusses various aspects of assessing security such as session management, access control, authentication, and technical vulnerabilities. The document recommends delivering management and technical reports with findings, risks, values, technical details, and patching/coding recommendations. It emphasizes pentester ethics and non-disclosure agreements when conducting such assessments.
How to train your ninja
- 1. HOW TO TRAIN E-banking Security Assessment K-159 <[email protected]> Your Ninja
- 2. 2 A Ninja?
- 3. The Agenda 3 NO HIDDEN AGENDA
- 5. PROLOG
- 6. 6 EVER CHOOSED A BANK ‘COZ THEIR SECURE IT SYSTEM?
- 9. 9 John Dilinger - Public Enemy (2010)
- 11. INSIDE THE BANK
- 12. THE BANK IS .. Deposits,Loan,prosperity
- 13. Old Management New Management Technology dollar stingy Aggressive visionary technical savvy SHIFTING ORG.BEHAVIOUR
- 14. COMMON SITUATION High risk.The IT department is high risk The Data Center is small and crowded There is no Help Desk system Most of the communication lines are at speeds of 64 K The core banking system is old and obsolete The Trade Finance System is old and obsolete The ATM switch is old and cannot support many of the new ATM functions required The Call Center is obsolete and supports only 8 agents
- 15. E-Banking Is ..
- 17. Bank Central Regulation Peraturan BI No. 5/8/PBI/2003 Surat Edaran BI No. 6/18/DPNP, tanggal 20 April 2004
- 18. THREAD INCRESE EACH HOUR
- 19. PENTESTER ETHICS
- 23. Deliverable ..
- 27. JIM GEOVEDI
- 28. Y3DIPS
- 29. Conclusion..
- 30. Please Be Safe!
- 31. Q&A
- 33. CreditsPage1: http://www.ninjaonline.co.uk/media/gbu0/prodlg/ninjasuit.jpg Page2: http://alformer259.files.wordpress.com/2009/11/dsc001511.jpg Page3: http://www.flickr.com/photos/wienwardana/3165753895/ Page4: Kendi Demonic Photograph Page5: http://www.flickr.com/photos/anonymouscollective/2291139919 Page6: http://www.flickr.com/photos/anonymouscollective/2291896028/sizes/l/in/photostream/ Page7: http://www.flickr.com/photos/cverdier/4837773532/sizes/l/in/photostream/ Page8: http://www.detikfinance.com/read/2010/10/05/183003/1456367/68/akhir-kisah-si-pembobol-bank-rp-67-triliun Page9: http://www.flickr.com/photos/37021726@N07/3595094343/sizes/l/in/photostream/ Page10: http://cdn-images.hollywood.com/site/insideman_dc.jpg Page11: http://www.familieharmsen.nl/vakanties/Zomer2001/TikabooValley/MVC-288F.JPG Page12: http://www.primaironline.com/images_content/20100525BankIndonesia%20bankir-indonesia.org.jpg Page14:http://www.flickr.com/photos/sutje/1315711528 Page15: http://www.flickr.com/photos/seier/3463984860/sizes/z/in/photostream/ Page16: http://www.flickr.com/photos/fabiano/2783656239/sizes/l/in/photostream/ Page18: http://www.flickr.com/photos/felixtito/334828049 Page19: http://www.files.chem.vt.edu/chem-dept/tissue/images/ethics180x120.png Page20 : http://2.bp.blogspot.com/_VbdMFZn0qEM/TAHiacMpj9I/AAAAAAAAAmQ/OBKaqC0SN9g/s320/ ethics_header.jpgs Page21: http://www.flickr.com/photos/dcdead/4527722719 Page22: http://www.flickr.com/photos/sugree/3024642081 Page23: http://www.flickr.com/photos/tatraskoda/2057210204/sizes/o/in/photostream/ Page24: http://www.flickr.com/photos/meetings/2073768553/sizes/o/in/photostream/ Page25: http://www.flickr.com/photos/thecrimsonbat/4627770158 Page26: http://www.flickr.com/photos/ingythewingy/4660595849/sizes/l/in/photostream/ Page27: http://www.flickr.com/photos/gvd06a/408242761/ page28: http://sphotos.ak.fbcdn.net/hphotos-ak-ash1/ hs062.ash1/6926_149011886357_693241357_2571740_7209947_n.jpg Page29: http://www.flickr.com/photos/shadphotos/207233715/sizes/m/in/photostream/ Page30: http://www.flickr.com/photos/rundstedt/4412545871/sizes/l/in/photostream/