Technical misattribution is the process of masking the identifying information that computers and networks reveal. In part two of this four-part series, I will take a look at technical misattribution specifically.
Misattribution is a term used mostly within the national security community to refer to activities conducted under some kind of assumed identity. In this four-part series, I will go into detail about digital misattribution, operational misattribution, and misattribution challenges.
Many criminal investigations now take place online. Online investigators require different tools, skills, and best practices than in traditional investigations.
Open Source Intelligence, or OSINT, is intelligence developed from sources that are free, public, and legal to access. In the linked video, I discuss the history of OSINT, how OSINT is used and collected, and some examples of how OSINT has been used to great effect.
Don't spend your time trying to mitigate extreme attacks against your organization. It is often failures in security basics that take down major organizations. Focus on the countless manageable vulnerabilities that you can control and protect against.
When reading the Mueller indictment of the Russian DNC hackers, I was stunned to see just how much visibility the US had into the hackers’ operations. In my recent Security Week article, I examine the hackers’ attempts to obfuscate their activities, and discuss what particular actions led to misattribution failure.
When you’re setting up a managed attribution (MA) system for your specific mission, there are many different factors to consider that will determine your requirements. There is no one-size-fits-all solution when it comes to covert online operations. Every mission scenario or situation requires its own set-up. It is important to...
Listen to full podcast discussing how to use the Tor browser to access dark web sites while protecting you identity, organization, and mission.
The internet is in a state of exponential growth, producing high volumes of content that is available for public scrutiny, whether for social means or, in the case of the intelligence community, for security purposes. In the shadows of our increasingly digital world, the dark web has grown and gained...
In my recent Security Week Article, “The Impending Facial Recognition Singularity,” I discuss how it is more difficult to remain anonymous, both online and off, these days. A major reason is that facial recognition systems are becoming cheaper, better, easier to use, and more widely deployed, while social media platforms...
