Security management Toolkit

What can you learn from a hacker site?

Michael Mullins Tech Republic

Published: 20 Jan 2004 11:50 GMT

Con: Trojans
Use a sacrificial machine to scan everything and test every file you download. Make sure this machine doesn't have rights to any part of your network. The laptop I use to visit the dark side of the Internet has given me a Masters degree in image restoration.

Zipped up hacking utilities often have a Trojan, worm or virus attached. It's easy to get complacent and accidentally unleash a worm or virus from the inside that would have never made it past your normal security perimeter.

Final thoughts
I spend about 20 percent of my time amongst the enemy, and I'd say it's been time well spent. I've heard about worms, such as Code Red, and security exploits before they're launched. From a hacker site, I learned how Code Red targeted a specific DLL on Microsoft Web servers. This information allowed me to minimise the worm's effect within our networks. To my way of thinking, if you learn something from a hacker site that helps you defend or secure your network, then the end justifies the means.

Also, if you're careful, the enemy will never know you're there.