- Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used
to retrieve information that could be used to carry out an attack on a computer network. Dumpster diving isn't limited to
searching through the trash for obvious treasures like access codes or passwords written down on sticky notes. Seemingly innocent information like a
phone list, calendar, or organizational chart can be used to assist an attacker using social engineering techniques to gain access
to the network. To prevent dumpster divers from learning anything valuable from your trash, experts recommend that your
company establish a disposal policy where all paper, including print-outs, is shredded in a cross-cut shredder before
being recycled, all storage media is erased, and all staff is educated about the danger of untracked trash.
Learn more about Security Awareness Training and Internal Threats
How to choose the right SIM: There are dozens of security information management (SIM) tools on the market and they each have their own strengths and weaknesses. Choosing the wrong solution, however, is not just an issue of ...
Quiz: Anatomy of an attack: Take this five-question quiz and test your knowledge of social-engineering and data-mining attacks.
Security Metrics: Replacing Fear, Uncertainty, and Doubt: In this chapter excerpt from "Security Metrics: Replacing Fear, Uncertainty and Doubt," author Andrew Jaquith reveals ways to present security data in a clean and elegant manner.
LAST UPDATED:
14 Feb 2002
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
insider threat(SearchSecurity.com) An insider threat is a malicious hacker (also called a cracker or a black hat) who is an employee or officer of a business, institution, or agency....
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.
Show me everything on 
- Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used
to retrieve information that could be used to carry out an attack on a computer network. Dumpster diving isn't limited to
searching through the trash for obvious treasures like access codes or passwords written down on sticky notes. Seemingly innocent information like a
phone list, calendar, or organizational chart can be used to assist an attacker using 
