- Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used
to retrieve information that could be used to carry out an attack on a computer network. Dumpster diving isn't limited to
searching through the trash for obvious treasures like access codes or passwords written down on sticky notes. Seemingly innocent information like a
phone list, calendar, or organizational chart can be used to assist an attacker using social engineering techniques to gain access
to the network. To prevent dumpster divers from learning anything valuable from your trash, experts recommend that your
company establish a disposal policy where all paper, including print-outs, is shredded in a cross-cut shredder before
being recycled, all storage media is erased, and all staff is educated about the danger of untracked trash.
Learn more about Security Awareness Training and Internal Threats
Quiz: Anatomy of an attack: Take this five-question quiz and test your knowledge of social-engineering and data-mining attacks.
Security Metrics: Replacing Fear, Uncertainty, and Doubt: In this chapter excerpt from "Security Metrics: Replacing Fear, Uncertainty and Doubt," author Andrew Jaquith reveals ways to present security data in a clean and elegant manner.
Threats to physical security: The sixth tip in our series, "How to assess and mitigate information security threats".
LAST UPDATED:
14 Feb 2002
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
Creating a HIPAA employee training program Want to get your employees on board the HIPPA/HITECH compliance train? Learn how to create a HIPAA employee awareness training program.
insider threat(SearchSecurity.com) An insider threat is a malicious hacker (also called a cracker or a black hat) who is an employee or officer of a business, institution, or agency....
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.
Show me everything on 
- Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used
to retrieve information that could be used to carry out an attack on a computer network. Dumpster diving isn't limited to
searching through the trash for obvious treasures like access codes or passwords written down on sticky notes. Seemingly innocent information like a
phone list, calendar, or organizational chart can be used to assist an attacker using 
