dumpster diving
Home > Security Definitions - Dumpster diving
SearchSecurity.com Definitions (Powered by WhatIs.com)
EMAIL THIS
LOOK UP TECH TERMS Powered by: WhatIs.com
Search listings for thousands of IT terms:
Browse tech terms alphabetically:
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z #

dumpster diving



Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   

DEFINITION - Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used to retrieve information that could be used to carry out an attack on a computer network. Dumpster diving isn't limited to searching through the trash for obvious treasures like access codes or passwords written down on sticky notes. Seemingly innocent information like a phone list, calendar, or organizational chart can be used to assist an attacker using social engineering techniques to gain access to the network. To prevent dumpster divers from learning anything valuable from your trash, experts recommend that your company establish a disposal policy where all paper, including print-outs, is shredded in a cross-cut shredder before being recycled, all storage media is erased, and all staff is educated about the danger of untracked trash.

LAST UPDATED: 14 Feb 2002

Read more about dumpster diving:
- This Internet Security Systems Web site lists what dumpster divers look for.
- SearchSecurity provides links to more information about dumpster diving.


Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Countermeasures against targeted attacks in the enterprise
In this tip, Markus Jakobsson details the ills of social data mining and how technology can help thwart attacks that seek to exploit trusted...
Quiz: Anatomy of an attack
Take this five-question quiz and test your knowledge of social-engineering and data-mining attacks.
Stolen data ending up in Google cache, say researchers
Unprotected hacker drop sites are being crawled by search engines. Passwords, Social Security numbers and sensitive business information can be...

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
pretexting  (SearchCIO.com)
Pretexting is a form of social engineering in which an individual lies about his or her intentions or identity to obtain personal data about another...
shoulder surfing  (SearchSecurity.com)


TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts