SLIDE 1
Contents
Open Source Intelligence (OSINT) Application of OSINT OSINT in Spain Open challenges Conclusions
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 2
OSINT is the next Internet goldmine: Spain as an unexplored - - PowerPoint PPT Presentation
OSINT is the next Internet goldmine: Spain as an unexplored - - PowerPoint PPT Presentation
OSINT is the next Internet goldmine: Spain as an unexplored territory Javier Pastor Galindo Pantaleone Nespoli Flix Gmez Mrmol Gregorio Martnez Prez V Jornadas Nacionales de Investigacin en Ciberseguridad Contents Open Source
SLIDE 2
SLIDE 3
Collection, processing and correlation of public information from
- pen data sources.
Not new! Current era of the information à Development of automatic tools Typical data sources:
- Media
- Social Networks
- Forums and blogs
- Public Government Data
- Publications
- Commercial Data
Open Source Intelligence (OSINT)
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 3
What is it?
INTERNET
SLIDE 4
Open Source Intelligence (OSINT)
OSINT
Cybercrime and Organized Crime
Spot illegal actions Retrieve suspicious traces Monitor malicious groups
Cyber Security and Cyber Defense
Foot printing Forensics analysis Proactive auditing
Social Opinion and Sentiment Analysis
Marketing Political campaigns Disaster management
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 4
Principal use cases
- User interactions
- User messages
- User preferences
- Threat Intelligence
- Social Engineering prevention
- Pentesting
- Criminal intentions at an early stage
- Adversaries patterns
- Relationships between felonies
SLIDE 5
Open Source Intelligence (OSINT)
Huge amount of public information High capacity of computing Big data and machine learning Complementary types
- f data
Flexible purpose and wide scope
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 5
Pros vs Cons
Complexity of data management Unstructured information Misinformation Data sources reliability Strong ethical/legal considerations
SLIDE 6
Application of OSINT
SEARCH ENGINES
Google, Bing, Yahoo, Ask, DuckDuckGo, etc.
SOCIAL NETWORKS
Facebook, Twitter, LinkedIn, YouTube, Flickr, forums, etc.
OTHER OSINT SERVICES
Specific websites for searching by email address, username, real name, location, IP address, domain.
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 6
Techniques
SLIDE 7
Application of OSINT
FOCA Metagoofil Maltego InterTechniques Recon-NG Spiderfoot Shodan The Harvester
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 7
Tools
SLIDE 8
Application of OSINT
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 8
Tools comparison
SLIDE 9
OSINT in Spain
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 13
Evidences
SLIDE 10
OSINT in Spain
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 14
Evidences
SLIDE 11
Open Source Intelligence (OSINT)
Propagation of the gathering process Integration of several open data sources Detection of irrelevant data and misinformation Extension across the whole world Enhancement of the analysis process Awareness of ethical and legal considerations
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 20
Open challenges
SLIDE 12
Conclusions
OSINT is a powerful paradigm for everybody Spain is a goldmine due to its Open Data maturity Lack of robust and self-managed approaches ULTIMATE GOAL OF OSINT Ensure the desired finding for a certain purpose, in an automated and a self- driven way
JNIC 2019 OSINT is the next Internet goldmine: Spain as an unexplored territory 21
SLIDE 13