Curbing Threats & Spear Phishing The Promise & Results with DMARC
|
|
|
- Aubrie Short
- 10 years ago
- Views:
Transcription
1 SESSION ID: TECH-W03 Curbing Threats & Spear Phishing The Promise & Results with DMARC MODERATOR: Craig Spiezle Executive Director & President Online Trust PANELISTS: Pat Peterson Chief Executive Officer, Agari J. Trent Adams Sr. Internet Security Advisor, PayPal John Scarrow General Manager, Online Security Services Microsoft Corporation
2 Overview Problem & challenge as a threat vector Authentication Overview All Published RFC s SPF Authorizing the servers DKIM Authenticating the message DMARC Policy and Reporting Case Studies; Where Are we Today? Apply What You have Learned 2
3 Problem 3
4 Attack Impact Anthem Data Breach 80M Consumer Records Compromised THE 1-2 PUNCH 18% success rate of phishing 14.5 Million Victims 25 th February - ATTORNEY GENERALS ISSUES WARNING IN 10 STATES 400 Brands, 50% New Targeted by Malicious Every Quarter 4
5 What is DMARC? Domain-based Message Authentication, Reporting & Conformance Specification to help reduce the potential for -based abuse by solving a couple of long-standing operational, deployment, and reporting issues related to authentication protocols. Standardizes how receivers perform authentication using the well-known SPF and DKIM mechanisms 5
6 6 Authentication Overview SPF DKIM Authenticates Message Path Authorized senders in DNS Authenticates Message Content Public encryption keys in DNS DMARC Consistency A method to leverage the best of SPF and DKIM Policy Senders can declare how to process unauthenticate d Visibility Reports on how receivers process received Aggregated Insights Telemetry into your mail streams (RUA) Failure & Spoofed reports (RUF)
7 DMARC Who should care 83% CISO CMO 42% of CISO s that agree brand protection is their responsibility. Secure Protect Respond Acquire Retain Monetize of consumers less likely to do business with you following an attack Cloudmark Study CSO magazine's annual State of the CSO survey Loyal Brand Advocate
8 DMARC Solving the problem Success criteria reduce hijacked accounts Reject policies on 35 active and defensive domains Rejected 30M s within days the majority of them having Cryptolocker
9 Activity Case Study These truths are self-evident: must be protected as a trusted channel of communication. protection extends beyond our direct control. No single solution to protect . Failing to protect results in measurable losses. Activity Drops After Phishing Incident Incident Time
10 Proof Points PayPal noticed 70% drop in reported phishing within the US following the publication of the DMARC specification. 1 DMARC drove a 14% reduction in detected phishing in 2014 vs as measured against organizations within the Financial Sector. 2 DMARC effectively protects ~80% of PayPal customers from spoofed domain PayPal data for Kaspersky Lab Report: 3. PayPal data as of March, 2015
11 Where Are We Today? DMARC R/Q DMARC R/Q DMARC R/Q FDIC % 2.0% 21.0% 2.0% 24.0% 6.0% IR % 0.1% 6.2% 2.0% 9.4% 2.4% Federal % 0.0% 6.0% 0.0% 12.0% 2.0% Social % 14.0% 36.0% 18.0% 46.0% 26.0% Source: OTA Analysis as of April 9, IR 500 (Internet Retailer Top 500, Social (gaming, social, dating, storage and other top visited sites excluding content, banking and commerce) sites. DNS validator tool R/Q Reject or quarantine policy Lists updated as of April 9, 2015 based on current rankings. See for details. 11
12 But DMARC Coverage Varies DMARC protection requires mailbox provider adoption to be effective. Coverage varies by region, driven by the top 5 regional mailbox providers. US coverage is the strongest: ~85% Global average: ~63% Germany has the lowest: ~30%
13 Apply What You Have Learned Today Within 1 week Publish a DMARC p=none Policy (aka. monitor only ) Within 30 days Compete a audit of all domains Evaluate Flows + Threats Lock Down Defensive & Parked Domains Pressure MTA / enterprise vendors to support authentication Within 90 days Implement SPF & DKIM on all domains and subdomains SPF -all Record Move to DMARC p=reject if / when necessary
14 Resources Security & Integrity Resources Agari Online Trust Audit & Honor Roll Symantec
2015 Online Trust Audit & Honor Roll Email Practices Deep Dive July 7, 2015. 2015 All rights reserved. Online Trust Alliance (OTA) Slide 1
2015 Online Trust Audit & Honor Roll Email Practices Deep Dive July 7, 2015 Mike Jones Director Agari Craig Spiezle Executive Director & President Online Trust Alliance Brian Westnedge Sr. Director, Client
THE DMARC GUIDE. Understanding DMARC for Securing Email
THE DMARC GUIDE Understanding DMARC for Securing Email The History - Introduction Email despite its importance, ubiquity, and staying power has never been secure. Prior attempts at security have failed
Protect your brand from phishing emails by implementing DMARC 1
Protect your brand from phishing emails by implementing DMARC 1 Message from the Certified Senders Alliance supported by AOL, Microsoft and Google In the following article we want to clarify why marketers
Migrating to.bank A step-by-step roadmap for migrating to.bank
Migrating to.bank A step-by-step roadmap for migrating to.bank 11/19/2015 Advanced.BANK Webinar for ICBA Members 1 Webinar Presenters Craig Schwartz ftld Registry Managing Director Managing.BANK and.insurance
Internet Standards. Sam Silberman, Constant Contact
Internet Standards Sam Silberman, Constant Contact What are Standards? World without Standards We live in a connected world Topics DMARC (Indirect flows) Security/Privacy TLS over SMTP End-to-end encryption
Protect Outbound Mail with DMARC
MDaemon Messaging Server How To Quick Start Guide Protect Outbound Mail with DMARC To protect outbound mail from your domain, you will need to create a DMARC record for your domain. We recommend carefully
A New Way For Emailers To Defend Themselves Against Email Fraud
June 27, 2012 Defining DMARC A New Way For Emailers To Defend Themselves Against Email Fraud by Shar VanBoskirk with Sarah Glass and Elizabeth Komar Why Read This Report Hundreds of brands are hijacked
DMARC and your.bank Domain. September 2015 v
DMARC and your.bank Domain September 2015 v EMAIL MAKES IT EASY FOR CRIMINALS TO REACH YOUR CUSTOMERS USING YOUR BRAND Phishing and brand abuse erode consumer trust Attacks cause lasting brand damage Fallout
THE SECURITY EXECUTIVE S GUIDE TO A SECURE INBOX. How to create a thriving business through email trust
THE SECURITY EXECUTIVE S GUIDE TO A SECURE INBOX How to create a thriving business through email trust FORWARD Today the role of the CISO is evolving rapidly. Gone are the days of the CISO as primarily
This user guide provides guidelines and recommendations for setting up your business s domain authentication to improve your deliverability rating.
BLUEHORNET USER GUIDE EMAIL AUTHENTICATION AND DOMAIN MONITORING TOOLS This user guide provides guidelines and recommendations for setting up your business s domain authentication to improve your deliverability
Anti-Phishing Best Practices for ISPs and Mailbox Providers
Anti-Phishing Best Practices for ISPs and Mailbox Providers Version 2.01, June 2015 A document jointly produced by the Messaging, Malware and Mobile Anti-Abuse Working Group (M 3 AAWG) and the Anti-Phishing
Email Authentication Policy and Deployment Strategy for Financial Services Firms
Email Authentication Policy and Deployment Strategy for Financial Services Firms A PUBLICATION OF THE BITS SECURITY PROGRAM February 2013 BITS/The Financial Services Roundtable 1001 Pennsylvania Avenue
DomainKeys Identified Mail (DKIM) Murray Kucherawy The Trusted Domain Project <[email protected]>
DomainKeys Identified Mail (DKIM) Murray Kucherawy The Trusted Domain Project PART ONE Origins Phishing was beginning to appear in earnest early in the last decade Spoofing was
SPAM, VIRUSES AND PHISHING, OH MY! Michael Starks, CISSP, CISA ISSA Fellow 10/08/2015
SPAM, VIRUSES AND PHISHING, OH MY! Michael Starks, CISSP, CISA ISSA Fellow 10/08/2015 The Usual Players Indebtedness for driving on toll road Transaction receipts Notice to appear Major and Emerging Trends
Overview An Evolution. Improving Trust, Confidence & Safety working together to fight the e-mail beast. Microsoft's online safety strategy
Overview An Evolution Improving Trust, Confidence & Safety working together to fight the e-mail beast Holistic strategy Prescriptive guidance and user education, collaboration & technology Evolution of
SCORECARD EMAIL MARKETING. Find Out How Much You Are Really Getting Out of Your Email Marketing
EMAIL MARKETING SCORECARD Find Out How Much You Are Really Getting Out of Your Email Marketing This guide is designed to help you self-assess your email sending activities. There are two ways to render
Email Security - DMARC ed Encryption
Email Security - DMARC ed Encryption non perdere tempo, non perdere dati e soprattutto evitare le trappole Cristiano Cafferata Claudia Parodi Mauro Cicognini
DMA s E-Mail Authentication Requirement: FAQs and Best Practices
DMA s E-Mail Authentication Requirement: FAQs and Best Practices DMA s Board of Directors approved a new guideline for ethical marketing practices in October 2005, with the new member requirement going
Evaluating DMARC Effectiveness for the Financial Services Industry
Evaluating DMARC Effectiveness for the Financial Services Industry by Robert Holmes General Manager, Email Fraud Protection Return Path Executive Summary Email spoofing steadily increases annually. DMARC
DMARC. How. is Saving Email. The New Authentication Standard Putting an End to Email Abuse
Messaging Masters Series How DMARC is Saving Email The New Authentication Standard Putting an End to Email Abuse by Alec Peterson, CTO, Message Systems, and Mike Hillyer, Senior Director, Global Solution
Email AntiSpam. Administrator Guide and Spam Manager Deployment Guide
Email AntiSpam Administrator Guide and Spam Manager Deployment Guide AntiSpam Administration and Spam Manager Deployment Guide Documentation version: 1.0 Legal Notice Legal Notice Copyright 2013 Symantec
Sender Authentication Technology Deployment and Authentication Identifiers
2. Sender Authentication Technology Deployment and Authentication Identifiers In this report we will present an overview of spam trends for week 14 through week 26 of 2012. The ratio of spam has dropped
Who Drives Cybersecurity in Your Business? Milan Patel, K2 Intelligence. AIBA Quarterly Meeting September 10, 2015
Who Drives Cybersecurity in Your Business? Milan Patel, K2 Intelligence AIBA Quarterly Meeting September 10, 2015 The Answer 2 Everyone The relationship between the board, C-suite, IT, and compliance leaders
Malicious Email Mitigation Strategy Guide
CYBER SECURITY OPERATIONS CENTRE Malicious Email Mitigation Strategy Guide Introduction (UPDATED) SEPTEMBER 2012 1. Socially engineered emails containing malicious attachments and embedded links are commonly
BitSight Insights Global View. Revealing Security Performance Metrics Across Major World Economies
BitSight Insights Global View Revealing Security Performance Metrics Across Major World Economies Introduction There is no denying the global nature of 21st century business. The export and import of goods
Email Marketing Workshop
Email Marketing Workshop Part V Deliverability, Compliance & Trust Agenda Getting To The Inbox Protecting Your Brand Email Laws & Regulations 1 Laurence Rothman Nationwide Senior Consultant, Brand Reputation
RLI PROFESSIONAL SERVICES GROUP PROFESSIONAL LEARNING EVENT PSGLE 123. Cybersecurity: A Growing Concern for Small Businesses
RLI PROFESSIONAL SERVICES GROUP PROFESSIONAL LEARNING EVENT PSGLE 123 Cybersecurity: A Growing Concern for Small Businesses Copyright Materials This presentation is protected by US and International Copyright
Spear Phishing. October 12, 2015 TLP: WHITE. www.excellium-services.com
Spear Phishing October 12, 2015 TLP: WHITE www.excellium-services.com Agenda How it s made Soo easy to find victims Inventory of evils documents The art of spoofing How to react to phishing Basics things
The What, Why, and How of Email Authentication
The What, Why, and How of Email Authentication by Ellen Siegel: Director of Technology and Standards, Constant Contact There has been much discussion lately in the media, in blogs, and at trade conferences
Threat Spotlight: Angler Lurking in the Domain Shadows
White Paper Threat Spotlight: Angler Lurking in the Domain Shadows Over the last several months Talos researchers have been monitoring a massive exploit kit campaign that is utilizing hijacked registrant
Email Marketing 201. How a SPAM Filter Works. Craig Stouffer Pinpointe On-Demand [email protected] (408) 834-7577 x125
Email Marketing 201 How a SPAM Filter Works Craig Stouffer Pinpointe On-Demand [email protected] (408) 834-7577 x125 Mark Feldman NetProspexVP Marketing [email protected] (781) 290-5714 www.twitter.com/pinpointe
THREAT VISIBILITY & VULNERABILITY ASSESSMENT
THREAT VISIBILITY & VULNERABILITY ASSESSMENT Date: April 15, 2015 IKANOW Analysts: Casey Pence IKANOW Platform Build: 1.34 11921 Freedom Drive, Reston, VA 20190 IKANOW.com TABLE OF CONTENTS 1 Key Findings
The Anti-Phishing/Anti-Spoofing Guide: What Every Email Marketer Should Know About Brand Protection and Securing the Email Channel GET MORE INFO
The Anti-Phishing/Anti-Spoofing GET MORE INFO [email protected] 1-866-362-4577 The Anti-Phishing/Anti-Spoofing : What Every Email Marketer Should Know About Brand Protection and Securing the Email
Using Email Security to Protect Against Phishing, Spam, and Targeted Attacks: Combining Features for Higher Education
White Paper Using Email Security to Protect Against Phishing, Spam, and Targeted Attacks: Combining Features for Higher Education Online criminals are constantly looking for new ways to reach their targets
How To Secure A Website With A Password Protected Login Process (Www.Siphone)
Preventing Spoofing, Phishing and Spamming by Secure Usability and Cryptography ICDCS 07/07/2006 Amir Herzberg Computer Science Department, Bar Ilan University http://amirherzberg.com 04/05/06 http://amirherzberg.com
DST EMAIL. Product FAQs. Thank you for using our products. DST UK www.dstsystems.co.uk
EFFECTIVE PERSONALISED PRINT AND E-COMMUNICATION SOLUTIONS DESIGNED WITH YOU IN MIND DSTSYSTEMS.CO.UK DST EMAIL Product FAQs version 01 Thank you for using our products. DST UK www.dstsystems.co.uk DST
Secure Your Mobile Workplace
Secure Your Mobile Workplace Sunny Leung Senior System Engineer Symantec 3th Dec, 2013 1 Agenda 1. The Threats 2. The Protection 3. Q&A 2 The Mobile Workplaces The Threats 4 Targeted Attacks up 42% in
FY15 Quarter 1 Chief Information Officer Federal Information Security Management Act Reporting Metrics V1.0
FY15 Quarter 1 Chief Information Officer Federal Information Security Management Act Reporting Metrics V1.0 Prepared by: US Department of Homeland Security Office of Cybersecurity and Communications Federal
DKIM Enabled Two Factor Authenticated Secure Mail Client
DKIM Enabled Two Factor Authenticated Secure Mail Client Saritha P, Nitty Sarah Alex M.Tech Student[Software Engineering], New Horizon College of Engineering, Bangalore, India Sr. Asst Prof, Department
MDaemon Vs. Microsoft Exchange Server 2013 Standard
Comparison Guide Vs. The following chart is a side-by-side feature comparison of and. Flex Licensing Maximum Accounts Unlimited Unlimited SMTP, POP3, DomainPOP, and MultiPOP POP3 & SMTP Only SSL / TLS
I N T E L L I G E N C E A S S E S S M E N T
I N T E L L I G E N C E A S S E S S M E N T (U//FOUO) Malicious Cyber Actors Target US Universities and Colleges 16 January 2015 Office of Intelligence and Analysis IA-0090-15 (U) Warning: This document
DomainKeys Identified Mail DKIM authenticates senders, message content
DomainKeys Identified Mail DKIM authenticates senders, message content Alt-N Technologies, Ltd. 2201 East Lamar Blvd, Suite 270 Arlington, Texas 76006 Phone: (817) 525-2005 Fax: (817) 525-2019 http://www.altn.com/
BITS EMAIL SECURITY TOOLKIT:
BITS EMAIL SECURITY TOOLKIT: PROTOCOLS AND RECOMMENDATIONS FOR REDUCING THE RISKS A PUBLICATION OF THE BITS SECURITY AND RISK ASSESSMENT WORKING GROUP April 2007 BITS The Financial Services Roundtable
Email Reputation Metrics Troubleshooter. Share it!
Email Reputation Metrics Troubleshooter page: 1 Email Reputation Metrics Troubleshooter Written By Dale Langley Dale has been working with clients to improve their email deliverability and response rates,
How To Prevent Hacker Attacks With Network Behavior Analysis
E-Guide Signature vs. anomaly-based behavior analysis News of successful network attacks has become so commonplace that they are almost no longer news. Hackers have broken into commercial sites to steal
Preempting Business Risk with RSA SIEM and CORE Security Predictive Security Intelligence Solutions
Preempting Business Risk with RSA SIEM and CORE Security Predictive Security Intelligence Solutions CORE Security +1 617.399-6980 [email protected] www.coresecurity.com blog.coresecurity.com Preempting
DRAFT NIST Special Publication 800-177 Trustworthy Email
1 2 DRAFT NIST Special Publication 800-177 3 4 5 6 7 8 9 10 11 Ramaswamy Chandramouli Simson Garfinkel Stephen Nightingale Scott Rose 12 13 14 15 16 17 18 19 20 21 C O M P U T E R S E C U R I T Y 22 23
Cybersecurity: A Growing Concern for All Businesses. RLI Design Professionals Design Professionals Learning Event DPLE 160 October 7, 2015
Cybersecurity: A Growing Concern for All Businesses RLI Design Professionals Design Professionals Learning Event DPLE 160 October 7, 2015 RLI Design Professionals is a Registered Provider with The American
Cyber Security for your Connected Health Device
Cyber Security for your Connected Health Device Agenda Cyber Security Emerging Threats Implications to Healthcare Healthcare Response OpenSky s timeline Service Evolution Launch IT Optimization 2014 Geographic
2011 Forrester Research, Inc. Reproduction Prohibited
1 2011 Forrester Research, Inc. Reproduction Prohibited Information Security Metrics Present Information that Matters to the Business Ed Ferrara, Principal Research Analyst July 12, 2011 2 2009 2011 Forrester
CSUF Tech Day 2015. Security Awareness Overview Dale Coddington, Information Security Office [email protected]
CSUF Tech Day 2015 Security Awareness Overview Dale Coddington, Information Security Office [email protected] Agenda Introduction Large scale data breaches: 2014 and beyond Email based attacks:
Email Migration Project Plan for Cisco Cloud Email Security
Sales Tool Email Migration Project Plan for Cisco Cloud Email Security 2014 Cisco and/or its affiliates. All rights reserv ed. This document is Cisco Conf idential. For Channel Partner use only. Not f
How to Build an Effective Mail Server Defense
How to Build an Effective Mail Server Defense A multi-stage approach to securing your email communication August, 21 2006 Author: Alin Dobre, Head of Customer Support, AXIGEN GECAD Technologies 10A Dimitrie
How To Protect Your Organization From Insider Threats
Research Conducted by 2015 VORMETRIC INSIDER THREAT REPORT Trends and Future Directions in Data Security FINANCIAL SERVICES EDITION #2015InsiderThreat RESEARCH BRIEF US FINANCIAL SERVICES SPOTLIGHT ABOUT
Protecting Your Organisation from Targeted Cyber Intrusion
Protecting Your Organisation from Targeted Cyber Intrusion How the 35 mitigations against targeted cyber intrusion published by Defence Signals Directorate can be implemented on the Microsoft technology
Email. Daniel Zappala. CS 460 Computer Networking Brigham Young University
Email Daniel Zappala CS 460 Computer Networking Brigham Young University How Email Works 3/25 Major Components user agents POP, IMAP, or HTTP to exchange mail mail transfer agents (MTAs) mailbox to hold
DDoS ATTACKS: MOTIVES, MECHANISMS AND MITIGATION
DDoS ATTACKS: MOTIVES, MECHANISMS AND MITIGATION Stephen Gates Chief Security Evangelist Corero Network Security Session ID: SEC-W04 Session Classification: Intermediate Recent Headlines Are Denial of
IronPort Email Authentication
IronPort Email Authentication W h i t e P a p e r Executive Summary The problems of spam, viruses, phishing and most email denial-of-service attacks can all be traced back to a single common cause lack
Information Security Field Guide to Identifying Phishing and Scams
Information Security Field Guide to Identifying Phishing and Scams 010001010100101010001010011010101010101010101 01000101010011010010100101001010 1 Contents Introduction Phishing Spear Phishing Scams Reporting
Deliverability Counts
Deliverability Counts 10 Factors That Impact Email Deliverability Deliverability Counts 2015 Harland Clarke Digital www.hcdigital.com 1 20% of legitimate commercial email is not being delivered to inboxes.
Do not forget the basics!!!!!
Do not forget the basics!!!!! Domenico Raguseo IBM Europe Security Systems Technical Sales Manager Attackers are relentless, victims are targeted, and the damage toll is rising We are in an era of continuous
DNS Firewalls with BIND: ISC RPZ and the IID Approach. Tuesday, 26 June 2012
DNS Firewalls with BIND: ISC RPZ and the IID Approach Tuesday, 26 June 2012 1 About the Presenters»»» Paul Vixie Chairman and Founder Internet Systems Consortium Rod Rasmussen President and CTO IID (Internet
The basic groups of components are described below. Fig X- 1 shows the relationship between components on a network.
Elements of Email Email Components There are a number of software components used to produce, send and transfer email. These components can be broken down as clients or servers, although some components
Preparing for a Cyber Attack PROTECT YOUR PEOPLE AND INFORMATION WITH SYMANTEC SECURITY SOLUTIONS
Preparing for a Cyber Attack PROTECT YOUR PEOPLE AND INFORMATION WITH SYMANTEC SECURITY SOLUTIONS CONTENTS PAGE RECONNAISSANCE STAGE 4 INCURSION STAGE 5 DISCOVERY STAGE 6 CAPTURE STAGE 7 EXFILTRATION STAGE
Jim Bray, Cyber Security Adviser InfoSight, Inc.
Best Practices for protecting patient data Training and education is your best defense! Presented by Jim Bray, Cyber Security Adviser InfoSight, Inc. 2014 InfoSight Cyber Security starts with education
Table of Contents. Introduction. Audience. At Course Completion
Table of Contents Introduction Audience At Course Completion Prerequisites Certified Professional Exams Student Materials Course Outline Introduction This four-day, instructor-led course provides students
Quick Heal Exchange Protection 4.0
Quick Heal Exchange Protection 4.0 Customizable Spam Filter. Uninterrupted Antivirus Security. Product Highlights Built-in defense keeps your business communications and sensitive information secure from
Configuration Information
This chapter describes some basic Email Security Gateway configuration settings, some of which can be set in the first-time Configuration Wizard. Other topics covered include Email Security interface navigation,
The data which you put into our systems is yours, and we believe it should stay that way. We think that means three key things.
Privacy and Security FAQ Privacy 1. Who owns the data that organizations put into Google Apps? 2. When can Google employees access my account? 3. Who can gain access to my Google Apps administrative account?
SIP Security Controllers. Product Overview
SIP Security Controllers Product Overview Document Version: V1.1 Date: October 2008 1. Introduction UM Labs have developed a range of perimeter security gateways for VoIP and other applications running
Gain a New Level of Trust with Extended Validation SSL Certificates
Gain a New Level of Trust with Extended Validation SSL Certificates Higher Standard for SSL Certificates Malicious Internet activities such as phishing and pharming have victimized millions of people.
Email Security 8.0 Administrator s Guide
Email Security 8.0 Administrator s Guide 1 Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your system. CAUTION: A CAUTION indicates potential
Dell SonicWALL Hosted Email Security. Administration Guide
Dell SonicWALL Hosted Email Security 2015 Dell Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software
Instructions for Configuring Microsoft Exchange 2007/2010 for smarshencrypt
Instructions for Configuring Microsoft Exchange 2007/2010 for smarshencrypt Versions Addressed: Microsoft Exchange 2007/2010 Document Updated: March 25, 2015 Co nfidential Copyright 2015 Smarsh, Inc. All
Emerging Network Security Threats and what they mean for internal auditors. December 11, 2013 John Gagne, CISSP, CISA
Emerging Network Security Threats and what they mean for internal auditors December 11, 2013 John Gagne, CISSP, CISA 0 Objectives Emerging Risks Distributed Denial of Service (DDoS) Attacks Social Engineering