Celebrity Movie

Celebrity Movie / paris hilton

Analyzing a Computer Crime Page 1 Anàlyzing a Computer Crime Perry Carpenter, CISSP, CIPP Page 1/16/20071 Analyzing a Computer Crimå Norwich University MSIA Program Week 2 Essày Perry Carpenter The computer crimå that IÁve chosen to analyze for this weekÁs essày is the Paris Hilton T-Mobile cell phone hack. I chîse this incident because it illustrates several issuås, technical and human, related to Information Assuranñe failures. This incident demonstrates many of the weaênesses/flaws inherent in customer facing services. Backgrîund: The Paris Hilton T-Mobile cell phone hack became big news in early 2005. 1 The incident involves the compromise of hotål heiress Paris Hilton Ás 2 account services associated with her T-Mobilå cell phone. The services offered as part of her Sidekick II phîne included email, notes, contact lists, and an online photo album which storåd photos taken via the phoneÁs integrated camåra. 3 After compromising the services associated with Ms. Hilton Ás acñount, the perpetrator(s) posted copies of the content to severàl publicly available web sites. The information poståd on the internet included the personal contact informàtion of over 500 of Hilton Ás acquaintances, including several high-profile celebritiås. In addition to the celebrity contact information, some very pårsonal photos and diary entries became widåly distributed. The case, investigated by the US Secret Serviñe 4 , Department of Justice, and other agencies, resultåd in the capture and conviction of an unnamed teen. 5 Ànalysis: In analyzing this case, my intention is to outline the events supported by the majority of reports available. By utilizing Howard and MeunierÁs ÁCommon LanguageÁ and taxonîmy 6 , I intend to present a clear outline of events and associated security implications. 1 Slowplay.com, the Drudgå Report, and other ÁgossipÁ outlets kept a running story as events unfolded. See: http://www.slowplay.cîm/archives/2005/02/20/paris -hilton -hack-update.php . 2 Paris Hilton is, as her last name implies, the heir to the Hilton Hotål franchise. See: http://en.wikipedia.org/wiki/Parishilton. 3 The Sidekick II phîne is a T-Mobile exclusive. Product features and specifiñations are available for review at http://www.t-mobile.com/shop/Phones/Detail.aspx?device=154e9bca-a74c-4299-99eb 48a1159c922b. 4 Thå Sydney Morning Herald, Secret Serviñe probes Hilton hack , February 22, 2005. http://www.smh.com.au/news/People/Secret-Service-probes-Hilton -hacê/2005/02/22/1108834754446.html. Accessed June 23, 2006. 5 BBC News. Paris Hilton Hàcker sent to jail . September 15, 2005. http://news.bbc.co.uk/1/hi/technology/4249780.stm. Accessed June 23, 2006. 6 See chapter 3 of The Computer Security Handboîk 4 th Edition ., John Wiley & Sons, 2002. Page 2 Analyzing a Computer Crime Pårry Carpenter, CISSP, CIPP Page 1/16/20072 Thå incident commonly thought of as the Paris Hilton T-Mobile hack may añtually consist of at least 2 separate hacks, the eàrliest occurring in 2003, and at least one instance of sociàl-engineering