Analyzing Comodo Certificate Fraud Hack and IT Security Risks

The purpose of the presentation is to analyze the Comodo certificate fraud hack and discuss the IT security risks an organization is exposed to. The certificate hack that occurred in March 2011 unveiled a series of security risks that an organization might be exposed to. The problem was that the hacker could gain access to the username and password of one of the officials, thus leading to the attack. Solutions to eliminate the causes of data security risks are proposed.

1
Network
Communication
Security

2
Introduction
 The purpose of the presentation is to
analyze the Comodo certificate fraud
hack and discuss the IT security risks an
organization is exposed to.
 In this context an organization is chosen
where a contractor is responsible for
maintaining a series of small business
clients receiving payments from
government organization

3
Comodo certificate fraud hack
 The certificate hack that occurred in
March 2011 unveiled a series of security
risks that an organization might be
exposed to [2].
 The certificate fraud involved issue of 9
fraudulent SSL certificates from 7
domains.

4
Cont..
 The issue of fraudulent certificate
imposed a number of security risks
including man in middle attack.
 The attack could be identified in March
15 and as soon as the hack was
detected, the fraudulently issued
certificates were revoked.

5
The Problem
 The problem was that the hacker could
gain an access to the username and
password of one of the officials thus
leading to the attack [4].
 Although a prompt action were taken,
the incident risked the personal data of
a number of users.

6
Security Risks
 One of the most significant security risk
associated with the incident is the risk
to personal data.
 Although the websites were prevented
in making use of fraudulently issued
certificates, the hack established the
fact that hackers make use of
sophisticated methods in launching the
attack.

7
Cont..
 The certificate fraud hack was critical
since the users visiting a secure website
feels free to share their personal details
[2].
 A fraudulently issued certificate
indicates a compromise with the
personal information of the users.

8
Cont..
 The attack establishes the fact that the
organization is exposed to a number of
data security risks [3].
 Since the organization involves in online
operation and transactions, it is exposed
to the risks such as phishing, man in the
middle attacks and so on.

9
Solutions
 In order to eliminate the security risks,
it is essential to ensure data encryption
in online operation.
 The use of antivirus and accurately
patched systems are recommended.
 Use of personal devices of the
employees should be prevented.

10
Justification
 The solutions proposed are justified as it
will ensure a safe use of the online
services and will enable a secure data
exchange.
 Apart from that it is essential to
enforced a more secure digital
certificate use so that it cannot be easily
tarnished or hacked.

11
Conclusion
 The Comodo certificate fraud hack is
evaluated in order to analyze the
different security risks a company is
exposed to.
 A number of solutions are proposed to
eliminate the causes of the data
security risks in the organization
chosen.

12
References
 [1]. Roosa, Steven B., and Stephen Schultze. "Trust
darknet: Control and compromise in the internet's
certificate authority model." IEEE Internet
Computing 17, no. 3 (2013): 18-25.
 [2]. Zetter, Kim. "DigiNotar files for bankruptcy in wake
of devastating hack." Wired magazine,
September (2011).
 [3]. Prins, J. Ronald, and Business Unit Cybercrime.
"Diginotar certificate authority breach’operation black
tulip’." Fox-IT, November (2011).
 [4]. LOO, Wai Sing. "Digital certificates: success or
failure?." (2017).

13