开源情报与网络安全——如何在公共信息与内部威胁防护之间取得平衡.pdf

1、Protection OSINT and Network SecurityNavigating the Balance Between Public Information and Internal ThreatSanjay PoddarAdvanced Services Engineer,FortinetOpen-Source Intelligence(OSINT)What isOSINT(Open-Source Intelligence)?Role of OSINT in cybersecurity Balancing public information with internal pr

2、otectionThe Strategic Importance of OSINT in Network Security OSINT as a proactive defense tool Mapping the attack surface Detecting phishing,impersonation,and domain squatting OSINT Tools and Techniques for Network SecurityKey OSINT Tools:Shodan,Maltego,Recon-ngActive vs Passive reconnaissanceDetec

3、ting misconfigurations and data breachesKey OSINT tools:,Maltego,ngActive vs.Passive reconnaissanceDetecting misconfigurations and data breaches Key OSINT tools:Shodan,Maltego,Recon-ngActive vs.Passive reconnaissanceDetecting misconfigurations and data breaches Recent Headlines Illustrating OSINT in

4、 ActionNation-state attacks detected through OSINTRansomware groups using OSINT for profiling Lessons from recent cybersecurity incidentsProtecting Internal Networks from OSINT Exposure Unintentional data exposure via job posts,social media Using red-teaming and OSINT audits Identifying metadata lea

5、ks in public filesBalancing OSINT with Privacy and EthicsEthical use of OSINT to avoid privacy violationsCompliance with GDPR,CCPA and other regulations Conducting legal and ethical investigationsPractical Strategies to Optimize OSINT Building a dedicated to optimize OSINT Automating intelligence gathering Integrating OSINT with SIEM systems Creating OSINT playbooks for threatsKey Takeaways OSINT is a double-edged sword Importance of proactive monitoring Adopt ethical and compliant OSINT practices