welcome to see you so online I'm Juliet Beauchamp and I'm here with JM Porup a
reporter for CSO and we're gonna be talking all things showed an the search
engine for the Internet of Things the search engine for all of the Internet
practically so what exactly is shota and what's it she's Archie yeah so showed an
is like Google for all the ports for everything Google only indexes websites
typically ports 80 and 443 whereas showed in scans the entire ipv4 range I
think once every 24 hours and scans all the ports and that can be both
incredibly alarming to non-technical people who are less informed of how the
internet works but also very useful for enterprises looking to secure their
public facing internet presence on the one hand attackers can could in theory
you show down to sort of identify weaknesses in target's security posture
but far more useful to for enterprises to know what they're showing to the
world and to lock that stuff down and how can an enterprise professional you
showed an to understand what's what their public profile is and then go
forward and shut that down right so let's say we're talking about a slash 24
subnet and we want to know everything on that subnet that we're showing to the
world we can go into showdowns search for our IP class range and have a look
at what others can see about us the other useful thing if we're pen testers
in many cases running nmap is extremely loud and noisy and can break things and
showdown is far more stealthy because it's showed in doing these searches not
yourself so you can get a really quick look at what your clients network looks
like when you're testing it for security great and is there a way
for for an enterprise professional - you showed in and then how would they go
about then sort of locking down and making their profile more secure
right so it's very easy when you're dealing with an enterprise with tens of
thousands or hundreds of thousands of exposed things not just laptops and
desktops but maybe you know you plugged in an IOT kettle and your corporate
fridge you know I mean there's all sorts of things printers and these things can
expose services to the Internet to the public internet that maybe you just
don't want to be there and this can happen very easily by accident people
plug stuff in all the time and if you can see what's being plugged in and
being exposed to the Internet then you can hunt it down and turn those services
off because every open port every connected device is one more way for an
attacker to get into your network so this is definitely something that should
be really on IT professionals minds I think so you know I mean show Dan freaks
people out especially less technical people but I think that fear mongering
you know essentially scanning the network for what is publicly available
is something that we should celebrate and use as a defensive security measure
and not like Wow because security like we talked about security by obscurity
and and why it's not effective people like to say if people don't you know if
I put my head in the sand to pretend nobody can see it's fine well it's not
fine because in an attacker who wants to find it is still gonna find it so better
for us to know by using Showdown what we're exposing to the world and locking
it down rather than the pretending it's not there and letting someone exploit it
it's true thanks so much Jim for more content on shodhan feel free to check us
out at CSO online com thanks for watching