\n0. Disclaimer

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n0.1 How to Use / Read This Book

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

",{"_326":327,"_43":44,"_47":48,"_45":46,"_65":66,"_328":329,"_397":324},"previewContent","

\n 0. Disclaimer\n
- \n 0.1 How to Use / Read This Book\n
\n
\n 1. Shadow IT: An Introduction\n
- \n 1.1 What You Know For Sure That Ain't So\n
- \n 1.2 Applicability\n
- \n 1.3 Types of Shadow IT\n
- \n 1.4 Hire Competent People\n
- \n 1.5 Whitelist your security\n
- \n 1.6 Training, education and \"good security practices\" are still necessary\n
- \n 1.7 End of Scolding\n
- \n 1.8 No Secrets Here\n
\n
\n 2. Local Tunnels\n
- \n 2.1 What is it, how does it work, and what's the danger?\n
- \n 2.2 How does it work?\n
- \n 2.3 How to detect and stop\n
- \n 2.4 The Irony of Security Education\n
- \n 2.5 Observation\n
\n
\n 3. Zero Knowledge services\n
- \n 3.1 What is it, how does it work, and what's the danger?\n
- \n 3.2 How Is This Different from File Sharing in the Clouds?\n
- \n 3.3 How to detect and stop\n
\n
\n 4. Use of Nonstandard Service Ports\n
- \n 4.1 What is it, how does it work, and what's the danger?\n
- \n 4.2 How to Detect and Stop\n
- \n 4.3 Similarity to Anti-Censorship Strategies\n
\n
\n 5. SSL VPNs\n
- \n 5.1 What is it, how does it work, and what's the danger?\n
- \n 5.2 How to detect and stop\n
- \n 5.3 Observation\n
- \n 5.4 (Web) Application Proxies\n
\n
\n 6. Misused Online Conferencing Tools\n
- \n 6.1 What is it, how does it work, and what's the danger?\n
- \n 6.2 How to detect and stop\n
- \n 6.3 Examples of Browser Plugin Based and Application Based Conferencing Services\n
\n
\n 7. Encrypted File Transfer in Browser\n
- \n 7.1 What is it, how does it work, and what's the danger?\n
- \n 7.2 How to detect and stop\n
\n
\n 8. Cloud Services\n
- \n 8.1 Almost anyone with a credit card can start a cloud based server\n
- \n 8.2 How to detect and stop\n
- \n 8.3 Observation\n
\n
\n 9. File Sync Danger\n
- \n 9.1 What is it\n
- \n 9.2 How to detect and stop\n
- \n 9.3 Observation\n
\n
\n 10. Portable Apps\n
- \n 10.1 What is it, how does it work, and what's the danger?\n
- \n 10.2 How to detect and stop\n
- \n 10.3 Observation\n
\n
\n 11. Desktop Virtualization\n
- \n 11.1 What is it\n
- \n 11.2 How to block\n
- \n 11.3 Observation\n
- \n 11.4 Observation 2\n
\n
\n 12. Desktop Virtualization and TOR\n
- \n 12.1 What is it, how does it work, and what's the danger?\n
- \n 12.2 How to detect and stop\n
\n
\n 13. Unblocked TOR Access\n
- \n 13.1 Unblocked TOR access\n
- \n 13.2 How to detect and stop\n
- \n 13.3 Many Networks Do Not Block TOR\n
- \n 13.4 Observation\n
\n
\n 14. Anti-Censorship Services\n
- \n 14.1 What is it, how does it work, and what's the danger?\n
- \n 14.2 How to detect and stop\n
\n
\n 15. Summary and looking forward\n
- \n 15.1 The Need for Leadership With Vision\n
\n

\n0. Disclaimer

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n0.1 How to Use / Read This Book

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1. Shadow IT: An Introduction

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.1 What You Know For Sure That Ain't So

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.2 Applicability

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.3 Types of Shadow IT

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.4 Hire Competent People

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.5 Whitelist your security

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.6 Training, education and \"good security practices\" are still necessary

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.7 End of Scolding

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n1.8 No Secrets Here

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n2. Local Tunnels

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n2.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n2.2 How does it work?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n2.3 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n2.4 The Irony of Security Education

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n2.5 Observation

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n3. Zero Knowledge services

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n3.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n3.3 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n4. Use of Nonstandard Service Ports

\n\n

\n4.1 What is it, how does it work, and what's the danger?

\n\n

As a specific example: SSH servers by convention and in normal use listen for connections on tcp port 22, so most firewalls that block encrypted external connections via SSH block port 22. But browser traffic on tcp port 443 are often unrestricted, because an employee's connection to their banking server is generally respected as their own private business. Knowing this, having an SSH server on the outside listen on tcp port 443 can abuse this trust and arbitrary permission, and allows an SSH session to exit the enterprise network and connect to an external SSH server.

\n\n

Other protocols can easily be configured to use nonstandard ports. Some organizations feel it is OK to allow FTP (file transfer protocol) on TCP port 21 because standard FTP functions are not encrypted and all conventional FTP traffic is readily visible and logged for analysis.

\n\n

\n4.2 How to Detect and Stop

\n\n

A smart firewall could be configured to detect the traditional SSH client/server handshake, much like an IPSec VPN handshake that is used to set up a session, but there needs to be sufficient capacity to perform deep inspection of the traffic to recognize the SSH handshake, among protocols that could establish unauthorized communications and transfer files while bypassing standard information controls.

\n\n

Training of the user community so everyone understands this is a violation, evokes the same problem already noted in Part 2.4 - it tells many others who never thought of it, that such a mechanism is possible.

\n\n

Ideally a whitelist policy (allowing only authorized connections between inside and outside) would prevent unauthorized connections to SSH or other servers on the internet.

\n\n

A comprehensive strategy to detect and stop the use of nonstandard ports would rely on all of these strategies and others that are appropriate to the specific situation at hand.

\n\n

\n4.3 Similarity to Anti-Censorship Strategies

\n\n

Strategies used by TOR (the Onion Router) software to circumvent censorship as enforced by the GFWC - The Great Firewall of China has led to development of \"pluggable transport\" alternatives including a method called ScrambleSuit, that mimics other types of (encrypted) traffic, some of which might well be allowed to pass through various firewalls, even those specifically intending to block TOR.

\n\n

Elsewhere in this book \"Anti-Censorship\" and distributed methods create other problems for information and network security. The masquerading of SSH (should be on port 22, normally blocked) as HTTPS (port 443, normally allowed to pass) is a strategy similar to other Anti-Censorship tools.

\n\n\n

\n5. SSL VPNs

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n5.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n5.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n5.3 Observation

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n5.4 (Web) Application Proxies

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n6. Misused Online Conferencing Tools

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n6.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n6.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n6.3 Examples of Browser Plugin Based and Application Based Conferencing Services

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n7. Encrypted File Transfer in Browser

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n7.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n7.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n8. Cloud Services

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n8.1 Almost anyone with a credit card can start a cloud based server

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n8.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n8.3 Observation

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n9. File Sync Danger

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n9.1 What is it

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n9.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n9.3 Observation

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n10. Portable Apps

\n\n

\n10.1 What is it, how does it work, and what's the danger?

\n\n

Portable Apps are versions of many applications that can run on your system without administrative rights; they all run from USB or file system without \"installation\". Corporate standard software is rendered meaningless if anyone can bring in their own browser, word processor, file zipper, and email clients, and use them at will. See https://portableapps.com for the range of tools that can run from your USB

\n\n

\n10.2 How to detect and stop

\n\n

Group policy could block a specifically identified application such as the portable apps launcher, but if a portable app is launched individually without running the launcher, it is harder to block.

\n\n

Security training and education could point out the obvious danger of using unauthorized software brought in on a USB drive. Since such portable apps are not actually installed and no registry changes are required, most of these can be executed without local administrator privileges. The security training and education has to emphasize that the danger of using such randomly obtained software is as stupidly risky and dangerous as opening email attachments from people you don't know.

\n\n

Perhaps the most effective strategy would be to forestall a sense in the user community that they need to circumvent corporate IT and corporate security policy: be helpful and directly support the users and deliver services they need, that have been reviewed and secured, and verified to be compliant applications. If using approved software is the path of least resistance, and it supports user needs, users who deliberately continue to violate good security practice and corporate policy – perhaps should be appropriately disciplined.

\n\n

\n10.3 Observation

\n\n

There are many applications that do not require \"installation\" (which typically requires administrative rights); one already mentioned is ngrok.

\n\n

Another way to run software on company owned computers without needing administrative rights is covered in the next part, under Desktop Virtualization: it's possible to run a Windows or Linux operating system in a virtual machine on your Windows, Linux, or Mac. One free platform is Oracle's VirtualBox. Since the user is the creator and admin of the virtual machine, she can install and use any software at all! More in the next section.

\n\n\n

\n11. Desktop Virtualization

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n11.1 What is it

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n11.2 How to block

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n11.3 Observation

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n11.4 Observation 2

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n12. Desktop Virtualization and TOR

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n12.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n12.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n13. Unblocked TOR Access

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n13.1 Unblocked TOR access

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n13.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n13.3 Many Networks Do Not Block TOR

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n13.4 Observation

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n14. Anti-Censorship Services

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n14.1 What is it, how does it work, and what's the danger?

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n14.2 How to detect and stop

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n15. Summary and looking forward

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n

\n15.1 The Need for Leadership With Vision

\n\n\n

This content is not available in the sample book. The book can be purchased on Leanpub at http://leanpub.com/shadowit.

\n\n\n\n

\n\n","tocStructure",[330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396],{"_76":77,"_43":78,"_70":-5,"_79":80,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":86,"_70":-5,"_79":87,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":92,"_70":-5,"_79":93,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":96,"_70":-5,"_79":97,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":99,"_70":-5,"_79":100,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":102,"_70":-5,"_79":103,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":105,"_70":-5,"_79":106,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":108,"_70":-5,"_79":109,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":111,"_70":-5,"_79":112,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":114,"_70":-5,"_79":115,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":117,"_70":-5,"_79":118,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":120,"_70":-5,"_79":121,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":124,"_70":-5,"_79":125,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":127,"_70":-5,"_79":128,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":130,"_70":-5,"_79":131,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":133,"_70":-5,"_79":134,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":136,"_70":-5,"_79":137,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":139,"_70":-5,"_79":140,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":143,"_70":-5,"_79":144,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":146,"_70":-5,"_79":147,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":149,"_70":-5,"_79":150,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":152,"_70":-5,"_79":153,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":156,"_70":-5,"_79":157,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":159,"_70":-5,"_79":160,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":162,"_70":-5,"_79":163,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":165,"_70":-5,"_79":166,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":169,"_70":-5,"_79":170,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":172,"_70":-5,"_79":173,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":175,"_70":-5,"_79":176,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":178,"_70":-5,"_79":179,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":181,"_70":-5,"_79":182,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":185,"_70":-5,"_79":186,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":188,"_70":-5,"_79":189,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":191,"_70":-5,"_79":192,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":194,"_70":-5,"_79":195,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":198,"_70":-5,"_79":199,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":201,"_70":-5,"_79":202,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":204,"_70":-5,"_79":205,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":208,"_70":-5,"_79":209,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":211,"_70":-5,"_79":212,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":214,"_70":-5,"_79":215,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":217,"_70":-5,"_79":218,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":221,"_70":-5,"_79":222,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":224,"_70":-5,"_79":225,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":227,"_70":-5,"_79":228,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":230,"_70":-5,"_79":231,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":234,"_70":-5,"_79":235,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":237,"_70":-5,"_79":238,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":240,"_70":-5,"_79":241,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":243,"_70":-5,"_79":244,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":247,"_70":-5,"_79":248,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":250,"_70":-5,"_79":251,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":253,"_70":-5,"_79":254,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":256,"_70":-5,"_79":257,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":259,"_70":-5,"_79":260,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":263,"_70":-5,"_79":264,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":266,"_70":-5,"_79":267,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":269,"_70":-5,"_79":270,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":273,"_70":-5,"_79":274,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":276,"_70":-5,"_79":277,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":279,"_70":-5,"_79":280,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":282,"_70":-5,"_79":283,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":285,"_70":-5,"_79":286,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":289,"_70":-5,"_79":290,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":292,"_70":-5,"_79":293,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":77,"_43":295,"_70":-5,"_79":296,"_72":81,"_88":-5,"_89":-5,"_90":-5},{"_76":85,"_43":299,"_70":-5,"_79":300,"_72":81,"_88":-5,"_89":-5,"_90":-5},"publicChapterContent","nextChapter","sections",[331],"routes/_store+/_layout","routes/_store+/_readers+/_layout","actionData","errors"]

\n0. Disclaimer

\n0.1 How to Use / Read This Book

Table of Contents

\n0. Disclaimer

\n0.1 How to Use / Read This Book

\n1. Shadow IT: An Introduction

\n1.1 What You Know For Sure That Ain't So

\n1.2 Applicability

\n1.3 Types of Shadow IT

\n1.4 Hire Competent People

\n1.5 Whitelist your security

\n1.6 Training, education and \"good security practices\" are still necessary

\n1.7 End of Scolding

\n1.8 No Secrets Here

\n2. Local Tunnels

\n2.1 What is it, how does it work, and what's the danger?

\n2.2 How does it work?

\n2.3 How to detect and stop

\n2.4 The Irony of Security Education

\n2.5 Observation

\n3. Zero Knowledge services

\n3.1 What is it, how does it work, and what's the danger?

\n3.2 How Is This Different from File Sharing in the Clouds?

\n3.3 How to detect and stop

\n4. Use of Nonstandard Service Ports

\n4.1 What is it, how does it work, and what's the danger?

\n4.2 How to Detect and Stop

\n4.3 Similarity to Anti-Censorship Strategies

\n5. SSL VPNs

\n5.1 What is it, how does it work, and what's the danger?

\n5.2 How to detect and stop

\n5.3 Observation

\n5.4 (Web) Application Proxies

\n6. Misused Online Conferencing Tools

\n6.1 What is it, how does it work, and what's the danger?

\n6.2 How to detect and stop

\n6.3 Examples of Browser Plugin Based and Application Based Conferencing Services

\n7. Encrypted File Transfer in Browser

\n7.1 What is it, how does it work, and what's the danger?

\n7.2 How to detect and stop

\n8. Cloud Services

\n8.1 Almost anyone with a credit card can start a cloud based server

\n8.2 How to detect and stop

\n8.3 Observation

\n9. File Sync Danger

\n9.1 What is it

\n9.2 How to detect and stop

\n9.3 Observation

\n10. Portable Apps

\n10.1 What is it, how does it work, and what's the danger?

\n10.2 How to detect and stop

\n10.3 Observation

\n11. Desktop Virtualization

\n11.1 What is it

\n11.2 How to block

\n11.3 Observation

\n11.4 Observation 2

\n12. Desktop Virtualization and TOR

\n12.1 What is it, how does it work, and what's the danger?

\n12.2 How to detect and stop

\n13. Unblocked TOR Access

\n13.1 Unblocked TOR access

\n13.2 How to detect and stop

\n13.3 Many Networks Do Not Block TOR

\n13.4 Observation

\n14. Anti-Censorship Services

\n14.1 What is it, how does it work, and what's the danger?

\n14.2 How to detect and stop

\n15. Summary and looking forward

\n15.1 The Need for Leadership With Vision