Advanced Persistent Threats Against RSA Tokens
John Valachovic
Dr. Nelson Stewart
CIS 502
April 25, 2013

Abstract
In this paper I will look at RSA tokens and describe a successful APT attack. I will disclose the attack methods used and explain why they were successful. I will also explain the best methods available to control and prevent these attacks. With new emerging technologies organizations may reduce the APT threat.

Advanced Persistent Threats Against RSA Tokens
Advance persistent threat has become one of the most dangerous and damaging threat to hit the security arena. APTs are highly adaptable and are usually customized for each attack targeting vulnerabilities, system flaws and even humans with social engineering, spoofing, whaling and spear phishing. APTs are usually an attack against governments, military, political targets, private sector organizations and corporations [ (Curry, et al., 2011) ]. Being able to defend your network and detecting intrusions has become vital.
Vulnerabilities
APT attacks often use subversive methods to prevent detection. APT attacks are carried out over a long period of time and are planned in advance. Attackers spend a long time planning the attack be it social engineering or searching for access through the supply chain [ (Curry, et al., 2011) ]. Once an attacker gains access to his target network they can go undetected while they snoop around searching for the intended target. Hackers could be after an organization’s top secret information.
With social engineering an easy target attackers often gain access through an employee’s account and piggyback their privileges and resources [ (Curry, et al., 2011) ]. Doing this allows the attacker time to search the network and plan an attack method of the target.
Attack methods
What attack methods were successful and why. The attackers often