Person
person:jason_e_street
Also: Jason
Information-security professional and penetration tester who conducts physical security awareness engagements.
Information-security professional and penetration tester who conducts physical security awareness engagements.
“we’re going to hear a story from Jason E. Street.”
“Jason started out in law enforcement but for almost the last twenty years he’s been working in InfoSec.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Security Awareness Engagement | Explicit | 6 |
| outgoing | USES | Physical security testing | Explicit | 6 |
| outgoing | USES | social engineering | Derived | 6 |
| outgoing | USES | Pretexting | Explicit | 6 |
| outgoing | USES | Unauthorized physical access | Explicit | 6 |
| outgoing | USES | USB Rubber Ducky | Explicit | 6 |
| outgoing | USES | Pwn Plug | Explicit | 6 |
| outgoing | USES | Proxmark3 | Explicit | 6 |
| outgoing | USES | Dropboxes | Explicit | 6 |
| outgoing | USES | User ID and password | Explicit | 6 |
| outgoing | USES | Smart card | Explicit | 6 |
Jason E. Street USES Security Awareness Engagement
Jason performs what he calls security awareness engagements to test whether employees and physical security controls can stop an unauthorized person.
Explicit Confidence 99% · Jack Rhysider EP 6 Details
“One of his favorite things to do is what he calls Security Awareness Engagement.”
Jason E. Street USES Physical security testing
Jason is hired to test the physical security of company locations.
Explicit Confidence 99% · Jack Rhysider EP 6 Details
“He’s hired by companies to test the physical security of a place.”
Jason E. Street USES social engineering
Jason uses social manipulation and plausible explanations to gain access to offices, teller areas, and computers during engagements.
Derived Confidence 97% · Jason E. Street EP 6 Details
“It’s all psychological.”
“I tell her that yeah, I’m here with the auditor.”
Jason E. Street USES Pretexting
Jason uses fabricated auditor, Microsoft, and headquarters-related stories as pretexts to obtain access.
Explicit Confidence 99% · Jason E. Street EP 6 Details
“I could have done all these pretexts”
Jason E. Street USES Unauthorized physical access
Jason physically enters and moves through areas where he should not have been during the engagement.
Explicit Confidence 99% · Jack Rhysider EP 6 Details
“he did cross the line for where he shouldn’t have been physically”
Jason E. Street USES USB Rubber Ducky
Jason carries and plugs a USB Rubber Ducky into employee and teller computers to test whether they can be controlled.
Explicit Confidence 99% · Jason E. Street EP 6 Details
“Usually it’s a pwn plug, it’s a USB rubber ducky”
“The first thing he does is plug a rubber ducky into her machine.”
Jason E. Street USES Pwn Plug
Jason says his vest of doom usually contains a Pwn Plug for demonstrating potential damage.
Explicit Confidence 98% · Jason E. Street EP 6 Details
“Usually it’s a pwn plug”
Jason E. Street USES Proxmark3
Jason says his mission equipment may include a Proxmark3 tool.
Explicit Confidence 98% · Jason E. Street EP 6 Details
“it may be a Proxmark3 tool”
Jason E. Street USES Dropboxes
Jason says his vest may contain Dropboxes as part of the equipment used to demonstrate potential damage.
Explicit Confidence 98% · Jason E. Street EP 6 Details
“a couple Dropboxes, just some malicious things to show them the damage that I could do”
Jason E. Street USES User ID and password
Jason obtains and uses a user ID and password as objectives in the bank security engagement.
Explicit Confidence 93% · Jason E. Street EP 6 Details
“I will get us a user ID, a password, a smart card, a computer, and network access.”
Jason E. Street USES Smart card
Jason obtains a smart card from a supervisor during the engagement as one of the requested objectives.
Explicit Confidence 94% · Jason E. Street EP 6 Details
“While I was there I got the user ID, the password, and the smart card from one of the main supervisors.”