The types of hackers...

Classifying hackers by the technology they deal with can be complicated. Because networking and computer technology is so vast, hackers often specialize in one or a few specific areas. For example, some focus on a particular O.S. (Ex. Unix, Mac, Windows), some master the workings of individual applications (Ex. e-mail servers, firewalls, Web servers), and some focus on particular types of attacks (Ex. DoS, dial-in-penetration, Web hacks). Still others use social engineering as a way to gain unauthorized access. There are a few hackers who have mastered more than one of the above issues, but only a select few have a great deal of experience in all topics.

There are basically three types of hackers: Coders, Admins, and script kiddies. This characterization is based upon overall competence and ability to compromise computer technology, networks, protocols, and systems.

CODERS

Coders are programers who have the ability to find unique vulnerabilities in existing software and to create working exploit codes. These hackers, as a whole, are not seeking publicity and are rarely part of front-page news stories. As a result, they are known only to the security community for the programs they write and the exploits they have uncovered.

Coders are individuals with a deep understanding of the OSI model and the TCP stack. Coding is more than just a hobby, and they dedicate a great deal of time and energy to it. They are committed to keeping their technical knowledge and skills current. Not all coders are malicious. In fact, some are actively involved in developing technologies that can be used to improve overall network security, such as hackers from the ISS X-force, the Bindview Razor Team, and the AXENT SWAT team.

Coders can work independently or through a network of hacking teams that run exploits from a variety of locations, making it difficult to trace the activities back to their source. These teams can be developed in Internet Relay Chat (IRC) channels, in conferences such as DefCon, or in small groups of computer savvy friends. Often coders create the programs and other members of the team run them against target networks. This creates a reputation for the group rather than a single individual.

ADMINS

Admins are far more common than Coders and may have experience with several operating systems, understand TCP/IP, and know how to exploit several vulnerabilities. They generally have less depth of knowledge but possibly greater breadth than Coders. This level of hacker would be part of a security team in a large organization. Some level of programming or scripting ability is required. For example, they should be able to port a tool form on flavor of Unix to another.

A majority of security consultants fall into this group. Admins have worked with computers for most of their computer careers and understand how they work. They have an extensive collection of tools, a reliable methodology, and ability, but they generally rely on other people to identify and code most exploits due t lack of time to specialize in a particular technology.

Admins like to play with new tools as soon as they come out and are often beta-testers and part-time developers for freeware and open-source security tools. They also found as regular contributors to security mailing lists or post news articles online.

SCRIPT KIDDIES

The lowest and most populated part of the hacker pyramid is the Script kiddie. Their name comes from the fact that members of this group generally rely on previously coded scripts and prepackaged hacking tools downloaded from the Internet to do their hacking. Script kiddies are usually individuals who are intrigued by the notion of gaining unauthorized access and are open to using untested pieces of code, especially while others (target networks and users) are at risk.

For this reason, script kiddies get the least respect but are often the most annoying and dangerous. Script kiddies can cause big problems against networks without truly understanding what the scripts do and what the consequences may be. This combination of irresponsible experimentation and incomplete knowledge often leads to disaster, such as the unintended loss of information.

Script kiddies do not necessarily have computer related professions. In fact, given that they are often younger people on the Internet, they may still be in high school. They run the code they find on the Internet on their office, home, or school network. Script kiddies are generally recipients of security mailing lists, though they may not be regular contributors, and are often vocal in hacker IRC channels. They spend most of their time surfing the Internet in search of the latest and greatest automated hacker tools. Curiosity about how the tools work and what information might be obtained leads to an unauthorized security breech.