Systematically Searching for Identity-Related Information in the Internet with OSINT Tools

TL;DR

This paper presents a systematic approach using OSINT tools to search, classify, and analyze internet data related to digital identities, aiding in early detection of attack vectors and enhancing identity security.

Contribution

It introduces a classification of identity-related data and OSINT tools, and proposes a framework for systematic searching and analysis to improve identity protection.

Findings

Classification of identity-related data and tools

Framework for systematic data search and analysis

Enhanced ability to identify attack vectors early

Abstract

The increase of Internet services has not only created several digital identities but also more information available about the persons behind them. The data can be collected and used for attacks on digital identities as well as on identity management systems, which manage digital identities. In order to identify possible attack vectors and take countermeasures at an early stage, it is important for individuals and organizations to systematically search for and analyze the data. This paper proposes a classification of data and open-source intelligence (OSINT) tools related to identities. This classification helps to systematically search for data. In the next step, the data can be analyzed and countermeasures can be taken. Last but not least, an OSINT framework approach applying this classification for searching and analyzing data is presented and discussed.