This document summarizes a workshop on using knowledge portals between organizations and customers. It discusses how knowledge portals can broaden the traditional service model by providing both advice and information to customers. It addresses questions around who the customer or user is, and presents architectures for private or public cloud-based knowledge portals. Security considerations are also discussed.

1. Workshop “Inzet van kennisportals
tussen organisatie en klant”
Boyd Hendriks
Vogin-IP lezing
3 maart 2016

2. Klant
Of
gebruiker
€Dienstverlener
Traditioneel verdienmodel
van dienstverlening

3. taxonomie
K-kaart
I-kaart
Kennis/
dossiers
adviseur
Dienstverlener 100% advies
100% informatie
Klant of
gebruiker
Kennismanagement
Verbreed verdienmodel van dienstverlening

4. Klant of relatieportaal
Kennis/
dossiers
adviseur
Dienstverlener 100% advies
100% informatie
Klant of
gebruiker
Kennismanagement

5. Wie is de klant
of de gebruiker

7. regio
organisatie
Team / afdeling
individu
global

8. Dienst-
verlener
Klant of
gebruiker
Private
-cloud
Public
-cloud

10. Architectuur

12. Information
Listed clustered prioritised
abstracted
Alerted
analysed
recommended
concluded
Information
value
chain

13. Dienst-
verlener
Klant of
gebruiker
Private
-cloud
Public
-cloud
Security

14. Private
-cloud
Public
-cloud
1-Footprinting - Determining the targets footprint, e.g. DNS records, IP scope, public
information, contact information, etc.
2-Scanning - Determining the targets openings, e.g. service ports, wireless networks, modems
pools, vpn servers, etc.
3-Enumeration - Determining the services behind the openings, e.g. webservers, systems,
routers, firewalls, wifi authentication, etc.
4-Penetration - Selecting appropiate exploits and penetrate the target, e.g. SQL injection,
buffer overflow, password attacks, etc.
5-Escalation - Escalation of the credentials to admin or root, e.g. dll injection, local exploit,
configuration change, sceduled jobs, etc.
6-Getting Interactive - Getting a remote shell or GUI on the target, e.g. RDP, VNC,
NetCat, etc.
7-Expanding Influence - Moving from the initial target as a foothold or beach-head to the rest
of the network taking over the domain.
8-Cleaning Up - Ensuring backdoors and removing evidence, e.g. rootkits, log removal,
log editing, etc.
9-Reporting - Writing and presenting a report on the pen-test to the owners of the network
one had authoritation to test.
Pentest

15. 2% aanjagers
14% snelle instappers
34% vroege helft
34% late helft
16% onwilligen
stagnatie
Het gebruik van het klantportaa
Acceptatie
Tijd

18. Dank voor uw aandacht
Vragen ?