Cyber Security

1
Cyber Security

• Phishing Roger Vandawalker
• Packet Sniffing Henry Szablicki
• Spyware Alex Grinman
• How to Secure Jeff Goldstein

2
Agenda

• What is phishing?
• What is at risk?
• How can I avoid being a victim?
• What is being done and by whom?

3
What is phishing?

• Attempt to fraudulently acquire sensitive
  information
• Typically pose as accredited institutions
• Usually in the form of email or instant messages
  (bundled with SPAM)

4
What is phishing?

• Gained early popularity with AOL
• Verify your password or Confirm billing
  information
• Access your account to do illegal activities

5
(No Transcript)
6
(No Transcript)
7
What is at risk?

• Your money
• Your privacy
• Your identity
• At work? All of the above for clients

8
What is at risk?

• While at work
• 39 of employees feel that they are protected
• 63 feel more comfortable clicking suspicious
  links
• 40 have engaged in riskier online behavior
  because they can have IT support
• http//www.vnunet.com/vnunet/news/2142275/work-pc-
  users-ignore-security

9
How can I avoid being a victim?

• Be suspicious of emails from your financial
  institutions
• NEVER email personal or financial information
• Use anti-virus and firewall software
• Pay attention to link URLs and reply-to email
  addresses (domain names)

10
What is being done?

• Third-party developers and financial institutions
  are developing software
• Toolbars for browsers and email clients
• Anti-Phishing Act of 2005
• Proposed to fine phishers up to 250,000 and five
  years in prison

11
(No Transcript)
12
Sources

• http//en.wikipedia.org/wiki/Phishing
• http//www.windowsecurity.com/articles/Avoid-Phish
  ing.html
• http//www.ftc.gov/bcp/conline/pubs/alerts/phishin
  galrt.htm
• http//www.vnunet.com/vnunet/news/2142275/work-pc-
  users-ignore-security
• http//www.cnn.com/2003/TECH/internet/07/21/phishi
  ng.scam/index.html

13
What can I do?

• What you can do to protect your PC from malware

14
Essentials

• Windows Updates

15
Microsofts Recommendations

• Windows Updates
• XP Service Pack 2
• Anti-Spyware

16
Essentials

• Windows Updates
• XP Service Pack 2

17
XP Service Pack 2
18
Essentials

• Windows Updates
• XP Service Pack 2
• Use Common Sense

19
Common Sense

• Never give out your passwords
• Do not open unsolicited e-mails
• Do not install or download unknown programs
• Be careful to whom you give out your personal
  information

20
Essentials

• Windows Updates
• XP Service Pack 2
• Common Sense
• Antivirus Program

21
Antivirus Programs

• Update
• Update
• Update
• Safe Mode
• Real-Time Protection

22
Essentials

• Windows Updates
• XP Service Pack 2
• Common Sense
• Antivirus Program
• Strong Passwords

23
Passwords

• At least 8 characters
• Do not use dictionary words
• Do not include personal information
• Do not use adjacent keys
• Use different passwords for different accounts
• Change your passwords every 90 days
• Put a password on every account
• NEVER GIVE OUT YOUR PASSWORD!!

24
Essentials

• Windows Updates
• XP Service Pack 2
• Common Sense
• Antivirus Program
• Strong Passwords
• Disconnect

25
When are you online?

• On a network with shared Internet Access
• Hooked up to a Cable/DSL connection
• When you dial-up
• What to do?
• Unplug the Ethernet cable
• Turn off your computer

26
Essentials

• Windows Updates
• XP Service Pack 2
• Common Sense
• Antivirus Program
• Strong Passwords
• Disconnect when idle
• Backup and Wipe

27
Backup and Wipe

• Backup data on removable media
• Erase all partitions
• Reinstall Windows
• Plan
• Purchase 3rd party software
• An unprotected computer is only an average of 20
  minutes away from being compromised
  www.sans.org

28
Sources

• http//resnet.albany.edu/
• www.symantec.com
• www.microsoft.com
• http//www.staysafeonline.info/
• www.sans.org
• www.us-cert.gov
• www.dhs.gov

29
When are you online?

• On a network with shared Internet Access
• Hooked up to a Cable/DSL connection
• When you dial-up
• What to do?
• Unplug the Ethernet cable
• Turn off your computer