The Risks and Opportunities of Mobile Working within Cloud Environments
|
|
|
- Jodie Underwood
- 5 years ago
- Views:
Transcription
1 The Risks and Opportunities of Mobile Working within Cloud Environments Prof Bill Buchanan, Adrian Smales
2 DFET Training in Napier Cloud Campus-based training On-site training Mac Forensics. Open Source Data Investigations. Red Team v Blue Team. Network Investigator. Threat/Vulnerability Analysis. Critical Incident Response. Disaster Recovery. EnCase v7. Academic Credit (MSc)
3
4 The Cloud 12TB of Tweets. 90% of all data in the Cloud produced in the last two years. 2,500,000,000,000,000 bytes of data produced every data 2.5 Quintillion Bytes 1 billion hard disks Gartner Trend Mobile Device Battles - Android 81% - ios 13% In-memory Computing Personal Cloud Enterprise App Stores Hybrid IT and Cloud Computing Mobile Apps and HTML 5 Integrated Ecosystems Internet of Things All devices addressable
5
6 What type of phone operating system do you have? 1. Blackberry. 2. Android IOS. 3. Apple IOS. 4. Windows None. I don t have a phone. 14% 34% 48% 5% 0%
7 How many different logins do you have: 1. One More than eight. 27% 19% 44% 10%
8 How many different passwords do you have? 1. One More than eight. 48% 25% 23% 4%
9 Which best matches your one of your passwords: 1. It is an animal/pet (past/present) 2. It is a car (past/present) 3. It is someone in my family. 4. It is my football/sports team. 5. It is a place. 6. It is a toy/game character. 7. None of the above. 60% 16% 11% 7% 4% 2% 2%
10 What is your longest password: 1. Up to 7 characters characters characters. 4. More than 9 characters. 16% 25% 58% 2%
11 What is your greatest worry on the Internet? 1. Someone steals my identity. 41% 2. Someone gets my bank account/credit card details. 3. Someone tracks my location. 28% 4. Someone gets into my computer/phone. 19% 5. Someone tracks my Web activity. 6. Someone gets my passwords. 2% 7% 3%
12 The Risks and Opportunities of Mobile Working within Cloud Environments 10 Risks Prof Bill Buchanan, Adrian Smales
13 Risk 1: Loss of Device Web connections (Cloud+Corporate) connections (Cloud+Corporate) File connection (Cloud+Corportate) Location Records Phone Records Memory Analysis Break PIN Root mobile phone Extract Memory and Storage (USB) Disk Storage Analysis
14 Risk 2: Rogue SSID/Gateway Free Moonbucks Wireless Rogue Gateway Moonbucks Wireless Internet Gateway
15 Risk 2: Rogue SSID/Gateway Eve Free Moonbucks Wireless Rogue Gateway Moonbucks Wireless Internet Gateway VPN Tunnel s over Internet Http: Non secure Https: Encrypted
16 Risk 3: Lack of Separation Business Life Home Life Corporate Firewall
17 Risk 3: Lack of Separation Business Life C:\dropbox\kpmg>route print Home Life =========================================================================== Interface List a 3c 7a 00...Cisco AnyConnect Secure Mobility Client 12...c8 f7 33 4b Intel(R) Centrino(R) Advanced-N 6235 =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric On-link On-link
18 Risk 4: One Password Fits All 150 million accounts compromised # Count Ciphertext Plaintext EQ7fIpT7i/Q= j9p+hwtwwt86amjgzflzyg== L8qbAD3jl3jioxG6CatHBw== password BB4e6X+b2xLioxG6CatHBw== adobe j9p+hwtwwt/ioxg6cathbw== djv7ZCI2ws= qwerty dqi0aswpyvq= LqYzKVeq8I= PMDTbP0LZxu03SwrFUvYGA== photoshop e6mpxq5g6a8= million accounts 6.5 million accounts (June 2013) One account hack leads to others 1 million accounts in plain text. 77 million compromised Dropbox compromised ,000 client accounts
19 Risk 4: One Password Fits All 150 million accounts compromised # Count Ciphertext Plaintext EQ7fIpT7i/Q= j9p+hwtwwt86amjgzflzyg== L8qbAD3jl3jioxG6CatHBw== password BB4e6X+b2xLioxG6CatHBw== adobe j9p+hwtwwt/ioxg6cathbw== djv7ZCI2ws= qwerty dqi0aswpyvq= LqYzKVeq8I= PMDTbP0LZxu03SwrFUvYGA== photoshop e6mpxq5g6a8= Two-factor everything in the Cloud
20
21
22
23
24
25 Risk 5: Device Poisoning Who has this IP address ( )? ARP Poisoning Here is my MAC address (11:22:33:44:55:66) Gateway ( ) DHCP Request... Here is my MAC address (22:33:44:55:66) Eve DNS Poisoning Here is your IP address, Gateway, and DNS IP Eve DHCP 314 DHCP Discover - Transaction ID 0x3d1d Frame 1: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Grandstr_01:fc:42 (00:0b:82:01:fc:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: ( ), Dst: ( ) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) DHCP 342 DHCP Offer - Transaction ID 0x3d1d Frame 2: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) Ethernet II, Src: DellComp_ad:f1:9b (00:08:74:ad:f1:9b), Dst: Grandstr_01:fc:42 (00:0b:82:01:fc:42) Internet Protocol Version 4, Src: ( ), Dst: ( ) User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68) DHCP 314 DHCP Request - Transaction ID 0x3d1e Frame 3: 314 bytes on wire (2512 bits), 314 bytes captured (2512 bits) Ethernet II, Src: Grandstr_01:fc:42 (00:0b:82:01:fc:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: ( ), Dst: ( ) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) DHCP 342 DHCP ACK - Transaction ID 0x3d1e Frame 4: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) Ethernet II, Src: DellComp_ad:f1:9b (00:08:74:ad:f1:9b), Dst: Grandstr_01:fc:42 (00:0b:82:01:fc:42) Internet Protocol Version 4, Src: ( ), Dst: ( ) User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
26 Risk 6: Unpatched Systems CVE Adobe Flash Player. Integer overflow Eve Phoenix Exploit Kit CVE Adobe Flash Player. Run code on machine. CVE Java Exploit CrimeBoss
27 Risk 7: Shoulder Surfing Passwords, customer details, s, usernames, etc can all be shoulder surfed. Privacy filter is an inexpensive investment.
28 Risk 8: Storing Non-encrypted to the Cloud Encryption Layer Non-UK/EU storage. Open to hack.
29 Risk 9: Digital Shadows Photos Device Records Facebook Forums Twitter
30 Risk 10: Trusting https and fake cert Eve Eve-in-the-middle (Proxy/Fake Certificates)
31 Rank the Risks (Top 5) A. Loss of device. B. Rogue SSID/Gateway. C. Lack of separation. D. One password fits all. E. Device Poisoning. F. Unpatched Systems. G. Shoulder Surfing. H. Non-encrypted to Cloud. I. Digital Footprint. J. Fake Certificates. 12% Loss of device. Rogue SSID/Gateway. 9% 6% 16% 7% 16% Lack of separation. One password fits all. Device Poisoning. Unpatched Systems. Shoulder Surfing. Non-encrypted to Cloud. Digital Footprint. Fake Certificates. 5% 12% 4% 13%
32 Who do you trust with your ID (Top 5)? A. Microsoft 29% B. Apple C. Google 22% 20% D. Facebook 14% E. Twitter F. Linked. 4% 4% 6% G. Scottish Government ID. Microsoft Apple Google Facebook Twitter Linked. Scottish Government ID.
33 Who do you trust least with your ID (Worst 5)? A. Microsoft B. Apple C. Google D. Facebook E. Twitter F. Linked. G. Scottish Government ID. Microsoft 3% 4% 43% 18% 16% 10% Apple Google Facebook Twitter Linked. 7% Scottish Government ID.
34 The Risks and Opportunities of Mobile Working within Cloud Environments Prof Bill Buchanan, Adrian Smales
35
Computing Science: Now and The Future
Computing Science: Now and The Future Inc. Computer Security Prof Bill Buchanan, Twitter: @billatnapier Web: asecuritysite.com, brightredbooks.net Xmas Cyber Lectures (3000 pupils 4 cities) + IET Xmas
Incident Response Introduction. Risk Analysis. Risk Management. Outline of threats. Data Loss. Fundamentals.
Stateful PIX/ASA firewall Incident Response Introduction. Risk Analysis. Risk Management. Outline of threats. Data Loss. Fundamentals. Eve Bob Trent Bob Alice Inc Response Types Stateful PIX/ASA firewall
Proxy VPN. Network Forensics. Adv Security and. Eve. Bob. Alice SIEM. Author: Prof Bill Buchanan
Adv Security and Network Forensics Proxy VPN Eve Bob Alice Author: Prof Bill Buchanan Big Data Four Vs of Big Data V- Velocity [Speed of data generation] V- Variety [Different forms of data] V- Veracity
Wireshark Lab: DHCP SOLUTION
Wireshark Lab: DHCP SOLUTION Supplement to Computer Networking: A Top-Down Approach, 6 th ed., J.F. Kurose and K.W. Ross 2005-21012, J.F Kurose and K.W. Ross, All Rights Reserved Here is a screen shot
Man-In-The-Browser Attacks. Daniel Tomescu
Man-In-The-Browser Attacks Daniel Tomescu 1 About me Work and education: Pentester @ KPMG Romania Moderator @ Romanian Security Team MSc. Eng. @ University Politehnica of Bucharest OSCP, CREST CRT Interests:
Security Trend of New Computing Era
Security Trend of New Computing Era Presented by Roland Cheung HKCERT Agenda Security Threat Overview Introduction of Botnet Impact of Botnet Fight Back Botnet Security Protection Scheme Security Threat
Wireless Network Security
Wireless Network Security Why wireless? Wifi, which is short for wireless fi something, allows your computer to connect to the Internet using magic. -Motel 6 commercial 2 but it comes at a price Wireless
ERP Solution to the Cloud
IT s Not so Scary: Moving your Onprem ERP Solution to the Cloud Lizza Novo Mission Furthering your success through the alignment of strategy, people, processes and technology. What is the Term Cloud? Server
Frequently Asked Questions WPA2 Vulnerability (KRACK)
Frequently Asked Questions WPA2 Vulnerability (KRACK) Release Date: October 20, 2017 Document version: 1.0 What is the issue? A research paper disclosed serious vulnerabilities in the WPA and WPA2 key
Hacking Demonstration. Dr John McCarthy Ph.D. BSc (Hons) MBCS
Hacking Demonstration Dr John McCarthy Ph.D. BSc (Hons) MBCS Demonstration Deploying effective cyber security is one of the 21 st century s greatest challenges for business. The threats facing businesses
THE KERNEL. Our in-house professional team is highly skilled in delivering cutting-edge solutions to our clients.
THE KERNEL Our in-house professional team is highly skilled in delivering cutting-edge solutions to our clients. Since our founding in 1986, and establishing The Kernel s UAE office in 2008, our company
Beyond BYOD Mobility, Cloud and the Internet of Everything
Beyond BYOD Mobility, Cloud and the Internet of Everything COCCOC-2002 Donald Gunn, Program Manager Cisco IT Agenda Changing Environment Devices Security Support Cloud & Apps Questions COCCOC-2002 2015
PRACTICING SAFE COMPUTING AT HOME
PRACTICING SAFE COMPUTING AT HOME WILLIAM (THE GONZ) FLINN M.S. INFORMATION SYSTEMS SECURITY MANAGEMENT; COMPTIA SECURITY+, I-NET+, NETWORK+; CERTIFIED PATCHLINK ENGINEER ENTERPRISE INFORMATION SYSTEMS
Savvius Insight Initial Configuration
The configuration utility on Savvius Insight lets you configure device, network, time settings, and reporting options. Important! Savvius Insight comes pre-configured to obtain its IP address via DHCP.
FRONT RUNNER DIPLOMA PROGRAM Version 8.0 INFORMATION SECURITY Detailed Course Curriculum Course Duration: 6 months
FRONT RUNNER DIPLOMA PROGRAM Version 8.0 INFORMATION SECURITY Detailed Course Curriculum Course Duration: 6 months MODULE: INTRODUCTION TO INFORMATION SECURITY INFORMATION SECURITY ESSENTIAL TERMINOLOGIES
Russ McRee Bryan Casper
Russ McRee Bryan Casper About us We re part of the security incident response team for Microsoft Online Services Security & Compliance We ask more questions than provide answers This presentation is meant
Cyber Security Basics. Presented by Darrel Karbginsky
Cyber Security Basics Presented by Darrel Karbginsky What s to come In the following slides I am going to discuss amongst other things and in no particular order things to enlighten, frighten, educate,
SECURITY STORY WE NEVER SEE, TOUCH NOR HOLD YOUR DATA
SECURITY STORY WE NEVER SEE, TOUCH NOR HOLD YOUR DATA CTO Office www.digi.me another Engineering Briefing digi.me keeping your data secure at all times ALL YOUR DATA IN ONE PLACE TO SHARE WITH PEOPLE WHO
Yes, You can protect your endpoints! Szilard Csordas, Security Consultant scsordas [at] cisco.com
![Yes, You can protect your endpoints! Szilard Csordas, Security Consultant scsordas [at] cisco.com](/thumbs/88/115377705.jpg "Yes, You can protect your endpoints! Szilard Csordas, Security Consultant scsordas [at] cisco.com")
Yes, You can protect your endpoints! Szilard Csordas, Security Consultant scsordas [at] cisco.com Endpoint Footprint Problem: TOO MANY AGENTS! Anti-Virus/Anti-Spyware agent IPSec/SSLVPN agent Host IPS/FW
Big Trends in IT and how they shape Security. Gerhard Eschelbeck, CTO
Big Trends in IT and how they shape Security Gerhard Eschelbeck, CTO Industry Trends #1 The Rapidly Growing Demand for Processing and Data Storage Google processes 20 PB a day London s traffic cams processing
Hackveda Training - Ethical Hacking, Networking & Security
Hackveda Training - Ethical Hacking, Networking & Security Day1: Hacking windows 7 / 8 system and security Part1 a.) Windows Login Password Bypass manually without CD / DVD b.) Windows Login Password Bypass
INTRODUCTION TO CLOUD STORAGE
INTRODUCTION TO CLOUD STORAGE GETTING STARTED PAGE 02 Class Overview What You Will Learn WHAT IS THE CLOUD? PAGE 03 Basic Vocabulary Advantages of the Cloud Disadvantages of the Cloud CLOUD STORAGE SERVICES
Hacker Academy Ltd COURSES CATALOGUE. Hacker Academy Ltd. LONDON UK
Hacker Academy Ltd COURSES CATALOGUE Hacker Academy Ltd. LONDON UK TABLE OF CONTENTS Basic Level Courses... 3 1. Information Security Awareness for End Users... 3 2. Information Security Awareness for
MUG NNAPLES MACFRIENDS USER GROUP
Preparing for your Digital Afterlife Monday December 10, 2018 MUG NNAPLES MACFRIENDS USER GROUP About Jeff Bohr, owner of Naples Mac Help I have been using the Mac platform since 1986, and began using
The Internet of Everything is changing Everything
The Internet of Everything is changing Everything Intelligent Threat Defense for the Enterprise Mobility Nikos Mourtzinos, CCIE #9763 Global Security Sales Organization Changing Business Models Any Device
Managing and Securing Computer Networks. Guy Leduc. Chapter 7: Securing LANs. Chapter goals: security in practice: Security in the data link layer
Managing and Securing Computer Networks Guy Leduc Chapter 7: Securing LANs Computer Networking: A Top Down Approach, 7 th edition. Jim Kurose, Keith Ross Addison-Wesley, April 2016. (section 8.8) Also
On the Internet, nobody knows you re a dog.
On the Internet, nobody knows you re a dog. THREATS TO DISTRIBUTED APPLICATIONS 1 Jane Q. Public Big Bank client s How do I know I am connecting to my bank? server s Maybe an attacker...... sends you phishing
Wireless LAN Security (RM12/2002)
Information Technology in Education Project Reference Materials Wireless LAN Security (RM12/2002) Infrastructure Division Education Department The Government of HKSAR www.ited.ed.gov.hk December 2002 For
Storage as an IoT Device Roundtable Walt Hubis, CISSP Tom Coughlin
Storage as an IoT Device Roundtable Walt Hubis, CISSP Tom Coughlin Participants Monty A. Forehand Product Security Officer and Technologist Seagate Technology Robert Thibadeau Chairman and CEO Drive Trust
Malling U3A Computer Group. Cloud Storage. Chris Daly 3 rd April 2017
Malling U3A Computer Group Chris Daly 3 rd April 2017 Storage not memory In digital devices data has to be retained to make it work (i.e. operating system) You also want to keep any saved information (documents,
UNT System Campus VPN Guide
Contents Introduction... 3 SSL Web Portal... 4 Installing AnyConnect VPNClient... 12 Connecting AnyConnect VPN client... 16 IPSec Client Configuration... 18 Apple OS X Configuration... 21 Android Configuration...
Welcome. Password Management & Public Wi-Fi Security. Hosted by: Content by:
Welcome Password Management & Public Wi-Fi Security Hosted by: Content by: Presenter: Ray Cool, CEO PBSI Technology Solutions Webinar will begin at 1:00 Welcome Foster & Motley Clients to Security Education
Deltek Touch Expense for Ajera. Touch 1.0 Technical Installation Guide
Deltek Touch Expense for Ajera Touch 1.0 Technical Installation Guide June 01, 2018 While Deltek has attempted to verify that the information in this document is accurate and complete, some typographical
CISSP CEH PKI SECURITY + CEHv9: Certified Ethical Hacker. Upcoming Dates. Course Description. Course Outline
CISSP CEH PKI SECURITY + CEHv9: Certified Ethical Hacker Learn to find security vulnerabilities before the bad guys do! The Certified Ethical Hacker (CEH) class immerses students in an interactive environment
What FinAid offices need to know about cyberattacks. Presented by: Chris Chumley, COO at CampusLogic Thursday, March 31, EST
What FinAid offices need to know about cyberattacks Presented by: Chris Chumley, COO at CampusLogic Thursday, March 31, 2016 @12pm EST BY 2014, OVER 1 BILLION PERSONAL DATA RECORDS HAD BEEN COMPROMISED
Cyber Security & Ethical Hacking Training. Introduction to Cyber Security Introduction to Cyber Security. Linux Operating System and Networking: LINUX
Cyber Security & Ethical Hacking Training. Introduction to Cyber Security Introduction to Cyber Security HTML PHP Database Linux Operating System and Networking: LINUX NETWORKING Information Gathering:
Product Brief. Circles of Trust.
Product Brief Circles of Trust www.cryptomill.com product overview Circles of Trust is an enterprise security software system that eliminates the risks associated with data breaches from a hacker attack
NETWORK THREATS DEMAN
SELF-DEFENDING NETWORK NETWORK THREATS DEMAN NEW SECURITY: STRATEGIES TECHNOLOGIES Self-Propagating Threats A combination of: self propagating threats Collaborative applications Interconnected environments
CirrusSense Router Quick Start Guide. Connect your router. Configure your router for internet access
CirrusSense Router Quick Start Guide by Transducers Direct Connect your router 1) First, if you re going to connect to the internet via a wired connection, connect an Ethernet cable to the Ethernet port
DO NOT OPEN UNTIL INSTRUCTED
CS 378 - Network Security and Privacy Spring 2017 FINAL May 3, 2017 DO NOT OPEN UNTIL INSTRUCTED YOUR NAME: Collaboration policy No collaboration is permitted on this exam. Any cheating (e.g., submitting
10 FOCUS AREAS FOR BREACH PREVENTION
10 FOCUS AREAS FOR BREACH PREVENTION Keith Turpin Chief Information Security Officer Universal Weather and Aviation Why It Matters Loss of Personally Identifiable Information (PII) Loss of Intellectual
WIALAN Technologies, Inc. Unit Configuration Thursday, March 24, 2005 Version 1.1
WIALAN Technologies, Inc. Unit Configuration Thursday, March 24, 2005 Version 1.1 Table of Content I. Introduction...3 II. Logging into WiSAP... 3 III. WiSAP Overview... 5 Splash Screen... 5 System Status...
Protecting your Data in the Cloud. Cyber Security Awareness Month Seminar Series
Protecting your Data in the Cloud Cyber Security Awareness Month Seminar Series October 24, 2012 Agenda Introduction What is the Cloud Types of Clouds Anatomy of a cloud Why we love the cloud Consumer
CompTIA Network+ Study Guide Table of Contents
CompTIA Network+ Study Guide Table of Contents Course Introduction Table of Contents Getting Started About This Course About CompTIA Certifications Module 1 / Local Area Networks Module 1 / Unit 1 Topologies
5 Trends That Will Impact Your IT Planning in Layered Security. Executive Brief
5 Trends That Will Impact Your IT Planning in 2012 Layered Security Executive Brief a QuinStreet Excutive Brief. 2011 Layered Security Many of the IT trends that your organization will tackle in 2012 aren
ECPE / COMP 177 Fall Some slides from Kurose and Ross, Computer Networking, 5 th Edition
ECPE / COMP 177 Fall 2016 Some slides from Kurose and Ross, Computer Networking, 5 th Edition Course Organization Top-Down! Starting with Applications / App programming Then Transport Layer (TCP/UDP) Then
ITP 140 Mobile Technologies. Mobile Topics
ITP 140 Mobile Technologies Mobile Topics Topics Analytics APIs RESTful Facebook Twitter Google Cloud Web Hosting 2 Reach We need users! The number of users who try our apps Retention The number of users
Account Takeover: Why Payment Fraud Protection is Not Enough
Cybercrime Protection Account Takeover: Why Payment Fraud Protection is Not Enough Mustafa Rassiwala, ThreatMetrix, Inc. April 2014 1 Agenda 1. Customer Accounts Blessing or Curse? 2. Passwords Weakest
THE NEW LANDSCAPE OF AIRBORNE CYBERATTACKS
SESSION ID: MBS-W04 THE NEW LANDSCAPE OF AIRBORNE CYBERATTACKS Nadir Izrael CTO & Co-Founder Armis, Inc. Ben Seri Head of Research Armis, Inc. Placeholder Slide: Image of spread of infection Placeholder
B.Y.O.D Bring Your Own Device
B.Y.O.D Bring Your Own Device Ed Merkle Motorola Solutions, Inc AAPA Technology Seminar May 14, 2013 BYOD - Statistics 60m tablets to be shipped in 2011 275m tablets to be shipped in 2015 Apple s market
PrecisionAccess Trusted Access Control
Data Sheet PrecisionAccess Trusted Access Control Defeats Cyber Attacks Credential Theft: Integrated MFA defeats credential theft. Server Exploitation: Server isolation defeats server exploitation. Compromised
Accessing CharityMaster data from another location
Accessing CharityMaster data from another location When all of your computers are on the same Local Area Network (LAN), you can place the back end files (including your data and the Word templates) onto
Internet Platform Management. We have covered a wide array of Intel Active Management Technology. Chapter12
Chapter12 Internet Platform Management The Internet is like alcohol in some sense. It accentuates what you would do anyway. If you want to be a loner, you can be more alone. If you want to connect, it
Welcome. ScrogginsGrear clients. to Cybersecurity Education Series. Password Management & Public Wi-Fi Security
Welcome ScrogginsGrear clients to Cybersecurity Education Series Password Management & Public Wi-Fi Security Presenter: Ray Cool, CEO PBSI Technology Solutions Webinar will begin at 1:00 Welcome ScrogginsGrear
CERTIFIED SECURE COMPUTER USER COURSE OUTLINE
CERTIFIED SECURE COMPUTER USER COURSE OUTLINE Page 1 TABLE OF CONTENT 1 COURSE DESCRIPTION... 3 2 MODULE-1: INTRODUCTION TO DATA SECURITY... 4 3 MODULE-2: SECURING OPERATING SYSTEMS... 6 4 MODULE-3: MALWARE
Zimperium Global Threat Data
Zimperium Global Threat Report Q2-2017 700 CVEs per Year for Mobile OS 500 300 100 07 08 09 10 11 12 13 14 15 16 17 Outdated ios Outdated ANDROID 1 of 4 Devices Introduces Unnecessary Risk 1 out of 50
SECURITY ON PUBLIC WI-FI New Zealand. A guide to help you stay safe online while using public Wi-Fi
SECURITY ON PUBLIC WI-FI New Zealand A guide to help you stay safe online while using public Wi-Fi WHAT S YOUR WI-FI PASSWORD? Enter password for the COFFEE_TIME Wi-Fi network An all too common question
Prescriptive Security Operations Centers. Leveraging big data capabilities to build next generation SOC
Prescriptive Security Operations Centers Leveraging big data capabilities to build next generation SOC Cyber Security Industry in constant renewal in 2016 and 2017 1 Tbps Mirai IoT Botnet broke the Internet
SharkFest 17 Europe. #35 Sneaking in The Backdoor. Hacking the Non-Standard Layers. Phill Sherlock Shade. Merlion s Keep Consulting.
SharkFest 17 Europe #35 Sneaking in The Backdoor Hacking the Non-Standard Layers 10 November 2017 Phill Sherlock Shade Merlion s Keep Consulting #sf17eu Estoril, Portugal #sf17eu Estoril, Portugal Merlion
A+ Guide to Software: Managing, Maintaining, and Troubleshooting, 5e. Chapter 8 Networking Essentials
A+ Guide to Software: Managing, Maintaining, and Troubleshooting, 5e Chapter 8 Networking Essentials Objectives Learn about the protocols and standards Windows uses for networking Learn how to connect
Quick Installation Guide
Quick Installation Guide NEXTAV TM Cloud Hub - Table of Contents Product Features... 1 Ways to Connect... 1 Hardware and Accessories... 2 Product Parameters... 2 Minimum Hardware Requirements... 2 Product
Prof. Bill Buchanan Room: C.63
Wireless LAN CO72047 Unit 7: Filtering Prof. Bill Buchanan Contact: w.buchanan@napier.ac.uk Room: C.63 Telephone: X2759 MSN Messenger: w_j_buchanan@hotmail.com WWW: http://www.dcs.napier.ac.uk/~bill http://buchananweb.co.uk
Certificate Enrollment for the Atlas Platform
Certificate Enrollment for the Atlas Platform Certificate Distribution Challenges Digital certificates can provide a secure second factor for authenticating connections from MAP-wrapped enterprise apps
Going Mobile at Northwestern
NUIT Tech Talk Going Mobile at Northwestern May 17, 2011 NUIT Support Center staff Today s Agenda Popular Mobile Devices iphone/ipod Touch Android Phone Windows Phone 7 BlackBerry Laptops, Tablets, and
Pluralsight CEU-Eligible Courses for CompTIA Network+ updated March 2018
Pluralsight CEU-Eligible Courses for CompTIA Network+ updated March 2018 Access Control Lists (ACLs) for Cisco CCNA 200-125/100-105 Advanced Access Control with Cisco ISE for CCNP Security (300-208) SISAS
User Manual Electronic Systems Protection, Inc. / Technical Support: / espei.com
RP-IP RP-IP-GNS User Manual 2014 Electronic Systems Protection, Inc. / Technical Support: 1-800-645-9721 / espei.com 2014 Electronic Systems Protection, Inc. / Technical Support: 1-800-645-9721 / espei.com
Automated Response in Cyber Security SOC with Actionable Threat Intelligence
Automated Response in Cyber Security SOC with Actionable Threat Intelligence while its biggest weakness is lack of visibility: SOCs still can t detect previously unknown threats, which is a consistent
IT Services IT LOGGING POLICY
IT LOGGING POLICY UoW IT Logging Policy -Restricted- 1 Contents 1. Overview... 3 2. Purpose... 3 3. Scope... 3 4. General Requirements... 3 5. Activities to be logged... 4 6. Formatting, Transmission and
Endpoint Security - what-if analysis 1
Endpoint Security - what-if analysis 1 07/23/2017 Threat Model Threats Threat Source Risk Status Date Created File Manipulation File System Medium Accessing, Modifying or Executing Executable Files File
CS155b: E-Commerce. Lecture 6: Jan. 25, Security and Privacy, Continued
CS155b: E-Commerce Lecture 6: Jan. 25, 2001 Security and Privacy, Continued FIREWALL A barrier between an internal network & the Internet Protects the internal network from outside attacks Executes administrator-defined
Cisco Exam Questions & Answers
Cisco 648-385 Exam Questions & Answers Number: 648-385 Passing Score: 800 Time Limit: 120 min File Version: 34.4 http://www.gratisexam.com/ Cisco 648-385 Exam Questions & Answers Exam Name: CXFF - Cisco
Elementary Computing CSC 100. M. Cheng, Computer Science
Elementary Computing CSC 100 1 Internet (2) TCP/IP and IP Addresses Hostnames and Domain Name System Internet Services Client/Server and Peer- 2- Peer Applications SPAMs & Phishing, Worms, Viruses & Trojans
This course prepares candidates for the CompTIA Network+ examination (2018 Objectives) N
CompTIA Network+ (Exam N10-007) Course Description: CompTIA Network+ is the first certification IT professionals specializing in network administration and support should earn. Network+ is aimed at IT
6. 3. Media Sharing Access the USB disk. 5. Click OK. Tips:
Chapter 6 USB Application 5. Click OK. Tips: The router can share 32 volumes at most. You can click not need to share. on the page to detach the corresponding volume you do 6. 3. Media Sharing The feature
HikCentral V1.3 for Windows Hardening Guide
HikCentral V1.3 for Windows Hardening Guide Contents Introduction... 1 1. The Operating System - Microsoft Windows Security Configuration... 2 1.1Strict Password Policy... 2 1.2Turn Off Windows Remote
EN-2000 Quick Configuration Guide
Document Part Number 17539.0000 Version A.8, March 2018 2018 Encore Networks, Inc. All rights reserved. EN-2000 Quick Configuration Guide T he EN-2000 is a high-performance, low-cost VPN router designed
Pass4suresVCE. Pass4sures exam vce dumps for guaranteed success with high scores
Pass4suresVCE http://www.pass4suresvce.com Pass4sures exam vce dumps for guaranteed success with high scores Exam : CS0-001 Title : CompTIA Cybersecurity Analyst (CySA+) Exam Vendor : CompTIA Version :
Procedure to Connect NIC VPN in Windows for ebiz
Procedure to Connect NIC VPN in Windows for ebiz This procedure is a step by step guide for ebiz users to connect NIC VPN on Windows machines to access the ebiz services. It is prepared for end users like
31270 Networking Essentials Focus, Pre-Quiz, and Sample Exam Answers
31270 Networking Essentials Focus, Pre-Quiz, and Sample Exam Answers CONTENTS Focus Questions... 2 Chapter 1: Explore the Network... 2 Chapter 2: Configure a Network Operating System... 5 Chapter 3: Network
Lechange App. User s Manual V1.0.0
Lechange App User s Manual V1.0.0 Cybersecurity Recommendations Mandatory actions to be taken towards cybersecurity 1. Change Passwords and Use Strong Passwords: The number one reason systems get hacked
Multi-Factor Authentication (MFA)
10.10.18 1 Multi-Factor Authentication (MFA) What is it? Why should I use it? CYBERSECURITY Tech Fair 2018 10.10.18 2 Recent Password Hacks PlayStation Network (2011) 77 Million accounts hacked Adobe (2013)
Meeting 39. Guest Speaker Dr. Williams CEH Networking
Cyber@UC Meeting 39 Guest Speaker Dr. Williams CEH Networking If You re New! Join our Slack ucyber.slack.com Feel free to get involved with one of our committees: Content, Finance, Public Affairs, Outreach,
Tips for Passing an Audit or Assessment
Tips for Passing an Audit or Assessment Rob Wayt CISSP-ISSEP, HCISPP, CISM, CISA, CRISC, CEH, QSA, ISO 27001 Lead Auditor Senior Security Engineer Structured Communication Systems Who likes audits? Compliance
Homework 4 assignment for ECE374 Posted: 04/06/15 Due: 04/13/15
ECE374: Homework 4 1 Homework 4 assignment for ECE374 Posted: 04/06/15 Due: 04/13/15 Note: In all written assignments, please show as much of your work as you can. Even if you get a wrong answer, you can
HikCentral V.1.1.x for Windows Hardening Guide
HikCentral V.1.1.x for Windows Hardening Guide Contents Introduction... 1 1. The Operating System - Microsoft Windows Security Configuration... 2 1.1 Strict Password Policy... 2 1.2 Turn Off Windows Remote
Cisco Desktop Collaboration Experience DX650 Security Overview
White Paper Cisco Desktop Collaboration Experience DX650 Security Overview Cisco Desktop Collaboration Experience DX650 Security Overview The Cisco Desktop Collaboration Experience DX650 (Cisco DX650)
The S in IoT is for Security Owning all the Things
Raja Mukerji Co-Founder, ExtraHop Networks @rajamukerji The S in IoT is for Security Owning all the Things Why Now? Topics of Discussion Why should you care about the Internet of Things? What challenges
Methodology USA UK AUSTRALIA CANADA JAPAN N=1,008 MOE=+/-3% N=1,044 MOE=+/- 3% N=1,028 MOE=+/- 3% N=1,025 MOE=+/- 3% N=1,005 MOE=+/- 3%
Norton by Symantec commissioned an online survey across nine countries in order to better understand consumers public Wi-Fi perceptions and practices, unveiling consumer misconceptions and worries about
COMP211 Chapter 4 Network Layer: The Data Plane
COMP211 Chapter 4 Network Layer: The Data Plane All material copyright 1996-2016 J.F Kurose and K.W. Ross, All Rights Reserved Computer Networking: A Top Down Approach 7 th edition Jim Kurose, Keith Ross
Chapter 4 Network Layer: The Data Plane
Chapter 4 Network Layer: The Data Plane A note on the use of these Powerpoint slides: We re making these slides freely available to all (faculty, students, readers). They re in PowerPoint form so you see
G806+H3C WSR realize VPN networking
G806+H3C WSR800-10 realize VPN networking File Version: V1.0.0 1 1.Configure H3C WSR 800-10 1.1.Enter H3C WSR 800-10 Web Server Power the H3C WSR 800-10 and connect PC Ethernet interface to H3C WSR 800-10
Vendor: CompTIA. Exam Code: Exam Name: CompTIA A+ Certification Exam (902) Version: Demo
Vendor: CompTIA Exam Code: 220-902 Exam Name: CompTIA A+ Certification Exam (902) Version: Demo DEMO QUESTION 1 Which of the following best practices is used to fix a zero-day vulnerability on Linux? A.
Thanks for attending this session on April 6 th, 2016 If you have any question, please contact Jim at
Thanks! Thanks for attending this session on April 6 th, 2016 If you have any question, please contact Jim at jim@stickleyonsecurity.com Don t forget to checkout Stickley on Security and learn about our
Manage Mobile Security Incidents Like A Boss
Manage Mobile Security Incidents Like A Boss Ismail Guneydas Security Manager/Faculty Kimberly Clark/Texas A&M 10/02/2015 Legal Notice From My Lawyer The opinions expressed in this presentation represent
MOBILE SECURITY OVERVIEW. Tim LeMaster
MOBILE SECURITY OVERVIEW Tim LeMaster tim.lemaster@lookout.com Your data center is in the cloud. Your users and customers have gone mobile. Starbucks is your fall-back Network. Your mobile device is a
Quick Start Guide for Standalone EAP
Quick Start Guide for Standalone EAP CHAPTERS 1. Determine the Management Method 2. Build the Network Topology 3. Log In to the EAP 4. Edit the SSID 5. Configure and Manage the EAP This guide applies to:
AirCruiser G Wireless Router GN-BR01G
AirCruiser G Wireless Router GN-BR01G User s Guide i Contents Chapter 1 Introduction... 1 Overview...1 Features...1 Package Contents...2 AirCruiser G Wireless Router Rear Panel...2 AirCruiser G Wireless
Simplify Your Network Security with All-In-One Unified Threat Management
Singtel Business Product Factsheet Brochure Managed Defense Unified Services Management Simplify Your Network Security with All-In-One Unified Management Singtel Managed Unified Management (UTM) Services,
Welcome to Airconsole TS Thanks for purchasing Airconsole TS The worlds smallest most flexible serial console server.
Welcome to Airconsole TS Thanks for purchasing Airconsole TS The worlds smallest most flexible serial console server. Airconsole TS comprises a head unit and additional 4 port cable kits which form a 4
Computer Information Systems (CIS) CIS 105 Current Operating Systems/Security CIS 101 Introduction to Computers
Computer Information Systems (CIS) CIS 101 Introduction to Computers This course provides an overview of the computing field and its typical applications. Key terminology and components of computer hardware,