Internet Crimes Against Children:

Transcription

1 Internet Crimes Against Children: Web, 2011 PROGRAM MATERIALS Presented By Professor Donald R. Mason Associate Director & Research Professor The National Center for Justice & the Rule of Law at The University of Mississippi School of Law ADVANCING JUSTICE THROUGH EDUC ATION

2 THE NATIONAL JUDICIAL COLLEGE E DUCATION I NNOVATION A DVANCING J USTICE INTERNET CRIMES AGAINST CHILDREN: HIDING TRACKS ON THE WEB DIVIDER 1 Professor Donald R. Mason OBJECTIVES: After this session you will be able to: 1. Define private browsing and describe how it can provider computer users a measure of privacy or anonymity regarding their online activities. 2. Describe how anonymizers and proxy servers enable user anonymity beyond a user s computer and may be used to hide illegal activities. 3. Describe how TLS (transport layer security) and SSL (secure sockets layer) and passwords are used by every Internet user to protect information. 4. Describe ways in which Internet users may give false information and gain a measure of online anonymity. 5. Describe how use of public networks can add a layer of confidentiality for Internet users. 6. Describe ways in which services can provide users means of encrypting messages and mailing messages anonymously. 7. Describe the impact that encryption or other means of data concealment may have on the discovery or analysis of digital data. 8. Define firewalls and describe how they work to either enable or prevent certain network activities. REQUIRED READING: PAGE Donald R. Mason, Hiding Tracks on the Web (Feb. 2011) [NJC PowerPoint]...1 WEB: INTERNET CRIMES AGAINST CHILDREN: HIDING TRACKS ON THE WEB WEBCAST WB/KZ FEBRUARY 23, 2011

3 Hiding Tracks on the Web Ways one might hide their tracks Private Browsing Anonymizers & Proxy Servers SSL / TLS Passwords False Information Public Networks Services Encryption Firewalls Private Browsing 1

4 What is a browser? A browser is a computer application that retrieves and displays content from the web This content may include web pages, videos, pictures, and more Popular browsers include Firefox, Internet Explorer, Chrome, and Safari Address Bar Search Box Tab Status Bar Browser Functions Web browsers also collect a variety of information about a user s online actions and save this information on the computer History Cache / Temporary Internet Files Cookies 2

5 Private Browsing Most browsers now have a private browsing function that allows the user to prevent cookies, cache, and history from being saved Internet Explorer: InPrivate Browsing Firefox: Private Browsing Chrome: Incognito Safari: Private Browsing Private Browsing Private Browsing 3

6 Private Browsing This function prevents history, cookies, and cache from being saved on the user s computer However, the user s s actions are still tracked by the ISP AND the server hosting the information Private Browsing Home Computer Home Router 5 4 Internet Service Provider Website Host Internet Exchange Point QUIZ Private Browsing protects the user from A. Secret Agents B. Sharing information with their ISP C. Saving information on their computer D. Sharing information with websites they visit 4

7 Anonymizers Anonymizers Access the Internet on your behalf Allow you to be a step removed from the websites you visit Often, users get advertisements corresponding to their location. Anonymizers give the websites someone else s location Anonymizers 5

8 Anonymizers Networked Anonymizers A request for a certain webpage goes through several computers before going to the user who requested the information Makes traffic analysis very difficult However, each computer along the chain may be able to compromise the confidentiality Encryption may solve this problem if available Anonymizers Home Computer in Mississippi Home Router Internet Service Provider Internet Exchange Point Website Host Computer C California Computer B Germany Computer A Kansas Anonymizers Single Point Anonymizers Information passes through a single website Often offers encryption 6

9 Anonymizers Home Computer Home Router Internet Service Provider Internet Exchange Point Website Host Internet Exchange Point Anonymizer Website TOR: The Onion Router "Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet." Onion routing uses multiple layers of security that are removed (like onion skin) as a message is routed through the TOR network TOR 7

10 TOR TOR TOR 8

11 Anonymizers Other popular anonymizers include: Anonymizer (anonymizer.com) Freenet (freenetproject.org) I2P QUIZ An anonymizer helps prevent sharing which of the following with a website the user visits: A. Location B. IP address C. ISP D. all of the above Proxy Servers 9

12 Proxy Servers A server that acts as an intermediary to a client seeking information from another server Browsers are set up to allow people to send all information through a proxy server Unlike anonymizers, no additional software is required Proxy Servers Proxy Servers There are legitimate uses for proxy servers To audit Internet usage However, they can also be used to: Bypass work/parental controls Facebook at work, for example Anonymize access 10

13 Proxy Servers A few popular proxy servers can be found at: Browser9.com Youhide.com Proxify.com Fastproxynetwork.com Proxy Servers TLS / SSL 11

14 TLS / SSL TLS (Transport Layer Security) is the successor to Secure Sockets Layer (SSL) Enables encrypted network communications for activities like: Credit card payments Healthcare data Financial information TLS / SSL In order to use TLS, a website you visit must be subscribed to it. Usually, the cost is rather minimal (about $10 per month) Encryption methods are very secure TLS / SSL 12

15 Passwords Passwords Passwords Vary greatly in security. Long passwords with mix of numbers, letters, and symbols are much stronger. Should be changed often Many logins are protected by TLS, which helps prevent unauthorized interception If not protected by TLS, anyone along the chain can obtain your password 13

16 Passwords Passwords can be used to restrict access to: An online blog A photo album (Flickr or Picasa) Video accounts (YouTube) QUIZ Which of the following is false: A. Passwords are always protected by TLS B. Proxy servers allow a user to bypass parental controls C. TLS usually protects online payments D. Proxy servers usually do not require extra software False Information 14

17 False Information False Information Accounts rarely require information to be accurate. Doing so might require: Credit card authorization Verification by sending in copy of driver s license / Social Security card Thus, users can create false identities online False Information Might encourage someone to share pictures, video, etc., under an alias, providing them with some protection However, this doesn t prevent the ability to track it back to the user s computer Just requires an additional step in authenticating the actions of a specific user 15

18 Public Networks Public Networks Where do public networks exist? McDonalds Starbucks Public Libraries Hotels Apartment Buildings Often allow users to connect without providing any information that reveals their identity Public Networks How safe are they? Not very! Easy-to-find tools allow other users to obtain all of your account information and browsing history The provider may even track it intentionally for research purposes 16

19 Public Networks Public Networks Public Networks More than anything, it makes someone feel like their actions are anonymous Beyond tracking from others on the network at the time, use of public networks does make it difficult to track actions back to the user 17

20 QUIZ Public networks allow a user to browse the Internet with full anonymity. A. True B. False Services Services Many websites allow users to send anonymous s that prevent tracing to the sender anonymouse.org org (reroutes through other countries and delays sending up to 12 hours) AnonymousSpeech.com (constantly moves servers in Asia and South America to prevent subpoena, provides legal insurance concerning protected information) 18

21 Services Other services allow spoofing of another s address (pretending to be someone else) Many providers now allow all to be sent and received through TLS Encryption Encryption Makes data unreadable without a key To properly protect data, it needs to be encrypted before leaving the sender s computer and decrypted once it reaches the recipient s computer 19

22 Encryption Encryption Other data can be encrypted: Entire hard drives Or Individual folders or files CDs / DVDs USB Flash drives U3 software Firewalls 20

23 Firewalls May be hardware or software Computers often have firewall software Routers may have either Prevents unauthorized access May be used to prevent the user from certain actions (like using P2P software) Prevent hackers Firewalls Firewalls Malware or Spyware operating on the computer may be able to bypass the computer s firewall Main function is not anonymity, but if the computer is on a network, the firewall may make it difficult to distinguish activities from each computer 21

24 Miscellaneous Issues Steganography StenographyOriginal.png ( pixels, file size: 88 KB) StenographyRecovered.png ( pixels, file size: 19 KB) Changing File Extensions Each file on a Windows computer has an extension that connects it to a program on the computer.doc or.docx = Microsoft Word.jpg,.gif,.tif,.jpeg,.png = Image files that can be opened by many programs.exe = an Application.zip = archive of compressed files 22

25 Changing File Extensions Zip Files Allow users to compress files into small sizes for faster transmission on the Internet Some compression applications allow the user to password protect and encrypt the files, preventing unauthorized use SecretHelper Firefox extension that allows user to create encrypted and passwordprotected drive on computer Only accessible through the Firefox tool Re-encrypted and inaccessible once browser is closed 23

26 Good Reasons to Hide Tracks Private Browsing provides some protection while on public computers Encryption protects credit card numbers and important account passwords Proxy servers were used recently in Egypt to allow access to social networking when the government tried to block these sites QUIZ Which is not a function of a firewall: A. Encryption of files B. Control of a user s action C. Protection from hackers D. Anonymity QUIZ Which of the following are legitimate ways to hide your privacy? A. Private Browsing B. Proxy Servers C. Passwords D. Encryption E. All of the above 24

27 Ways one might hide their tracks Private Browsing Anonymizers & Proxy Servers SSL / TLS Passwords False Information Public Networks Services Encryption Firewalls Presented by Don Mason Associate Director, NCJRL drmason@olemiss.edu 25