Chapter 4 Network and Internet Security

Size: px
Start display at page:

Download "Chapter 4 Network and Internet Security"

Transcription

1 Understanding Computers in a Changing Society, 3 rd Edition Chapter 4 Network and Internet Security

2 Learning Objectives Explain why computer users should be concerned about network and Internet security. List several examples of unauthorized access, unauthorized use, and computer sabotage. Explain how access control systems, firewalls, antivirus software, and encryption protect against unauthorized access, unauthorized use, and computer sabotage. Discuss online theft, identity theft, Internet scams, spoofing, phishing, and other types of dot cons. Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 2

3 Learning Objectives Detail steps an individual can take to protect against online theft, identity theft, Internet scams, spoofing, phishing, and other types of dot cons. Identify personal safety risks associated with Internet use. List steps individuals can take to safeguard their personal safety when using the Internet. Name several laws related to network and Internet security. Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 3

4 Overview This chapter covers: Security concerns stemming from the use of computer networks Safeguards and precautions that can be taken to reduce the risk of problems related to these security concerns Personal safety issues related to the Internet Safeguards and precautions that can be taken to reduce the risk of problems related to these personal safety issues Legislation related to network and Internet security Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 4

5 Why Be Concerned about Network and Internet Security? Security concerns related to computer networks and the Internet abound Computer crime (cybercrime): Any illegal act involving a computer, including: Breaking through the security of a network Theft of financial assets Manipulating data for personal advantage Act of sabotage (releasing a computer virus, shutting down a Web server) All computer users should be aware of security issues and the precautions that can be taken Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 5

6 Unauthorized Access and Unauthorized Use Unauthorized access: Gaining access to a computer, network, file, or other resource without permission Unauthorized use: Using a computer resource for unapproved activities Both can be committed by insiders and outsiders Codes of conduct: Used to specify rules for behavior, typically by a business or school Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 6

7 Unauthorized Access and Unauthorized Use Hacking: The act of breaking into another computer system A serious threat for individuals, business, and the country (national security) Wi-Fi hacking: Common for hackers to gain entrance via Wi-Fi War driving or Wi-Fi piggybacking: Using someone else s Wi-Fi network to gain free access to the Internet Illegal in some areas Can lead to criminal behavior Ethical issues Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 7

8 Unauthorized Access and Unauthorized Use Interception of communications: Gaining unauthorized access to data as it is being sent over the Internet or another network The increased use of wireless networks has opened up new opportunities for data interception Business and personal wireless networks Use of public hotspots Wireless connections with mobile phones and mobile devices Once intercepted, the content can be read, altered, or otherwise used for unintended purposes Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 8

9 Computer Sabotage Computer sabotage: Acts of malicious destruction to a computer or computer resource Bot: A PC that is controlled by a computer criminal Botnet: A group of bots that can work together in a controlled fashion Used by botherders to send spam, launch Internet attacks and malware, etc. Malware: Any type of malicious software Includes viruses, worms, Trojan horses, etc. Increasingly used for computer crimes and to take control of individuals PCs for botnet activities Can infect mobile phones and mobile devices (some preinstalled on mobile devices) Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 9

10 Computer Sabotage Computer virus: Malicious program embedded in a file that is designed to cause harm to the computer system Often embedded in downloaded programs and messages Computer worm: Malicious program designed to spread rapidly by sending copies of itself to other computers Typically sent via Trojan horse: Malicious program that masquerades as something else Usually appear to be a game or other program Cannot replicate themselves; must be downloaded and installed Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 10

11 Computer Sabotage Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 11

12 Computer Sabotage Denial of service (DoS) attack: Act of sabotage that floods a Web server with so much activity that it is unable to function Distributed DoS attack: Uses multiple computers Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 12

13 Computer Sabotage Data or program alteration: When a hacker breaches a computer system in order to delete or change data Students changing grades Employees performing vengeful acts, such as deleting or changing corporate data Web site defacement (cybervandalism): Changing content of a Web site Often used to make political statements Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 13

14 Protecting Against Unauthorized Access, Use, and Computer Sabotage Access control systems: Used to control access to: Facilities Computer networks Databases Web site accounts Can be individual or part of a complete network access control (NAC) system Can be: Identification systems: Verify that the person trying to access the facility or system is an authorized user Authentication systems: Determine if the person is who he or she claims to be Can use more than one type (two-factor systems) Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 14

15 Access Control Systems Possessed knowledge access systems: Use information that only an individual should know Usernames PINs Passwords Should be strong passwords and changed frequently Tokens can generate passwords Cognitive authentification systems: Use information the individual knows (past teachers, birthplace, first home, etc.) Disadvantage: Can be used by an unauthorized individual with the proper knowledge Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 15

16 Passwords Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 16

17 Possessed Knowledge Systems Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 17

18 Access Control Systems Possessed object access systems: Use physical objects that an individual has in his or her possession Smart cards RFID-encoded badges Magnetic cards Encoded badges USB security keys or e-tokens Disadvantage: can be lost or used by an unauthorized individual When used with passwords or biometrics = two-factor authentication Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 18

19 Access Control Systems Biometric access systems: Use a unique physical characteristic of an individual in order to grant access Fingerprint Hand geometry Face Iris Can also use personal traits, such as voice or signature Increasingly being built into hardware Advantage: Can only be used by the authorized individual and cannot be lost or forgotten Disadvantage: Cannot be reset ; expensive Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 19

20 Biometric Systems Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 20

21 Access Control Systems Controlling access to wireless networks In general, Wi-Fi is less secure than wired networks Security is usually off by default; wireless networks should be secured Wireless network owners should: Enable Wi-Fi encryption (WPA is more secure than WEP) Not broadcast the network name Change the default network administrator password Can use Media Access Control (MAC) address filtering Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 21

22 Controlling Access to Wireless Networks Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 22

23 Protecting Against Unauthorized Access, Use, and Computer Sabotage Firewall: Security system that provides a protective boundary between a computer or network and the outside world Works by closing down all external communications port addresses Blocks access to the PC from outside hackers Blocks access to the Internet from programs on the user s PC unless authorized by the user Important for home PCs that have a direct Internet connection as well as for businesses Intrusion protection system (IPS) software is related Monitors and analyzes traffic allowed by the firewall to try and detect possible attacks Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 23

24 Firewalls Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 24

25 Protecting Against Unauthorized Access, Use, and Computer Sabotage Encryption: Method of scrambling or files to make them unreadable Private key encryption: Uses a single key Most often used to encrypt files on a PC If used to send files to others, the recipient needs to be told the key Public key encryption: Uses two keys Public key: Can be given to anyone; used to encrypt messages to be sent to that person Private key: Only known by the individual; used to decrypt messages that are encrypted with the individual s public key Key pairs can be obtained through a Certificate Authority Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 25

26 Encryption Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 26

27 Protecting Against Unauthorized Access, Use, and Computer Sabotage Secure Web pages: Use encryption (SSL, EV SSL, etc.) to protect information transmitted via their Web pages Look for a locked padlock on the status bar and in the URL Only transmit credit card numbers and other sensitive data via a secure Web server Web-based encrypted (HushMail) is available Various strengths of encryption available Stronger is more difficult to crack Strong = 128-bit (16-character keys) Military = 2,048-bit (256-character keys) Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 27

28 Protecting Against Unauthorized Access, Use, and Computer Sabotage Virtual private networks (VPNs): Secure path over the Internet Allows authorized users to securely access a private network via the Internet Much less expensive than a private secure network since uses the Internet Can provide a secure environment over a large geographical area Typically used by businesspeople to remotely access corporate networks via the Internet Personal VPNs can be used by individuals to surf safely at a wireless hotspot Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 28

29 Protecting Against Unauthorized Access, Use, and Computer Sabotage Antivirus software: Used to detect and eliminate computer viruses and other types of malware Should be set up to run continuously to check incoming messages, instant messages, and downloaded files Should be set up to scan the entire PC regularly Needs to be updated regularly since new malware is introduced at all times Best to have the program automatically download new virus definitions on a regular basis Some programs also scan for other threats, such as spyware, bots, possible phishing schemes, etc. Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 29

30 Antivirus Software Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 30

31 Protecting Against Unauthorized Access, Use, and Computer Sabotage Some ISPs filter include virus checking authentication systems can protect against viruses sent via Common sense precautions can help prevent a virus infection Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 31

32 Protecting Against Unauthorized Access, Use, and Computer Sabotage Individuals should take additional precautions when using public hotspots in addition to using security software, secure Web pages, VPNs, and file encryption Turn off file sharing Disable Wi-Fi and Bluetooth if not needed Use firewall to block incoming connections Turn off automatic and ad hoc connections Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 32

33 Protecting Against Unauthorized Access, Use, and Computer Sabotage A significant number of security breaches (over 60%) are committed by insiders Taking caution with employees can help avoid security problems Screen potential new hires carefully Watch for disgruntled employees and exemployees Develop policies and controls Use data-leakage prevention and enterprise rightsmanagement software Ask business partners to review their security to avoid attacks coming from someone located at that organization Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 33

34 Data-Leakage Prevention Software Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 34

35 Online Theft, Fraud, and Other Dot Cons Dot con: A fraud or scam carried out through the Internet Data theft or information theft can be committed by: Stealing an actual PC A hacker gaining unauthorized access Includes personal data, proprietary corporate information, and money Identity theft Using someone else s identity to purchase goods or services, obtain new credit cards or bank loans, or illegally masquerade as that individual Information obtained via documents, phishing schemes, stolen information, etc. Expensive and time consuming to recover from Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 35

36 Identity Theft Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 36

37 Online Theft, Fraud, and Other Dot Cons Online auction fraud: When an item purchased through an online auction is never delivered, or the item is not as specified by the seller Internet offer scams: A wide range of scams offered through Web sites or unsolicited s Loan and pyramid scams Work-at-home cons and bogus prize offers Nigerian letter fraud scheme Spoofing: Making it appear that an or a Web site originates from somewhere other than where it really does Web site spoofing spoofing Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 37

38 Online Theft, Fraud, and Other Dot Cons Phishing: Use of spoofed messages to gain credit card numbers and other personal data After victim clicks a link in the message and supplies sensitive data, they transmit that data to the thief s and Web sites often look legitimate Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 38

39 Online Theft, Fraud, and Other Dot Cons Spear phishing: Targeted to specific individuals Often include personalized information to seem more legitimate May impersonate someone in your organization, such as from human resources or the IT dept. Pharming: The use of spoofed domain names to obtain personal information DNS servers are hacked to route requests for legitimate Web pages to spoofed Web pages (DNS poisoning) Often take place via company DNS servers Drive-by pharming: Hacker changes the DNS server used by a victim s router or access point to use a DNS server set up by the pharmer Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 39

40 Online Theft, Fraud, and Other Dot Cons Spyware: Program installed without the user s knowledge that secretly collects information and sends it to an outside party via the Internet Can be installed: With another program (particular freeware programs) By clicking a link in a phishing message By visiting a Web site Security risk if it transmits personal data that can be used in identity theft or other illegal activities Can also slow down a PC or make it malfunction Stealthware: Aggressive spyware programs Often continually deliver ads, change browser settings, etc. Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 40

41 Protecting Against Online Theft, Fraud, and Other Dot Cons Protecting against identity theft Do not give out personal information (Social Security number, mother s maiden name, etc.) unless absolutely necessary Never give out sensitive information over the phone or by Shred documents containing sensitive data, credit card offers, etc. Don t place sensitive outgoing mail in your mailbox Watch your bills and credit report to detect identity theft early Can get a free credit report from 3 major consumer credit bureaus each year Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 41

42 Protecting Against Identity Theft Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 42

43 Protecting Against Online Theft, Fraud, and Other Dot Cons Protecting against other dot cons: Use common sense Check online auction seller s feedback before bidding Pay for online purchases via a credit card so transactions can be disputed if needed Never respond to request for updated credit card information Never click a link in an unsolicited Keep your browser and operating system up to date Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 43

44 Protecting Against Online Theft, Fraud, and Other Dot Cons Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 44

45 Protecting Against Online Theft, Fraud, and Other Dot Cons Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 45

46 Protecting Against Online Theft, Fraud, and Other Dot Cons Protecting against spyware: Check Web sites that list known spyware programs before downloading a program Run antispyware programs regularly Be cautious about downloads Keep operating system and browser up to date Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 46

47 Protecting Against Online Theft, Fraud, and Other Dot Cons Digital signature: Unique digital code that can be attached to an message or document Can be used to verify the identity of the sender Can be used to guarantee the message or file has not been changed Uses public key encryption Document is signed with the sender s private key The key and the document create a unique digital signature Signature is verified using the sender s public key Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 47

48 Protecting Against Online Theft, Fraud, and Other Dot Cons Digital certificate: Group of electronic data that can be used to verify the identity of a person or organization Obtained from a Certificate Authority Typically contains identity information about the person or organization, an expiration date, and a pair of keys to be used with encryption and digital signatures Are also used with secure Web sites to guarantee that the site is secure and actually belongs to the stated individual or organization Can be SSL or EV SSL Banks and other financial institutions may soon issue digital certificates to customers to protect against dot cons Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 48

49 Protecting Against Online Theft, Fraud, and Other Dot Cons Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 49

50 Personal Safety Issues Cyberbullying: Bullying someone via the Internet or e- mail Increasingly happening to children and teenagers Cyberstalking: Repeated threats or harassing behavior via or another Internet communication method including: Sending harassing messages to the victim Sending unwanted files to the victim Posting inappropriate messages about the victim Signing the victim up for offensive material Publicizing the victim s contact information Sometimes escalates to personal violence Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 50

51 Personal Safety Issues Online pornography Concern for parents and schools Difficult to stop due to constitutional rights Online pornography involving minors is illegal Link between online pornography and child molestation Internet can make it easier to arrange dangerous meetings between predators and children Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 51

52 Protecting Against Cyberstalking and Other Personal Safety Concerns Safety tips for adults Be cautious in chat rooms, discussion groups Use gender-neutral, nonprovocative names Do not reveal personal information Do not respond to insults or harassing comments Request to have personal information removed from online directories Safety tips for children Parents should monitor Internet activities Have children use a PC in a family room They should be told which activities are allowed Instruct them to tell a parent of a request for personal information or a personal meeting Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 52

53 Network and Internet Security Legislation It is difficult for the legal system to keep pace with the rate at which technology changes There are domestic and international jurisdictional issues Computer crime legislation continues to be proposed and computer crimes are being prosecuted Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 53

54 Network and Internet Security Legislation Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 54

55 Summary Why Be Concerned about Network and Internet Security? Unauthorized Access, Unauthorized Use, and Computer Sabotage Protecting Against Unauthorized Access, Unauthorized Use, and Computer Sabotage Online Theft, Fraud, and Other Dot Cons Protecting Against Online Theft, Fraud, and Other Dot Cons Personal Safety Issues Protecting Against Cyberstalking and Other Personal Safety Concerns Network and Internet Security Legislation Chapter 4 Understanding Computers in a Changing Society, 3 rd Edition 55

Chapter 6 Network and Internet Security and Privacy

Chapter 6 Network and Internet Security and Privacy Chapter 6 Network and Internet Security and Privacy Learning Objectives LO6.1: Explain network and Internet security concerns LO6.2: Identify online threats LO6.3: Describe cyberstalking and other personal

More information

Chapter 9 Security and Privacy

Chapter 9 Security and Privacy Chapter 9 Security and Privacy permitted in a license distributed with a certain product or service or otherwise on a password-protected website for classroom use. Overview This chapter covers: Security

More information

CHAPTER 8 SECURING INFORMATION SYSTEMS

CHAPTER 8 SECURING INFORMATION SYSTEMS CHAPTER 8 SECURING INFORMATION SYSTEMS BY: S. SABRAZ NAWAZ SENIOR LECTURER IN MANAGEMENT & IT SEUSL Learning Objectives Why are information systems vulnerable to destruction, error, and abuse? What is

More information

3.5 SECURITY. How can you reduce the risk of getting a virus?

3.5 SECURITY. How can you reduce the risk of getting a virus? 3.5 SECURITY 3.5.4 MALWARE WHAT IS MALWARE? Malware, short for malicious software, is any software used to disrupt the computer s operation, gather sensitive information without your knowledge, or gain

More information

Securing Information Systems

Securing Information Systems Chapter 7 Securing Information Systems 7.1 Copyright 2011 Pearson Education, Inc. STUDENT LEARNING OBJECTIVES Why are information systems vulnerable to destruction, error, and abuse? What is the business

More information

Securing Information Systems

Securing Information Systems Chapter 7 Securing Information Systems 7.1 2007 by Prentice Hall STUDENT OBJECTIVES Analyze why information systems need special protection from destruction, error, and abuse. Assess the business value

More information

Securing Information Systems

Securing Information Systems Introduction to Information Management IIM, NCKU System Vulnerability and Abuse (1/6) Securing Information Systems Based on Chapter 8 of Laudon and Laudon (2010). Management Information Systems: Managing

More information

CERTIFIED SECURE COMPUTER USER COURSE OUTLINE

CERTIFIED SECURE COMPUTER USER COURSE OUTLINE CERTIFIED SECURE COMPUTER USER COURSE OUTLINE Page 1 TABLE OF CONTENT 1 COURSE DESCRIPTION... 3 2 MODULE-1: INTRODUCTION TO DATA SECURITY... 4 3 MODULE-2: SECURING OPERATING SYSTEMS... 6 4 MODULE-3: MALWARE

More information

ECDL / ICDL IT Security. Syllabus Version 2.0

ECDL / ICDL IT Security. Syllabus Version 2.0 ECDL / ICDL IT Security Syllabus Version 2.0 Module Goals Purpose This document details the syllabus for the IT Security module. The syllabus describes, through learning outcomes, the knowledge and skills

More information

SECURE USE OF IT Syllabus Version 2.0

SECURE USE OF IT Syllabus Version 2.0 ICDL MODULE SECURE USE OF IT Syllabus Version 2.0 Purpose This document details the syllabus for the Secure Use of IT module. The syllabus describes, through learning outcomes, the knowledge and skills

More information

Introduction to Information Security Dr. Rick Jerz

Introduction to Information Security Dr. Rick Jerz Introduction to Information Security Dr. Rick Jerz 1 Goals Explain the various types of threats to the security of information Discuss the different categorizations of security technologies and solutions

More information

Course Outline (version 2)

Course Outline (version 2) Course Outline (version 2) Page. 1 CERTIFIED SECURE COMPUTER USER This course is aimed at end users in order to educate them about the main threats to their data s security. It also equips the students

More information

Data Communication. Chapter # 5: Networking Threats. By: William Stalling

Data Communication. Chapter # 5: Networking Threats. By: William Stalling Data Communication Chapter # 5: By: Networking Threats William Stalling Risk of Network Intrusion Whether wired or wireless, computer networks are quickly becoming essential to everyday activities. Individuals

More information

Discovering Computers Living in a Digital World

Discovering Computers Living in a Digital World Discovering Computers 2010 Living in a Digital World Objectives Overview Define the term, computer security risks, and briefly describe the types of cybercrime perpetrators Describe various types of Internet

More information

Identity Theft, Fraud & You. PrePare. Protect. Prevent.

Identity Theft, Fraud & You. PrePare. Protect. Prevent. PrePare. Protect. Prevent. Identity Theft, Fraud & You Fraud and identity theft incidents claimed fewer victims in 2010 than in previous years. But don t get too comfortable. Average out-of-pocket consumer

More information

Securing Information Systems

Securing Information Systems Chapter 8 Securing Information Systems 8.1 2010 by Pearson LEARNING OBJECTIVES Explain why information systems are vulnerable to destruction, error, and abuse. Assess the business value of security and

More information

BEST PRACTICES FOR PERSONAL Security

BEST PRACTICES FOR PERSONAL  Security BEST PRACTICES FOR PERSONAL Email Security Sometimes it feels that the world of email and internet communication is fraught with dangers: malware, viruses, cyber attacks and so on. There are some simple

More information

Online Threats. This include human using them!

Online Threats.   This include human using them! Online Threats There are many dangers from using the web (and computer in general). One should watch out for malware, automated programs designed to cause harm to you, your data, and your system. You are

More information

Discussion Ppt To work on completing questions you need your book and exercise copies

Discussion Ppt To work on completing questions you need your book and exercise copies 8.1 Physical Safety 8.2 e-safety Draw attention to: Book Chapter 8 Page 205 Three subtopics Handout Questions Three subtopics Class PowerPoint Three subtopics Discussion Ppt To work on completing questions

More information

Cyber Security Practice Questions. Varying Difficulty

Cyber Security Practice Questions. Varying Difficulty Cyber Security Practice Questions Varying Difficulty 1 : This is a class of programs that searches your hard drive and floppy disks for any known or potential viruses. A. intrusion detection B. security

More information

Personal Cybersecurity

Personal Cybersecurity Personal Cybersecurity The Basic Principles Jeremiah School, CEO How big is the issue? 9 8 7 6 5 4 3 2 1 Estimated global damages in 2018 0 2016 2018 2020 2022 2024 2026 2028 2030 Internet Users Billions

More information

INTERNET SAFETY IS IMPORTANT

INTERNET SAFETY IS IMPORTANT INTERNET SAFETY IS IMPORTANT Internet safety is not just the ability to avoid dangerous websites, scams, or hacking. It s the idea that knowledge of how the internet works is just as important as being

More information

Security Awareness. Presented by OSU Institute of Technology

Security Awareness. Presented by OSU Institute of Technology Security Awareness Presented by OSU Institute of Technology Information Technologies Division Security Awareness Topics Social Engineering Phishing Social Networks Displaying Sensitive Information Wireless

More information

Technology in Action

Technology in Action Technology in Action Chapter 7 Networking and Security: Connecting Computers and Keeping Them Safe from Hackers and Viruses 1 Peer-to-Peer Networks Nodes communicate with each other Peers Share peripheral

More information

Online Fraud and Identity Theft Guide. A Guide to Protecting Your Identity and Accounts

Online Fraud and Identity Theft Guide. A Guide to Protecting Your Identity and Accounts A Guide to Protecting Your Identity and Accounts As part of SunTrust s commitment to protecting your accounts and identity, we ve created the Online Fraud & Identity Theft Guide, which provides information

More information

Retail/Consumer Client Internet Banking Awareness and Education Program

Retail/Consumer Client Internet Banking Awareness and Education Program Retail/Consumer Client Internet Banking Table of Contents Securing Your Environment... 3 Unsolicited Client Contact... 3 Protecting Your Identity... 3 1) E-mail Risk... 3 2) Internet Risks... 4 3) Telephone

More information

Online Security and Safety Protect Your Computer - and Yourself!

Online Security and Safety Protect Your Computer - and Yourself! Online Security and Safety Protect Your Computer - and Yourself! www.scscu.com Fraud comes in many shapes and sizes, but the outcome is simple: the loss of both money and time. That s why protecting your

More information

Chapter 10: Security and Ethical Challenges of E-Business

Chapter 10: Security and Ethical Challenges of E-Business Chapter 10: Security and Ethical Challenges of E-Business Learning Objectives Identify several ethical issues in IT that affect employment, individuality, working condition, privacy, crime health etc.

More information

Chapter 10: Security. 2. What are the two types of general threats to computer security? Give examples of each.

Chapter 10: Security. 2. What are the two types of general threats to computer security? Give examples of each. Name Date Chapter 10: Security After completion of this chapter, students should be able to: Explain why security is important and describe security threats. Explain social engineering, data wiping, hard

More information

CISNTWK-440. Chapter 4 Network Vulnerabilities and Attacks

CISNTWK-440. Chapter 4 Network Vulnerabilities and Attacks CISNTWK-440 Intro to Network Security Chapter 4 Network Vulnerabilities and Attacks Objectives Explain the types of network vulnerabilities List categories of network attacks Define different methods of

More information

Chapter 12. Information Security Management

Chapter 12. Information Security Management Chapter 12 Information Security Management We Have to Design It for Privacy... and Security. Tension between Maggie and Ajit regarding terminology to use with Dr. Flores. Overly technical communication

More information

A Review Paper on Network Security Attacks and Defences

A Review Paper on Network Security Attacks and Defences EUROPEAN ACADEMIC RESEARCH Vol. IV, Issue 12/ March 2017 ISSN 2286-4822 www.euacademic.org Impact Factor: 3.4546 (UIF) DRJI Value: 5.9 (B+) A Review Paper on Network Security Attacks and ALLYSA ASHLEY

More information

Web Cash Fraud Prevention Best Practices

Web Cash Fraud Prevention Best Practices Web Cash Fraud Prevention Best Practices Tips on what you can do to prevent Online fraud. This document provides best practices to avoid or reduce exposure to fraud. You can use it to educate your Web

More information

The Tension. Security vs. ease of use: the more security measures added, the more difficult a site is to use, and the slower it becomes

The Tension. Security vs. ease of use: the more security measures added, the more difficult a site is to use, and the slower it becomes s10 Security 1 The Tension Security vs. ease of use: the more security measures added, the more difficult a site is to use, and the slower it becomes Security vs. desire of individuals to act anonymously

More information

تاثیرفناوری اطالعات برسازمان ومدیریت جلسه هشتم و نهم

تاثیرفناوری اطالعات برسازمان ومدیریت جلسه هشتم و نهم بنام خدا تاثیرفناوری اطالعات برسازمان ومدیریت جلسه هشتم و نهم امنیت بخشی به سیستمهای فناوری اطالعات Securing Information Systems 1 Learning Objectives Describe the business value of security and control.

More information

IS Today: Managing in a Digital World 9/17/12

IS Today: Managing in a Digital World 9/17/12 IS Today: Managing in a Digital World Chapter 10 Securing Information Systems Worldwide losses due to software piracy in 2005 exceeded $34 billion. Business Software Alliance, 2006 Accessories for war

More information

Introduction to Computing

Introduction to Computing Introduction to Computing Engr. Abdul-Rahman Mahmood MS, PMP, MCP, QMR(ISO9001:2000) armahmood786@yahoo.com alphasecure@gmail.com alphapeeler.sf.net/pubkeys/pkey.htm http://alphapeeler.sourceforge.net

More information

MU2a Authentication, Authorization & Accounting Questions and Answers with Explainations

MU2a Authentication, Authorization & Accounting Questions and Answers with Explainations 98-367 MU2a Authentication, Authorization & Accounting Questions and Answers with Explainations Which are common symptoms of a virus infection? (Lesson 5 p 135-136) Poor system performance. Unusually low

More information

Best Practices Guide to Electronic Banking

Best Practices Guide to Electronic Banking Best Practices Guide to Electronic Banking City Bank & Trust Company offers a variety of services to our customers. As these services have evolved over time, a much higher percentage of customers have

More information

ELECTRONIC BANKING & ONLINE AUTHENTICATION

ELECTRONIC BANKING & ONLINE AUTHENTICATION ELECTRONIC BANKING & ONLINE AUTHENTICATION How Internet fraudsters are trying to trick you What you can do to stop them How multi-factor authentication and other new techniques can help HELPING YOU STAY

More information

ONLINE SAFETY. Messaging, , Vlogging and Sexting

ONLINE SAFETY. Messaging,  , Vlogging and Sexting ONLINE SAFETY Messaging, email, Vlogging and Sexting www.eitts.co.uk Contents WhatsApp & Messaging Email Vlogging Sexting THE RISKS People online are not necessarily who they say they are or seem to be.

More information

Quick recap on ing Security Recap on where to find things on Belvidere website & a look at the Belvidere Facebook page

Quick recap on  ing  Security Recap on where to find things on Belvidere website & a look at the Belvidere Facebook page Workshop #7 Email Security Previous workshops 1. Introduction 2. Smart phones & Tablets 3. All about WatsApp 4. More on WatsApp 5. Surfing the Internet 6. Emailing Quick recap on Emailing Email Security

More information

CompTIA Security+ Malware. Threats and Vulnerabilities Vulnerability Management

CompTIA Security+ Malware. Threats and Vulnerabilities Vulnerability Management CompTIA Security+ Lecture Six Threats and Vulnerabilities Vulnerability Management Copyright 2011 - VTC Malware Malicious code refers to software threats to network and systems, including viruses, Trojan

More information

FACTS WHAT DOES FARMERS STATE BANK DO WITH YOUR PERSONAL INFORMATION? WHY? WHAT? HOW? L QUESTIONS?

FACTS WHAT DOES FARMERS STATE BANK DO WITH YOUR PERSONAL INFORMATION? WHY? WHAT? HOW? L QUESTIONS? FACTS WHAT DOES FARMERS STATE BANK DO WITH YOUR PERSONAL INFORMATION? WHY? WHAT? HOW? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit

More information

Credit Card Frauds Sept.08, 2016

Credit Card Frauds Sept.08, 2016 Credit Card Frauds Sept.08, 2016 Definitions Credit Card A card allowing the holder to purchasing goods or services on credit Debit Card A card allowing transfer of money from a bank a/c electronically

More information

Access Controls. CISSP Guide to Security Essentials Chapter 2

Access Controls. CISSP Guide to Security Essentials Chapter 2 Access Controls CISSP Guide to Security Essentials Chapter 2 Objectives Identification and Authentication Centralized Access Control Decentralized Access Control Access Control Attacks Testing Access Controls

More information

How to Build a Culture of Security

How to Build a Culture of Security How to Build a Culture of Security March 2016 Table of Contents You are the target... 3 Social Engineering & Phishing and Spear-Phishing... 4 Browsing the Internet & Social Networking... 5 Bringing Your

More information

Security Awareness. Chapter 2 Personal Security

Security Awareness. Chapter 2 Personal Security Security Awareness Chapter 2 Personal Security Objectives After completing this chapter, you should be able to do the following: Define what makes a weak password Describe the attacks against passwords

More information

CTS2134 Introduction to Networking. Module 08: Network Security

CTS2134 Introduction to Networking. Module 08: Network Security CTS2134 Introduction to Networking Module 08: Network Security Denial of Service (DoS) DoS (Denial of Service) attack impacts system availability by flooding the target system with traffic or by exploiting

More information

Cybercrime Criminal Law Definitions and Concepts

Cybercrime Criminal Law Definitions and Concepts Cybercrime Criminal Law Definitions and Concepts How to Criminalize Attacks on Computer Networks and Information Computer Crime and Intellectual Property Section U.S. Department of Justice 1 Overview Introduction

More information

Your security on click Jobs

Your security on click Jobs Your security on click Jobs At Click Jobs is a trading name of Raspberry Recruitment Limited, we're committed to helping you find the right job in a safe and secure environment. On these pages, you can

More information

Accounting Information Systems

Accounting Information Systems Accounting Information Systems Fourteenth Edition Chapter 6 Computer Fraud and Abuse Techniques ALW AYS LEARNING Learning Objectives Compare and contrast computer attack and abuse tactics. Explain how

More information

Computer Security. Assoc. Prof. Pannipa Phaiboonnimit. Adapted for English Section by Kittipitch Kuptavanich and Prakarn Unachak

Computer Security. Assoc. Prof. Pannipa Phaiboonnimit. Adapted for English Section by Kittipitch Kuptavanich and Prakarn Unachak Computer Security Assoc. Prof. Pannipa Phaiboonnimit 1 Adapted for English Section by Kittipitch Kuptavanich and Prakarn Unachak Classification of Threats Computer Attack Intend to damage files, computers

More information

Review Ch. 3 Connecting to the World s Information. 2010, 2006 South-Western, Cengage Learning

Review Ch. 3 Connecting to the World s Information. 2010, 2006 South-Western, Cengage Learning Review Ch. 3 Connecting to the World s Information 2010, 2006 South-Western, Cengage Learning Networks Two linked computers is a network A network of computers located within a short distance is called

More information

Who We Are! Natalie Timpone

Who We Are! Natalie Timpone Who We Are! Natalie Timpone Manager of Security Business Management Office Enterprise Security Awareness Manager Carmelo Walsh Security, Risk, and Compliance Security Awareness Subject Matter Expert Who

More information

5. Execute the attack and obtain unauthorized access to the system.

5. Execute the attack and obtain unauthorized access to the system. Describe how a combination of preventive, detective, and corrective controls can be employed to provide reasonable assurance about information security. Before discussing the preventive, detective, and

More information

Train employees to avoid inadvertent cyber security breaches

Train employees to avoid inadvertent cyber security breaches Train employees to avoid inadvertent cyber security breaches TRAIN EMPLOYEES TO AVOID INADVERTENT CYBER SECURITY BREACHES PAGE 2 How much do you know about cyber security? Small business owners often lack

More information

Frauds & Scams. Why is the Internet so attractive to scam artists? 2006 Internet Fraud Trends. Fake Checks. Nigerian Scam

Frauds & Scams. Why is the Internet so attractive to scam artists? 2006 Internet Fraud Trends. Fake Checks. Nigerian Scam Frauds & Scams Why is the Internet so attractive to scam artists? Anonymity Low cost Rapid growth Easy to adapt Be Cyber Savvy with C-SAFE 118 2006 Internet Fraud Trends Average Loss Online Auctions 34%

More information

Security+ Guide to Network Security Fundamentals, Fourth Edition. Chapter 1 Introduction to Security

Security+ Guide to Network Security Fundamentals, Fourth Edition. Chapter 1 Introduction to Security Security+ Guide to Network Security Fundamentals, Fourth Edition Chapter 1 Introduction to Security Objectives Describe the challenges of securing information Define information security and explain why

More information

e-commerce Study Guide Test 2. Security Chapter 10

e-commerce Study Guide Test 2. Security Chapter 10 e-commerce Study Guide Test 2. Security Chapter 10 True/False Indicate whether the sentence or statement is true or false. 1. Necessity refers to preventing data delays or denials (removal) within the

More information

Technology Safety Quick Tips

Technology Safety Quick Tips Technology Safety Quick Tips Spyware: Computer & Phone Monitoring Software It enables a person to secretly monitor someone else s entire computer activity. It can be installed remotely by sending an email,

More information

Chapter 11: Networks

Chapter 11: Networks Chapter 11: Networks Devices in a Small Network Small Network A small network can comprise a few users, one router, one switch. A Typical Small Network Topology looks like this: Device Selection Factors

More information

Acceptable Use Policy

Acceptable Use Policy Acceptable Use Policy. August 2016 1. Overview Kalamazoo College provides and maintains information technology resources to support its academic programs and administrative operations. This Acceptable

More information

Thailand Initiatives and Challenges in Cyber Terrorism

Thailand Initiatives and Challenges in Cyber Terrorism Thailand Initiatives and Challenges in Cyber Terrorism Agenda Cyber-Terrorism weapons & tactics MICT Cyber Inspector Group IT Laws Development Challenges Cyber-Terrorism weapons & tactics What is Cyber-Terrorism?

More information

COMMON WAYS IDENTITY THEFT CAN HAPPEN:

COMMON WAYS IDENTITY THEFT CAN HAPPEN: COMMON WAYS IDENTITY THEFT CAN HAPPEN: OLD FASHIONED STEALING / DUMPSTER DIVING Thieves typically steal wallets and purses. They also steal mail such as credit card and bank statements, pre-approved credit

More information

Main area: Security Additional areas: Digital Access, Information Literacy, Privacy and Reputation

Main area: Security Additional areas: Digital Access, Information Literacy, Privacy and Reputation Public Wi Fi Created: March 2016 Last Updated: July 2018 Estimated time: Group or individual activity: Ages: 60 minutes [10 minutes] Activity #1 [15 minutes] Activity #2 [10 minutes] Activity #3 [10 minutes]

More information

Quick Heal Total Security for Android. Anti-Theft Security. Web Security. Backup. Real-Time Protection. Safe Online Banking & Shopping.

Quick Heal Total Security for Android. Anti-Theft Security. Web Security. Backup. Real-Time Protection. Safe Online Banking & Shopping. Quick Heal Total Security for Android Anti-Theft Security. Web Security. Backup. Real-Time Protection. Safe Online Banking & Shopping. Product Highlights Complete protection for your Android device that

More information

Digital Safety and Digital Citizenship

Digital Safety and Digital Citizenship Digital Safety and Digital Citizenship A Guide for Students The laptop has been given to you as a tool for learning. Use it for that. While doing so, here are some important rules for keeping yourself

More information

Management of IT Infrastructure Security by Establishing Separate Functional Area with Spiral Security Model

Management of IT Infrastructure Security by Establishing Separate Functional Area with Spiral Security Model Management of IT Infrastructure Security by Establishing Separate Functional Area with Spiral Security Model Abhijit Vitthal Sathe Modern Institute of Business Management, Shivajinagar, Pune 411 005 abhijit_sathe@hotmail.com

More information

It is my great pleasure to inform that you have won the latest model of Ferrari Car and 4 Bed Room Villa in Palm Jumeirah for attending this Seminar

It is my great pleasure to inform that you have won the latest model of Ferrari Car and 4 Bed Room Villa in Palm Jumeirah for attending this Seminar You Won!!! It is my great pleasure to inform that you have won the latest model of Ferrari Car and 4 Bed Room Villa in Palm Jumeirah for attending this Seminar To Process and deliver your Car and Villa

More information

Octopus Online Service Safety Guide

Octopus Online Service Safety Guide Octopus Online Service Safety Guide This Octopus Online Service Safety Guide is to provide you with security tips and reminders that you should be aware of when using online and mobile services provided

More information

Home Computer and Internet User Security

Home Computer and Internet User Security Home Computer and Internet User Security Lawrence R. Rogers Version 1.0.4 CERT Training and Education Networked Systems Survivability Software Engineering Institute Carnegie Mellon University Pittsburgh,

More information

E-companion. Quiz for IT-knowledge

E-companion. Quiz for IT-knowledge E-companion Quiz for IT-knowledge 1. The is used in combination with other keys to perform shortcuts and special tasks. A) Control (Ctrl) key B) Function key C) Toggle key D) Windows key 2. is the place

More information

Securing Information Systems

Securing Information Systems Securing Information Systems You re on LinkedIn? Watch Out! Problem: Massive data breach; using old security practices Solution: Initiative to use minimal up-to-date industry practices, for example, salting

More information

STUDENT ACCEPTABLE USE OF IT SYSTEMS POLICY

STUDENT ACCEPTABLE USE OF IT SYSTEMS POLICY STUDENT ACCEPTABLE USE OF IT SYSTEMS POLICY Introduction The college offer an extensive range of IT systems across campuses and online for course related activities and drop-in purposes. This policy applies

More information

Unique Phishing Attacks (2008 vs in thousands)

Unique Phishing Attacks (2008 vs in thousands) The process of attempting to acquire sensitive information, such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. In the 2 nd half

More information

Introduction. Controlling Information Systems. Threats to Computerised Information System. Why System are Vulnerable?

Introduction. Controlling Information Systems. Threats to Computerised Information System. Why System are Vulnerable? Introduction Controlling Information Systems When computer systems fail to work as required, firms that depend heavily on them experience a serious loss of business function. M7011 Peter Lo 2005 1 M7011

More information

SUMMARIES OF INTERACTIVE MULTIMEDIA

SUMMARIES OF INTERACTIVE MULTIMEDIA SUMMARIES OF INTERACTIVE MULTIMEDIA GRADE 10-12 INTERNET TECHNOLOGIES 1. Introduction to Electronic Communications Use this lesson to: Understand the differences between the various e-communications modes

More information

Client Resources. participant guide

Client Resources. participant guide Guidebook Client Resources Client resources participant guide Welcome The TD Ameritrade Institutional client resources participant guide can help you: Establish an account with an advisor Gain online access

More information

Duplication and/or selling of the i-safe copyrighted materials, or any other form of unauthorized use of this material, is against the law.

Duplication and/or selling of the i-safe copyrighted materials, or any other form of unauthorized use of this material, is against the law. Thank you for your interest in e-safety, and for teaching safe and responsible Internet use to your students. Educators are invited to access and download i-safe curriculum AT NO CHARGE under the following

More information

Chapter 19 Security. Chapter 19 Security

Chapter 19 Security. Chapter 19 Security Chapter 19 Security Outline 19.1 Introduction 19.2 Cryptography 19.2.1 Secret-Key Cryptography 19.2.2 Public-Key Cryptography 19.3 Authentication 19.3.1 Basic Authentication 19.3.2 Biometrics and Smart

More information

Cyber Security. February 13, 2018 (webinar) February 15, 2018 (in-person)

Cyber Security. February 13, 2018 (webinar) February 15, 2018 (in-person) Cyber Security Presenters: - Brian Everest, Chief Technology Officer, Starport Managed Services - Susan Pawelek, Accountant, Compliance and Registrant Regulation February 13, 2018 (webinar) February 15,

More information

APPLICATION TO OPEN PORTS THROUGH THE FIREWALL

APPLICATION TO OPEN PORTS THROUGH THE FIREWALL P: +61 2 9231 3644 E: admin@ccl.com.au W: www.ccl.com.au A.B.N. 72 000 111 Level 1 Selborne Chambers 174 Phillip Street Sydney NSW 2000 APPLICATION TO OPEN PORTS THROUGH THE FIREWALL Only outbound data

More information

Securing Information Systems

Securing Information Systems Securing Information Systems You re on LinkedIn? Watch Out! Problem: Massive data breach; using old security practices Solution: Initiative to use minimal up-to-date industry practices, for example, salting

More information

Chapter 11: It s a Network. Introduction to Networking

Chapter 11: It s a Network. Introduction to Networking Chapter 11: It s a Network Introduction to Networking Small Network Topologies Typical Small Network Topology IT Essentials v5.0 2 Device Selection for a Small Network Factors to be considered when selecting

More information

Employee Security Awareness Training

Employee Security Awareness Training Employee Security Awareness Training September 2016 Purpose Employees have access to sensitive data through the work they perform for York. Examples of sensitive data include social security numbers, medical

More information

Securing Information Systems Barbarians at the Gateway

Securing Information Systems Barbarians at the Gateway Securing Information Systems Barbarians at the Gateway Learning Objectives Security breaches are on the rise Understand the potentially damaging impact of security breaches Security must be made a top

More information

Ethical Hacking and Prevention

Ethical Hacking and Prevention Ethical Hacking and Prevention This course is mapped to the popular Ethical Hacking and Prevention Certification Exam from US-Council. This course is meant for those professionals who are looking for comprehensive

More information

Training UNIFIED SECURITY. Signature based packet analysis

Training UNIFIED SECURITY. Signature based packet analysis Training UNIFIED SECURITY Signature based packet analysis At the core of its scanning technology, Kerio Control integrates a packet analyzer based on Snort. Snort is an open source IDS/IPS system that

More information

Information Security in Corporation

Information Security in Corporation Information Security in Corporation System Vulnerability and Abuse Software Vulnerability Commercial software contains flaws that create security vulnerabilities. Hidden bugs (program code defects) Zero

More information

Cleveland State University General Policy for University Information and Technology Resources

Cleveland State University General Policy for University Information and Technology Resources Cleveland State University General Policy for University Information and Technology Resources 08/13/2007 1 Introduction As an institution of higher learning, Cleveland State University both uses information

More information

Security and Privacy. Xin Liu Computer Science University of California, Davis. Introduction 1-1

Security and Privacy. Xin Liu Computer Science University of California, Davis. Introduction 1-1 Security and Privacy Xin Liu Computer Science University of California, Davis Introduction 1-1 What is network security? Confidentiality: only sender, intended receiver should understand message contents

More information

II.C.4. Policy: Southeastern Technical College Computer Use

II.C.4. Policy: Southeastern Technical College Computer Use II.C.4. Policy: Southeastern Technical College Computer Use 1.0 Overview Due to the technological revolution in the workplace, businesses such as Southeastern Technical College (STC) have turned to computer

More information

Target Breach Overview

Target Breach Overview Target Breach Overview Q: Media reports are stating that Target experienced a data breach. Can you provide more specifics? A: Yes, Target has confirmed that it experienced unauthorized access to its systems

More information

SECURING INFORMATION SYSTEMS

SECURING INFORMATION SYSTEMS SECURING INFORMATION SYSTEMS (November 7, 2016) BUS3500 - Abdou Illia - Fall 2016 1 LEARNING GOALS Understand security attacks preps Discuss the major threats to information systems. Discuss protection

More information

PRACTICING SAFE COMPUTING AT HOME

PRACTICING SAFE COMPUTING AT HOME PRACTICING SAFE COMPUTING AT HOME WILLIAM (THE GONZ) FLINN M.S. INFORMATION SYSTEMS SECURITY MANAGEMENT; COMPTIA SECURITY+, I-NET+, NETWORK+; CERTIFIED PATCHLINK ENGINEER ENTERPRISE INFORMATION SYSTEMS

More information

How Cyber-Criminals Steal and Profit from your Data

How Cyber-Criminals Steal and Profit from your Data How Cyber-Criminals Steal and Profit from your Data Presented by: Nick Podhradsky, SVP Operations SBS CyberSecurity www.sbscyber.com Consulting Network Security IT Audit Education 1 Agenda Why cybersecurity

More information

PBX Fraud Information

PBX Fraud Information PBX Fraud Information Increasingly, hackers are gaining access to corporate phone and/or voice mail systems. These individuals place long distance and international calls through major telecom networks

More information

Exam : JK Title : CompTIA E2C Security+ (2008 Edition) Exam. Version : Demo

Exam : JK Title : CompTIA E2C Security+ (2008 Edition) Exam. Version : Demo Exam : JK0-015 Title : CompTIA E2C Security+ (2008 Edition) Exam Version : Demo 1.Which of the following logical access control methods would a security administrator need to modify in order to control

More information

WHAT IS CORPORATE ACCOUNT TAKEOVER? HOW DOES IT HAPPEN?

WHAT IS CORPORATE ACCOUNT TAKEOVER? HOW DOES IT HAPPEN? WHAT IS CORPORATE ACCOUNT TAKEOVER? Corporate Account Takeover (also referred to as CATO) is a type of fraud where criminals gain access to a business financial accounts to make unauthorized transactions.

More information