Mobile Security and Public Networks

Transcription

1 Mobile Security and Public Networks Victor Johnston, Future Leaders Executive Council June 7, 2016 RECORDING HERE:

2 Teleconference Settings This call is being recorded To see the slides, click on the WebEx link in your meeting invitation To submit questions, use the Chat or Q&A section on the right side of your screen. 2

3 CompTIA has a policy of strict compliance with federal and state antitrust laws. The antitrust laws prohibit competitors from engaging in actions that could result in an unreasonable restraint of trade. Consequently, you agree to avoid discussing certain topics in participating at any CompTIA events or activities, including, without limitation, any discussions relating to prices, fees, rates, profit margins, or other terms or conditions of sale (including allowances, credit terms, and warranties); allocation of markets or customers or division of territories; or refusals to deal with or boycotts of suppliers, customers or other third parties, or topics that may lead participants not to deal with a particular supplier, customer or third party. 3

4 Member Communities & Councils Industry Initiatives Research Certifications Credentials Education Training Public Policy Philanthropy 4

5 Purpose of Communities Work together to improve ourselves, our businesses, and our industry Benefit to You Networking Education Making a difference Your Role Share your experiences Listen to what others have to say Contribute & get involved

6 Introducing CompTIA Channel Standards The Definitive Best Business Practices Prescribed by Your Peers Industry guidelines for implementing IT processes and procedures Built by industry leaders, tech experts and CompTIA members Accepted and applied by service providers everywhere Access and implement the IT Solution Provider Standard today at comptia.org/standards 6

7 Accelerate your business and professional success Premier Member Benefits Networking Complimentary Event Registrations Community Voting Rights Leadership Opportunities Ability to Serve in Community Leadership Position Industry Insight Research Training Education Business Tools & Templates Contracts Finance Marketing Human Resources Affinity Partners Geico Hertz FedEx Certification Discounts 15% CyberSecure 50 free seats 10% off additional seats 7

8 Victor Johnston, Johnston IT Consulting 8

9 Is your choice of wireless network putting you at risk for data and identity theft? Session takeaways include: 1. Understanding the risks of mobile computing on a public network 2. Understanding what actions are still safe on public networks 3. Utilizing third-party, free mobile applications to bring awareness and protect data 4. What other options are available for you to avoid public networks 9

10 Key Points to be Discussed During this Communitybyte What is a public network and why is it risky What kind of activities should I avoid doing on public networks What mobile apps can help to alert me if I am on an unsafe network and protect my phone from data theft Statistics on identity theft because of mobile computing on wireless networks 10

11 What is a Public Network? Unsecured network for public use Normally found in places such as Starbucks, McDonalds, etc. Allows many users to access the same WiFi for free as a convenience to customers 11

12 Why are Public Networks Risky? People can see and explore your device on the network Traffic that you send and receive can be easily intercepted without your knowledge Identity and Data theft run rampant on these networks 12

13 What Activities Should You Avoid on a Public Network? Activities that Should be Avoided or Kept to a Minimum Logging into personal accounts you would not want others to be able to gain access to should be kept to a minimum. Personal accounts can be Social Media or Blogs. Public networks allow criminals to easily see your log in credentials and save them for later. Any banking or actions that involve personally identifiable information such as social security numbers should be avoided entirely. Common mistakes users make are checking their bank statements, checking credit card accounts, and logging into their personal and professional s through web browsers. Logging into business accounts should also be avoided on a public network. Just as with the banking, cyber criminals can intercept your credentials and access your employer s systems illegally. Sending messages over Facebook Messenger, KIK, Skype, or other instant messaging systems containing sensitive information should be kept to a minimum. These messages are transmitted without encryption and can be easily viewed. 13

14 Statistics on Mobile Device Data Theft 95.6% of survey respondents used public WiFi to carry out work tasks (Kelleher 20% of Mobile devices have absolutely no security enabled (Kelleher % of those surveyed were concerned about their data being intercepted, but still used public WiFi (Kelleher Personal Information is the number one target as value of private personal data surpasses credit cards (Intel Security % Used public WiFi for work tasks 20% Mobile devices with no security 62% Personal information was number one target 14

15 Public WiFi may be Convenient, but be Mindful Public Wifi is dangerous. You would not cross a busy street without taking precautions. You should take precautions on public WiFi connections. (Image retrieved from /william/) 15

16 Hardware is easy to protect: lock it in a room, chain it to a desk, or buy a spare. Information poses more of a problem. It can exist in more than one place; be transported halfway across the planet in seconds; and be stolen without your knowledge. -Bruce Schneier 16

17 Mobile Apps that can Help Alert and Protect You As the need for cyber security on mobile devices has become more prevalent and demanded by consumers, many application developers have responded by developing systems that offer protection against these threats. This list does not recommend any of the applications, but does bring awareness to the existence of the application and CompTIA does not formally endorse any vendors solutions. Mobile Apps and What They Do Avast! (Android and ios) Lookout Mobile Security (Android and ios) Avast! Has a tool that can scan a wireless network and let you know if it is safe Lookout is anti-malware and helps locate the device if it is missing 360 Security (Android) 360 Security is an optimizer and security application ESET Mobile Security & Antivirus (Android) Anti-virus Detective (ios) ESET has numerous features for protecting, remote wiping, and tracking devices. Anti-virus Detective can help users identify malware on their ios products 17

18 Final Takeaway Public networks are not the right place for accessing bank accounts, doing work, or sending sensitive messages. Pay careful attention to only use networks you trust for these actions and always have a plan for a possible incident. An ounce of prevention is worth a pound of cure. 18

19 Questions/Comments? VICTOR JOHNSTON, MIS, MSM Cell: Get the latest IT business and career advice from CompTIA

20 CompTIA CyberSecure Results-driven behavior modification training on Cybersecurity Self-paced approach focuses on implications of security behaviors of every employee... not just the IT department 60-minute course covers online and offline behaviors to reduce Cybersecurity risks 50 free seats per membership year 10% discount on additional purchases LMS Integration Option Available 20

21

22

23 What to Do Next..? Join us for our next community meetings: Future Leaders: July 12, 2016 IT Security: July 21, 2016 Make the most out of your CompTIA Membership Webinar June 16, :00AM CT Join our LinkedIn Groups! Ways to Get Involved: Initiatives Charity Selection Meeting Planning 23

24 Thanks for attending! - Future Leaders Community - IT Security Community