Security Awareness. Presented by OSU Institute of Technology

Transcription

1 Security Awareness Presented by OSU Institute of Technology Information Technologies Division

2 Security Awareness Topics Social Engineering Phishing Social Networks Displaying Sensitive Information Wireless Security

3 Security Awareness Topics Security Practices Locking your computer Strong Passwords Using Malware software Anti-virus Anti-spyware Firewalls

4 Social Engineering

5 Social Engineering Amateurs hack systems, professionals hack people. Bruce Schneier

6 Social Engineering Using various social skills (such as lying or conning) to attempt to get someone to hand over a password, access code or simply access to a computer. -Richard G Lowe, Jr.

7 Social Engineering The term social engineering was popularized by reformed computer criminal and security consultant Kevin Mitnick. i

8 Social Engineering He pointed out that it's much easier to trick someone into giving you his or her password for a system than to spend the effort to hack in.

9 Social Engineering Phishing Phishing is designed to fraudulently obtain private information.

10 Social Engineering Phishing Generally, phishing does not involve personal contact however; instead, legitimate looking , websites, or other electronic means are involved in phishing attacks. com/cms/vtutor/social-engineering.html

11

12

13

14 Social Engineering Using your computer, go to the following site and take the SonicWALL Phishing and Spam IQ Quiz: p

15 Social Engineering How did you do??

16 Social Networks

17 Social Networks Social networking sites, sometimes referred to as "friend-of-a-friend" sites, build upon the concept of traditional social networks where you are connected to new people through people you already know.

18 Social Networks What security implications do these sites present? the internet provides a sense of anonymity the lack of physical interaction provides a false sense of security they tailor the information for their friends to read, forgetting that others may see it they want to offer insights to impress potential friends or associates

19

20 Social Networks How can you protect yourself? 1. Limit the amount of personal information you post 2. Remember that the internet is a public resource 3. Be wary of strangers 4. Be skeptical 5. Evaluate your settings 6. Use strong passwords 7. Check privacy policies 8. Use and maintain anti-virus software

21 Social Networks How about a quick Quiz?

22 Social Networks How did you do??

23 Social Networks How can you protect yourself? 1. Limit the amount of personal information you post 2. Remember that the internet is a public resource 3. Be wary of strangers 4. Be skeptical 5. Evaluate your settings 6. Use strong passwords 7. Check privacy policies 8. Use and maintain anti-virus software

24 Wireless Security

25 Wireless Security Public Access Points are Risky. Think of it this way. Sending messages over Wi-Fi is kind of like sending messages by smoke signal. If you're connected through an open access point, anybody who can see the smoke can read your message.

26 Wireless Security You can do several things to help secure your computer and secure your passwords while on a public network. The first rule is have a good firewall on your computer. The next thing you can do is make sure your transactions on the network are encrypted.

27 6/15/2011

28 Wireless Security How about a quick Quiz? n-wireless-hackers.aspx

29 Wireless Security How did you do??

30 Intermission i Let s take a 15 minute break.

31 Security Practices

32 Security Practices Locking your computer To lock your computer, use this shortcut: Press the Windows logo key+l. The following list has different computer lock-up scenarios that are available to you, as well as other ways to lock the computer:

33 Security Practices Locking your computer p

34 Security Practices Locking your computer mputerinwindows7.php p p

35 6/15/2011

36 Security Practices Strong Passwords Ten steps to Strong Passwords 1. Don't use easily guess passwords like a date of birth, spouse, child's or pet's name. 2. Use a combination of upper and lower case letters, symbols and numbers. 3. Make your password at least eight characters long. Longer is even better. 4. Use a different password for each account or web site. 5. Change your passwords frequently.

37 Security Practices Strong Passwords Ten steps to Strong Passwords 6. Do not write your passwords down anywhere. 7. Never share your password with anyone else. 8. Avoid using "dictionary" words. 9. Don't use "password" or "none" as your password! 10. If someone calls or sends you claiming that they are from your bank, or credit card company, or anywhere else that you have a password with, NEVER give them your password or PIN no matter what story they tell you.

38

39 Security Practices Strong Passwords Go to the following website and test your password(s):

40 Security Practices Strong Passwords How did you do?

41

42 Security Practices Using Preventive software What is a Computer Virus? Computer viruses are software programs that are deliberately designed to interfere with computer operation, record, corrupt, or delete data, or spread themselves to other computers and throughout the Internet.

43 Security Practices Using Preventive software What is a Anti-Virus Software? Antivirus software is a computer program that detects, prevents, and takes action to disarm or remove malicious software programs, such as viruses and worms.

44 Security Practices Using Preventive software Personal Anti-Virus Software These are free! Microsoft Security Essentials AVG Free Anti-Virus Software Avast Free Anti-Virus Software Avira AntiVir Personal - Free Antivirus

45 6/15/2011

46 Security Practices Using Preventive software What is Spyware? Spyware is Internet jargon for Advertising Supported software (Adware). It is a way for shareware authors to make money from a product, other than by selling it to the users. h /

47 Security Practices Using Preventive software What is Anti-Spyware? Antispyware helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software.

48 Security Practices Using Preventive software Free Anti-Spyware software Ad-Aware Free Internet Security Spybot Search & Destroy Windows Defender

49

50 Security Practices Using Preventive software What is a Firewall? A firewall is a software program or piece of hardware that helps screen out hackers, viruses, and worms that try to reach your computer over the Internet. com/security/firewalls/whatis aspx

51 Security Practices Using Preventive software Why Use a Firewall? A firewall protects you against a number of different online threats: 1.Hackers breaking into your computer. 2. Some viruses, called worms, that spread from computer to computer over the internet. 3. Some firewalls block outgoing traffic that might originate from a virus infection.

52 Security Practices Using Preventive software Testing your Computer Go to the following site: Click the Proceed button Click Continue Under ShieldsUP!! Services, select the different services: File Sharing, Common Ports, All Service Ports Messenger Spam, and Browser Headers

53 Security Practices Using Preventive software Testing your Computer How did the computer test? Do you want to test your home computer? How do you think it will test?

54 Cyber Security Awareness Challenge Go to the following site and take the quiz &objID=494&&PageID=203342&mode=2

55 Cyber Security Awareness Challenge How did you do??

56 Identity Theft

57 6/15/2011

58 Protect Yourself

59 6/15/2011

60 Any Questions?