Practical Cyber Security for Architects of Small Firms (1 AIA CEU)

Transcription

1 Practical Cyber Security for Architects of Small Firms (1 AIA CEU) with Angela Render Thunderpaw.com

2 Transforming Architecture LLC is a Registered Provider with The American Institute of Architects Continuing Education Systems. Credit earned on completion of this program will be reported to CES Records for AIA members. Certificates of Completion for non-aia members are available on request. This program is registered with the AIA/CES for continuing professional education. As such, it does not include content that may be deemed or construed to be an approval or endorsement by the AIA of any material of construction or any method or manner of handling, using, distributing, or dealing in any material or product. Questions related to specific materials, methods, and services will be addressed at the conclusion of this presentation.

3 Copyright Materials This presentation is protected by US and International Copyright laws. Reproduction, distribution, display and use of the presentation without written permission of the speaker is prohibited. Transforming Architecture LLC

4 Learning Objectives 1. Define what cyber warfare is and how it applies to individuals and small businesses. 2. Identify a cyber threat. 3. Defend against a cyber threat. 4. Respond to a cyber attack.

5 What is Cyber Warfare?

6

7 What is a Hacker?

8

9

10 Who is the Enemy?

11 Why Me?

12 I am convinced that there are only two types of companies: those that have been hacked and those that will be. And even they are converging into one category: companies that have been hacked and will be hacked again. Robert Mueller FBI Director

13 How do they attack?

14 Insider

15

16 Website

17 Attachments PDF EXE MOV DOCX PPT

18

19 SPAM

20 Social Engineering

21 Did You Know. Social Networking sites are preferred by hackers for social engineering?

22 + + + Name Street Address Picture Friend s Names Pets Hobbies Interests + = Profession Employer Phone Number Co-Workers Access to you through Groups

23 Spear Phishing From: Tim Morlock To: Subject: Nice to Meet You Dear Bill Williams, Thank you for the connection on LinkedIn. Like I mentioned, I m a new-hire at MegaCorp under Jim Pike in sales. Since he s out of town the next week and I m anxious to get to work, I wanted to know if I could get my and VPN login to the system set up. Sincerely, Tim Morlock Assistant Account Rep. MegaCorp

24 Friends

25

26

27 What can I do? + +

28

29

30 Passwords Change every 6-12 months Use long passwords that are somewhat complex Use a unique password for each account

31 Free

32 Can Be Fake paranoia pays off. It is definitely a lesson in be careful what you open... even if looks to be coming from your boss, don t open a file if you aren t expecting it. - Reid Wightman, Digital Bond

33 Encrypted WiFi

34 Keep Sensitive Data Secure

35 Dispose of Old Hardware Securely

36 Write Up a Plan

37 Object Lesson Who is asking for my information? Do I trust them? Why do they need to know? Will it be kept secure? Could it be used in social engineering?

38 How is your corporate handled? A dedicated server in our office A hosting company using our domain name (ourdomain.com) A free provider (gmail, yahoo, etc) Some other solution Don't know

39 What do I do?

40 How do I know? Flaky behavior. Suspicious contacts. (Phone, ) To you. Mentioned by your partners. Mentioned by your clients.

41 Thunderpaw.com

42 What is TA? The only franchise opportunity for registered architects in the US. 7 franchisees in Texas, Ohio, Maryland, Florida, Virginia and DC Our Mission: To build a professional community that provides clients value through Expertise, Education and Innovation.

43 Karen Pitsley, AIA TransformingArchitecture.com (301) Angela Render Thunderpaw.com (571) Thank You