Notes
Slide Show
Outline
1
"Carol Schwartz"
  • Carol Schwartz


2
Levels Of Security
  • From your Internet Service Provider (or your IT Department at work)
    • Do they scan mail? Use a spam blocker? Provide antivirus protection?
  • Software you can put on your computer
    • Spyware prevention? Hijack blockers?
  • Awareness and common sense
    • You can do a great deal to protect yourself
3
Passwords
4
Passwords
  • Where do you “hide” your passwords?
  • Consider how many of them are worth protecting
    • ATM, online banking and bill paying, PayPal, etc.
    • How easy would it be to guess your passwords?
    • If someone gets one of your passwords, how many different places or accounts could they use?
5
Dictionary Attack
  • Method of getting a password by systematically entering every word in a dictionary
    • Programs generate and test words to gain access
    • This kind of attack works because people choose ordinary words as passwords


6
Password Hack Programs
  • Available on the Web; free downloads
    • Google search on October 9, 2005 produced 5,340,000 results “password hack programs” in 0.21 seconds
  • Use caution when making online purchases
    • Your credit card or Pay Pal accounts could be vulnerable
    • Consider getting a credit card account with a very low limit to use only for online purchases
    • Never “save” passwords on your computer


7
Creating Strong Passwords
  • If the system supports it, use a password that has at least six mixed case, alphanumeric, and non-alphanumeric characters
    • crAzee4U!
  • Consider a “pass phrase”
    • ourAqt2
    • maDamimaDam!
    • eYemL8agin
8
Test Your Passwords
9
Social Engineering
  • If you do have a strong password, how difficult would it be to get that password from you?
    • You would be amazed at how quickly people will divulge passwords and why…
      • Most people will give up their passwords when asked
10
What’s in
Your Email?
11
Email
  • Viruses are no longer your biggest threat
    • 1 in 61 messages is virus-infected*
      • Antivirus software is still important and follow the same preventive practices
      • Do not open attachments that you are not expecting
      • Update antivirus software DAILY
      • Delete email from unknown senders
      •  NEVER open attachments or download graphics from unknown senders


12
Old-Fashioned Requests
13
Antivirus Software
  • Antivirus software is still a must because viruses still exist
  • It must be updated on a very regular basis—daily!
  • Free downloads that are effective
    • AntiVir PersonalEdition Classic
    • avast! 4 Home Edition
    • AVG Free Edition
14
Flash/Jump Drives
  • Remember that these can also become infected with viruses, just like any other disk
    • Use caution when attaching a flash drive to a computer
    • Scan these disks for viruses just like other disks
15
Email Hoaxes: More Annoying Than Dangerous
  • Everyone falls for them
  • Common characteristics
    • Hoaxes usually tell you to forward the mail to everyone you know
    • They play on emotions to make sure you do that
  • Check before you forward mail
    • One person’s email is another person’s spam
16
That’s where the name came from…
17
Spam
  • Unsolicited email that is often created from distribution lists
    • Obtained from web pages
    • Auto-generated email addresses
    • Purchasing email addresses through list brokers
    • "Remove me" options on spam are often fake
      • A 2002 study by the FTC demonstrated that in 63% of the cases, the "remove me" option did nothing or resulted in more e-mail*
  • Major problem for all Internet users because it accounts for between 45-66% of all email
18
Reducing Spam
  • 10 out of 12 messages are spam*
  • Don't give out your email address arbitrarily
    • Be cautious when posting your email address
  • Check privacy policies when signing up for anything on the Web
  • Be aware of options selected by default
          • U. S. Computer Emergency Readiness Team
19
Reducing Spam
  • Don't follow links in spam messages
  • Disable the automatic downloading of graphics in HTML mail
  • Consider opening an additional email account
  • Filter your email for key words
          • U. S. Computer Emergency Readiness Team
20
Even more of a threat . . .
21
Where Will This
Link Take You?
22
What Will They Ask You?
23
Phishing
24
Phishing
  • A fraudulent message that is legitimate-looking email that appears to come from a trusted source
    • Attempts to get personal and/or financial information from the recipient
    • Sources that are frequently spoofed by phishers include PayPal, eBay, Best Buy, and America Online
25
Check With the “Source”
  • Pay Pal, eBay, AOL, and others have provided special email addresses where you can forward a suspected phishing message for analysis
    • Do not click on links in the original message
    • Forward the suspected message back to “the source” to learn whether it is legitimate
26
More Phishing Expeditions
27
 
28
Different Kinds of Phish
29
 
30
 
31
 
32
All Technologies Are Affected
33
Spyware
  • “Any technology that gathers information about a person or organization without their knowledge.
  • On the Internet, spyware is programming that is put in someone's computer to secretly gather information about the user and relay it to advertisers or other interested parties.
  • Spyware can get in a computer as a software virus or as the result of installing a new program.”
34
The Dangers of Spyware
  • Tracking your keystrokes, which can aid in identity theft
  • Changing your homepage (the website that your browser opens to)
  • Tracking your Internet usage
  • Secretly downloading and running files from unknown locations
  • Installing viruses
  • Initiating many annoying pop-ups/pop-unders (a window that randomly "pops up" while online)
  • Slowing system performance
  • Slowing Internet Explorer performance
35
Anti-Spyware Software
  • Microsoft Anti-Spyware (free!)
  • Lavasoft Ad-Aware (free!)
  • Spyware Blaster (free!)
  • Spybot (free!)
  • eTrust Pest Patrol ($20)
  • Using an anti-spyware “cocktail” can stop more intrusions than a single software application
36
Keystroke Loggers
  • Small programs that record each key a user types
  • These programs can be downloaded as a form of spyware
  • Information can be sent over the Internet
37
Browser Hijacking
  • Changing your home page to a web site that promotes unsavory or illicit activities
    • Can also make your web browser continue to open windows to such sites, even if you are not using your web browser
  • Hijacking often occurs by clicking on certain ads or links
    • Usually advertising activities that are somewhat less than respectable
38
Use A Different Browser
39
Use A Different Browser
40
Firewalls
  • Hardware or software that prevents other Internet users (individuals or groups) from accessing your computer
    • Windows XP has a built-in firewall which can be enabled through the Control Panel
      • (available in Service Pack 2 if you have an older version of XP)
    • Other firewall software is free on the Web
41
Free Firewall Software
  • You can get more than you pay for with any of these free downloads
    • Kerio Personal Firewall 4
    • Sygate Personal Firewall 5.x
    • ZoneAlarm 6
    • Microsoft XP Service Pack 2
    • Outpost Firewall Free 1.0
42
Wireless Networking
  • Many homes and businesses now have wireless networks, but what about security?
    • Can neighbors log into the network?
      • Change the administrator username and password
      • Turn on the encryption feature
      • Turn off the network when not in use for long periods of time
    • Be cautious when using wireless networks at coffee shops, restaurants, and hotels
43
Opt Out
  • You can use a number of websites to remove personal contact information
    • 10 of these opt-out sites can be found at
44
Leave Your Computer On
  • Security software must be constantly updated
    • When your computer is turned off, there is a window of vulnerability between the time you turn the computer back on and when software is updated
    • Turn off the printer, monitor and other peripherals to save energy
45
Who Owns a Domain Name?
46
Internet Spyware Prevention Act of 2005
  • H.R. 744, also known as the I-SPY Act, is a bill that would make it a crime to use spyware, to instigate phishing, or to use other methods to get personal information without someone's knowledge or consent.
    • The bill passed the U.S. House of Representatives on May 23, 2005
47
The Law Would Protect
  • First and last names
  • Home or other physical addresses
  • Email addresses
  • Telephone numbers
  • Social Security numbers
  • Tax identification numbers


  • Driver's license numbers
  • Passport numbers
  • Credit card numbers
  • Bank account numbers, and passwords or access codes
48
Source
  • Whatis.com: Word of the Day: I-SPY Act. Electronic newsletter. 2 June 2005. Whatis.com.
    • http://searchsecurity.techtarget.com/sDefinition/0,290660,sid14_gci1093105,00.html?track=NL-34&ad=517673

49
Today’s Presentation