Online Security Internet 303 - Socastee South Carolina Public Library Visualization of the various routes through a portion of the Internet Source: WWW.Wikipedia.Com A link to and discussion of this presentation on the web can be found on my blog. Go to http:\ WhiteHouseComputing.Blogspot.Com and scroll down if necessary to “Online Security Class”

Online Security Common Computer Security Myths Myth: “ There is nothing important on my computer, so no attacker would want to access it” Reality: “ Internet Background Radiation” – a techie term that refers to the constant stream of probes and malicious traffic on the internet. Probes are looking for any machine that can be “hijacked” to make money for their hijackers. Spam Robots (spambot) Zombies trained to attack web sites on demand (extortion robots)

Myth: “ There is nothing important on my computer, so no attacker would want to access it”

Reality:

“ Internet Background Radiation” – a techie term that refers to the constant stream of probes and malicious traffic on the internet.

Probes are looking for any machine that can be “hijacked” to make money for their hijackers.

Spam Robots (spambot)

Zombies trained to attack web sites on demand (extortion robots)

Online Security Common Computer Security Myths Myth: “The biggest security threats involve hackers who target individual computer users”. Reality: Many probes are automated. Computers under program control can probe other computers much faster than computers under human control can.

Myth: “The biggest security threats involve hackers who target individual computer users”.

Reality:

Many probes are automated. Computers under program control can probe other computers much faster than computers under human control can.

Online Security Common Computer Security Myths Myth: “Paying bills online increases the risk of identity theft”. Reality: Communication from the browser can be secure encrypted LOOK for the LOCK Either bottom right or just to the right of the address entry window depending on browser and browser version AND look for https instead of http in the address For example: https://WWW.Chase.Com However – above assumes no keylogers on your machine

Myth: “Paying bills online increases the risk of identity theft”.

Reality:

Communication from the browser can be secure encrypted

LOOK for the LOCK

Either bottom right or just to the right of the address entry window depending on browser and browser version

AND look for https instead of http in the address

For example: https://WWW.Chase.Com

However – above assumes no keylogers on your machine

Online Security Types of Threats Annoyances Spam Adware Dangerous Spyware Virus Phishing Enabler Trojan Backdoor MALWARE

Annoyances

Spam

Adware

Dangerous

Spyware

Virus

Phishing

Enabler

Trojan

Backdoor

Online Security Types of Threats - Annoyances Spam – AKA Unwanted, Unsolicited Junk Email Clogs your email inbox Can be dangerous Can lead you to dangerous websites Example – sites that attempt to exploit unpatched bugs in your browser to insert “ backdoor ” or other malware in your system Adware – Software that delivers targeted advertisements to your computer

Spam – AKA Unwanted, Unsolicited Junk Email

Clogs your email inbox

Can be dangerous

Can lead you to dangerous websites

Example – sites that attempt to exploit unpatched bugs in your browser to insert “ backdoor ” or other malware in your system

Adware – Software that delivers targeted advertisements to your computer

Online Security Types of Threats - Dangerous Spyware “is a type of malware that is installed surreptitiously on personal computers to collect information about users, their computer or browsing habits without their informed consent.” Wikipedia. ( Spyware ) Can simply record information about your browsing habits to guide Adware in delivering ads OR Worst case: Keylogger – can record your keyboard keystrokes and transmit them over the Internet

Spyware “is a type of malware that is installed surreptitiously on personal computers to collect information about users, their computer or browsing habits without their informed consent.” Wikipedia. ( Spyware )

Can simply record information about your browsing habits to guide Adware in delivering ads OR

Worst case: Keylogger – can record your keyboard keystrokes and transmit them over the Internet

Online Security Types of Threats - Dangerous Virus “A computer virus is a computer program that can copy itself and infect a computer without the permission or knowledge of the owner.” Wikipedia How is it spread? Email attachment Visiting a malicious website with an unpatched buggy browser Infected files on any portable media (thumb drives, CDs, floppys, etc) Over a network when file sharing is too broadly set up

Virus “A computer virus is a computer program that can copy itself and infect a computer without the permission or knowledge of the owner.” Wikipedia

How is it spread?

Email attachment

Visiting a malicious website with an unpatched buggy browser

Infected files on any portable media (thumb drives, CDs, floppys, etc)

Over a network when file sharing is too broadly set up

Online Security Types of Threats - Dangerous Virus – How Can You Protect Yourself? Install an antivirus program on your computer Two parts of an Antivirus program defense The program itself Understands basic look and feel of generic computer virus Can also read and understand specific descriptions of specific virus family and virus Descriptions of specific virus and virus families New descriptions need to be downloaded to your computer on a continuing basis. In commercial software, there is an annual fee for subscription. When your subscription runs out, NEW descriptions stop being downloaded.

Virus – How Can You Protect Yourself?

Install an antivirus program on your computer

Two parts of an Antivirus program defense

The program itself

Understands basic look and feel of generic computer virus

Can also read and understand specific descriptions of specific virus family and virus

Descriptions of specific virus and virus families

New descriptions need to be downloaded to your computer on a continuing basis.

In commercial software, there is an annual fee for subscription. When your subscription runs out, NEW descriptions stop being downloaded.

Online Security Types of Threats - Dangerous Virus – How Can You Protect Yourself? See handout for examples of good antivirus software. For another source go to WWW.PCMag.Com Select Reviews here Enter Antivirus in the search box here

Virus – How Can You Protect Yourself?

See handout for examples of good antivirus software.

For another source go to WWW.PCMag.Com

Online Security Types of Threats - Dangerous Phishing “is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.” Wikipedia Fraudulent email scares you into clicking a link in the email taking you to a site that LOOKS like a real bank (for example) but is not Fraud site asks for userid password account number etc Phishing

Phishing “is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.” Wikipedia

Fraudulent email scares you into clicking a link in the email taking you to a site that LOOKS like a real bank (for example) but is not

Fraud site asks for userid password account number etc

Online Security Types of Threats - Dangerous Phishing – How to Avoid Being Fooled Avoid following links in emails If you do and the site wants info DO NOT GIVE IT Banks, Brokerage Houses, etc WILL NOT ASK YOU VIA EMAIL TO VERIFY INFORMATION If they seem to be doing that IT IS A FRAUD

Phishing – How to Avoid Being Fooled

Avoid following links in emails

If you do and the site wants info DO NOT GIVE IT

Banks, Brokerage Houses, etc WILL NOT ASK YOU VIA EMAIL TO VERIFY INFORMATION

If they seem to be doing that IT IS A FRAUD

Online Security Types of Threats - Dangerous Four Rules Run Windows Update – plug the holes that let the gunk in For Virus and Spyware gunk that gets in anyway… 2. Install and run Anti Virus software – keep subscription current 3. Install and run AntiSpyware software–keep subscription current 4. Run a Firewall Start Control Panel Security Center 4. Windows Firewall 5. On Note – assumes you are not running a different firewall already

Four Rules

Run Windows Update – plug the holes that let the gunk in

Start

Control Panel

Security Center

Online Security Firewalls Prevent unauthorized entry from outside Can be hardware Routers include a NAT firewall preventing unauthorized entry from outside but not necessarily reporting or preventing rogue applications inside your computer from communicating outbound Can be software ( Windows firewall, ZoneAlarm) Software firewalls can/will prevent unauthorized outbound communication too

Prevent unauthorized entry from outside

Can be hardware

Routers include a NAT firewall preventing unauthorized entry from outside but not necessarily reporting or preventing rogue applications inside your computer from communicating outbound

Can be software ( Windows firewall, ZoneAlarm)

Software firewalls can/will prevent unauthorized outbound communication too

Online Security Firewalls How Secure is Your Firewall? Major corporations have their firewalls intentionally probed periodically by a security service to test them. You can do the same thing at the “Shields Up” site located at https://www.grc.com/x/ne.dll?bh0bkyd2 NOTE the above site DOES NOT scan your machine for malware of any sort. It provides only a test of your firewall (or lack thereof) and its ability to block intrusion.

How Secure is Your Firewall?

Major corporations have their firewalls intentionally probed periodically by a security service to test them.

You can do the same thing at the “Shields Up” site located at https://www.grc.com/x/ne.dll?bh0bkyd2

NOTE the above site DOES NOT scan your machine for malware of any sort. It provides only a test of your firewall (or lack thereof) and its ability to block intrusion.

Online Security Firewalls Laptops If you depend on the hardware firewall at home, you need to be sure you have a software firewall running on your laptop if you take it out of your house to connect from another location. If you have file and printer sharing turned on (to share files with other computers in you house) TURN IT OFF before connecting to a public WiFi hotspot or someone else’s hard wired LAN because you will be behind their firewall sharing your files with them

Laptops

If you depend on the hardware firewall at home, you need to be sure you have a software firewall running on your laptop if you take it out of your house to connect from another location. If you have file and printer sharing turned on (to share files with other computers in you house) TURN IT OFF before connecting to a public WiFi hotspot or someone else’s hard wired LAN because you will be behind their firewall sharing your files with them

Online Security Information Source WWW.OnguardOnline.Gov “a partnership between the FTC, other federal agencies, and the technology industry -- offers tips to help you be on guard against Internet fraud, secure your computer, and protect your personal information. “ Federal Trade Commission web site

WWW.OnguardOnline.Gov

“a partnership between the FTC, other federal agencies, and the technology industry -- offers tips to help you be on guard against Internet fraud, secure your computer, and protect your personal information. “ Federal Trade Commission web site

The End