Los Numeros grandes Robo Identidad Digital

Slide 1: Los números Grandes Santiago Cavanna Consultor Independiente. VP ISSA Argentina Santiago.cavanna@gmail.com www.santiagocavanna.com.ar

Slide 2: Personas… Identidades Individuales  Población actual = 6.667.000.000  Incremento diario = 220.000?  Generación NET = 1977 – 1996: 2.000.000.000 (casi 1/3 de la población)  Estimación para 2050 = 9.500.000.000  34% posee telefono celular  17% es un usuario activo de internet  1% es dueño de un PC

Slide 3: Global PC Market Grew 13.4% in 2007: Gartner  Worldwide PC shipments rose 13.4% 271.2 million units in 2007, according to preliminary results by IT consultancy Gartner.  Latin America saw PC shipments reach 24 million units in 2007, an 8.9 percent increase from 2006.  U.S. PC sales grew 5.3 percent, with shipments reaching 64.2 million units.  http://www.internetnews.com/stats/article.php/3722471/Global+PC+Market+Grew+134+in+2007+Gartner.htm

Slide 4:  http:// www.internetworldstats.com/stats.htm

Slide 8: Estadísticas de Robo de Identidad

Slide 9: 2008 Set for record number of security breaches  The Identity Theft Resource Center (ITRC), a not-for-profit organization that helps victims of identity theft, claims that security breaches in the first three months of 2008 have more than doubled over the same period in 2007.  For 2007, ITRC tracked 446 breaches =127,725,343 personal records.  According to the center, breaches in financial institutions have seen a slight decrease. In the US so far in 2008, Educational institutions account for 25 percent of data breaches; Government agencies suffered 18 percent, with medical and health care organizations causing 14 percent of incidents. http://www.watchyourend.com/

Slide 10: US adult victims of identity fraud  The number of US adult victims of identity fraud decreased from 10.1 million in 2003 and 9.3 million in 2005 to 8.4 million in 2007.  Total one year fraud amount decreased from $55.7 billion in 2006 to $49.3 billion in 2007.  The mean fraud amount per fraud victim decreased from $6,278 in 2006 to $5,720 in 2007.  The mean resolution time was at a high of 40 hours per victim in 2006 and was reduced in 2007 to 25 hours per victim. The median resolution time has remained the same for each Survey year at 5 hours per victim.  http://www.privacyrights.org/ar/idtheftsurveys.htm, http://www.scribd.com/doc/2524154/The-digital-economy-fact-book-2007

Slide 11: It's Almost Tax Day: Do You Know Where Your Identity Is?  A disturbing trend has surfaced: Many U.S. taxpayers are attempting to file their income tax forms only to find that they have already been filed by someone else purporting to be them.  During 2005 and 2006, the Federal Trade Commission received 92,570 taxpayer complaints related to employment-related and tax fraud identity theft, according to a recent report from the U.S. Treasury Department.

Slide 12: Encuestas por Aseguradoras (EEUU)  1.866 personas en todo el país, casi el 21 por ciento dijo haber sido víctima de robo de identidad el año anterior.  un 12 por ciento dijo que una agencia de recaudación de fondos impagos les había exigido pagos por compras que no habían hecho, y un 8 por ciento dijo que alguien había presentado cheques fraudulentos para sacar dinero de sus cuentas bancarias  En el 2005, la mitad de quienes se declararon víctimas culparon a familiares, amigos, vecinos o empleados domésticos.  Cuando la encuesta preguntó si la gente había padecido que alguna otra persona hubiese sacado préstamos a su nombre, el 2,4 por ciento respondió que sí.  El informe de la FTC determinó que los defraudadores habían abierto nuevas cuentas o cometido fechorías similares en nombre de 3,2 millones de personas en el año 2005.  La víctima promedio perdió 1.180 dólares y pasó 60 horas tratando de resolver el problema.  Pero hay un dato llamativo en el informe. Un 38 por ciento de las víctimas dijeron no haberse molestado en notificar a nadie, ni a la policía, ni a la compañía de su tarjeta de crédito, ni a una agencia de crédito.  Aun en casos en que las pérdidas por fraude supuestamente excedieron los 5.000 dólares, la tasa de abstención fue del 19 por ciento.  Chubb 2006

Slide 13: Inmigrantes ilegales apelan a identidad falsa para trabajar  El robo de identidad ha sido una preocupación creciente, pero un aumento en los procesamientos federales contra los inmigrantes indocumentados añade un nuevo aspecto al problema. A medida que el gobierno desarrolla sistemas electrónicos más modernos de verificación de empleo, los inmigrantes ilegales asumen nombres y números de seguro social reales de ciudadanos estadounidenses como Miranda para impedir su detección en los lugares de trabajo, para obtener licencias de conducir y conseguir crédito.  Esos datos revelaron 246.035 víctimas en toda la nación que denunciaron al menos un tipo de robo de identidad a la Comisión en el 2006. El fraude relacionado con los empleos representó el 14% de las denuncias a nivel nacional y un 11% de los denunciados por las víctimas de Kansas.  http://www.hispanoshouston.com/archives/inmigrantes-ilegales-apelan-a-

Slide 14: Facebook : jan 2008  Facebook Quick Analysis: The hot talked company Facebook has the highest growth rate, and at Forrester we predict it to achieve the same number of registered users as MySpace in Q4 of 2008, or early 2009 given the current growth rates. The widget platform, which launched summer 2007 has had strong growth as more than 13,000 applications have been launched. Please don’t call this the MySpace killer as each of these sites serves a different demographic, with a different purpose, and different tools. Facebook is more of a ‘lifestyle’ play that allows members to connect to each other.  General Growth * More than 60 million active users * An average of 250,000 new registrations per day since Jan. 2007 * An average of 3% weekly growth since Jan. 2007 * Active users doubling every 6 months

Slide 15: MySpace : jan 2008  MySpace Quick Analysis: MySpace the largest Social Network in North America maintains a dominant position as media site, primarily aimed at youth, giving them the opportunity to relate to brands and bands, as well as self-express. This site will continue to do with advertisers and marketers. Expect to see more TV and video networks to integrate and work with MySpace, who has the new generation that Generation X was to MTV.  Metrics · MySpace has more than 110 million monthly active users around the globe · We are the country’s trafficked site on the Internet · 85% of MySpace users are of voting age (18 or older) · 1 in 4 Americans is on MySpace, in the UK it’s as common to have a MySpace as it is to own a dog

Slide 16: Reunion : jan 2008  Reunion Quick Analysis: This quiet company is profitable already, and is making some strong growth with repeat users that are buying services from the company, as well as advertising. Reunion caters to an older crowd that is seeking to connect with each other from school, childhood, work, or locations. It’s surprising that this company has 32 million registered and is already profitable.  Highlights ·Over 32 Million Registered Members, and Growing ·70+ Million Site People Searches Actively Tracked ·7+ Million Avg. Unique Visitors Monthly ·700,000+ Paying Subscribers

Slide 17: The $4.6B Business of The Social  New research looks forward to a booming market for Web 2.0 technologies geared for the workplace  Why all the excitement? According to Forrester research, vendors large and small developing Web 2.0 products for the enterprise are chasing a market that will reach $4.6 billion globally by 2013. That figure represents an annual compound growth of 43 percent over the $764 million projected for 2008.  http://www.internetnews.com/dev-news/article.php/3742361/The+46B+Business+  Both Gartner and Forrester agree about that the phenomenon of introducing Web 2.0 tools into the workplace is a very real and growing trend. However, Gartner's most recent study on the market, offered a considerably more conservative estimate of the market.  Gartner predicted that the market would reach $707.7 million by 2011; Forrester estimates aggregate spending of $2.7 billion that year.

Slide 19: Social networking sites have little to no identity verification  When trying to get into a bar or club there is typically someone at the door checking IDs.  On social networking sites there is no bouncer, which means there’s no way to tell whether you’re corresponding with a 15-year-old girl or a 32-year-old man. March 31 2008

Slide 20: 55% Of People Regularly or Always Fake Their Web Identity  http://www.readwriteweb.com/archives/fake_web_identity_poll_resu  What do others make of the poll results so far? 55% of people regularly or always faking their Web identity seems quite high, but is it just a reflection of the current era of the Web - which is mostly about socializing and entertainment? Also perhaps faking your Web identity is just plain common sense on social networks and social blogs, because who knows if what you write today will bite you in the bum 10-15 years down the line.  Jan 2007

Slide 21: The same password for multiple WebSites (2007)  At the same time, 88 percent of the 800 people interviewed in the U.S. and the U.K. for the survey by the Accenture consultancy, which is to be released Thursday, said personal irresponsibility is the key cause of identity theft and fraud.  Many users repeat passwords so they don't forget them, which shows in another finding that 70 percent of survey respondents in the U.K. said they don't write down their passwords, versus 49 percent in the U.S.  The survey looked at people who used a computer at home, have high-speed Internet access and go online at least twice a week for something other than checking e-mail. The respondents were selected at random and questioned over the telephone. The mean age was 46.

Slide 22: De lo totalmente informal  A Lo formalmente concreto $$

Slide 23: Nov 2007  eBay alone has 21 identity systems.  So, if you wanted to use every part of eBay’s empire, like Skype, PayPal, StumbleUpon, etc, you’d need to sign in 21 different times.

Slide 24: ¿Espías a tu pareja en Internet?  Una de cada cinco personas casadas espía los mensajes de correo o SMS de su pareja.  El 13% echa periódicos vistazos a su historial del navegador.  * El 10% de parejas consideran que Internet es muy importante para mantener viva su relación. El 19% se envían mensajes de correo y el 14% chatean usualmente.  * El 51% usan el teléfono para discutir temas personales o resolver problemas, el 27%, la mensajería instantánea y el 14%, el correo.  * Los principales cíbercrimenes para las parejas son los mismos que en la vida real: enamorarse de otr@ (97%), tener cibersexo (94%), airear datos íntimos (92%), explicar problemas de la relación a otros (89%), dar información personal sobre su pareja (88%) y flirtear (85%). El 46% no está de acuerdo con que su media naranja se dedique a mirar sitios para adultos, siendo los hombres más permisivos con este punto. ¿Por qué será?  http://www.oii.ox.ac.uk/

Slide 25: Comercio y Fraude en línea Tarjetas de Crédito (entre otras)

Slide 26: Over 875 Million Consumers Have Shopped Online  Over 875 Million Consumers Have Shopped Online - the Number of Internet Shoppers Up 40% in Two Years  Among Internet users, the highest percentage shopping online is found in South Korea, where 99 percent of those with Internet access have used it to shop, followed by the UK (97%), Germany (97%), Japan (97%) with the U.S. eighth, at 94 percent. Additionally, in South Korea, 79 percent of these Internet users have shopped in the past month, followed by the UK (76%) and Switzerland (67%) with the U.S. at 57 percent.  Globally, the most popular and purchased items over the Internet are Books (41% purchased in the past three months), Clothing/Accessories/Shoes (36%), Videos / DVDs / Games (24%), Airline Tickets (24%) and Electronic Equipment (23%).  Payment Methods for Internet Shopping Credit cards are by far the most common method of payment for online purchases -- 60 percent of global online consumers used their credit card for a recent online purchase, while one in four online consumers chose PayPal. Of those paying with a credit card, more than half (53%) used Visa.  http://www.earthtimes.org/articles/show/over-875-million-consumers-have-shopped-online--the-number,263  The Nielsen Company, Jan 2008

Slide 27: Online holiday sales to reach $31 billion this year (EEUU 2007)  This year, some economic forecasters are predicting doom and gloom for the all-important 2007 Christmas shopping season.  However, eMarketer predicts that Internet holiday sales could reach $31 billion in 2007, up 18.5 percent when compared to 2006.

Slide 28: PayPal's Grown-Up  57 million active user accounts and a 16 percent growth rate in the last quarter of 2007, with most of the growth coming from eBay.  Security was the biggest driver of alternative payment usage, with 37 percent of survey respondents citing this. The next biggest driver, at 36 percent, was having no other payment option; for example, wanting to buy an auction item from a merchant that only accepted PayPal.  http://www.internetnews.com/stats/article.php/3732546/PayPa

Slide 29: Credit Cards  A record 90 million credit cards were stolen in 2007 and it cost E-Commerce merchants $3.6 Billion!  http://www.preventchargebacks.com/

Slide 30: http://www.epaynews.com/statistics/fraud.html#21

Slide 31: Credit card fraud keeps growing on the Net (May 2007)  European study found that more than 22 million adults fell victim to credit card scams in 2006. Figures from the Banque de France, the country's central bank, showed a credit card fraud loss of €236 million, for 2005.  http://www.iht.com/articles/2007/05/11/news/mcredit

Slide 32: Cuanto cuestan tus datos?

Slide 33: Abril 2008

Slide 34: Links recomendados Adicionalmente a los links indicados en cada pagina, sugiero tener presente estas otras fuentes.  http://www.pff.org/issues-pubs/books/050822defb.pdf  http://www.nymity.com/PrivacyStudies.asp  http://www.santella.com/consumer_credit_articles.htm  http://www.preventchargebacks.com/  http://www.iht.com/articles/2007/05/11/news/mcredit.php  http://www.tamingthebeast.net/articles2/credit-card-fraud.htm  http://www.epaynews.com/statistics/ecappstats.html  http://www.cybertelecom.org/data/ecomm.htm  http://www.fraud.org/internet/intstat.htm  http://www.web-strategist.com/blog/2008/01/09/social-network-stats-facebook- myspace-reunion-jan-2008/  http://www.internetworldstats.com/stats.htm

Slide 35: Los números Grandes Santiago Cavanna Consultor Independiente. VP ISSA Argentina Santiago.cavanna@gmail.com www.santiagocavanna.com.ar

Slide 36: Que es ISSAARBA ? ISSAArBA o ISSA Argentina es el capitulo Argentina Buenos Aires de ISSA.  http://www.issaarba.org/  https://www.issa.org/  https://www.issa.org/Chapters/Chapter-Directory.html  ISSA Agrupa y fomenta el desarrollo profesionales de seguridad de la informacion, y por tal motivo participa activamente de actividades de capacitacion y divulgacion sobre temas relativos a su interes.  Lo invitamos a visitarnos en nuestro website y a formar parte de la comunidad de profesionales de seguridad de la informacion.