A presentation to discuss information securities and responsibilities of individual to keep it safe. This specific presentation was contributed by many people. Each of the different area has its own author. I have planned and coordinated with them to compile it into a group presentation.

2. technology
Information Security High-Tech erain
protect us ?
can any

3. Our empirical observations ...
Antibody grows only after we suffer.
Medicine is invented always after the bacteria is discovered.
Same with the Computer viruses
They are invented first before there is any anti-virus.
3

4. Rock Solid Security ...
by : Eduardo Segura
HUH !!!!!!

5. It was broken within 2
days !!!!
QuickTime™ and a
H.264 decompressor
are needed to see this picture.
“Secure” database
server ????

6. “Secure” telephone
network ????
(Jan 1991) First hacker arrest: MArk
Abene (a.k.a. Phiber Optik)

7. “Secure” internet
backbone ????
(May 1998)... in testimony before
congress L0pht Hacker group claimed
that they can bring down the internet

8. “Secure”
distribution
media
(DVD,
1997) ????
(Oct 1999) DeCSS is released, a closed
source Windows-only application for
DVD ripping

9. Thank You ...

10. Threats in
day-to-day
life
life
lifeby : Eric So

11. Losing personal privacy over the internet
Losing information from laptop or memory drive
Media copyright issue all over the world, e.g.
Youtube, DVD copy
Disadvantage - Technology for daily life

12. Satellite Missions
High resolution photography (IMINT) e.g.
monitoring weather and making maps
Communications eavesdropping (SIGINT)
Covert communications
Enforcement of nuclear test bans (see National Technical
Means)
Detection of missile launches
Spy Satellite . . .

13. GPS Surveillance --Turn a cell phone into a
surveillance device provided by Accutracking (
http://www.accutracking.com/)
Mass surveillance – domestic telephone call, Traffic
camera and commercial records.
Surveillance

14. Pudding Media is offering a service
uses voice-recognition software to find
tens of thousands of key words in a
user's conversation to trigger ads that
are shown on the user's screen.
Conversation may have been
monitored
Privacy for free VOIP

15. Same password used over multiple sites.
Personal Profile can be brought up from any
administrator.
Contact information may be sold to other advertisement
company or partners as a online properties before 2000.
E-commerce

16. Using the Vision 20/20
POM Offender
Locator to identify:
Missing Person
Tracking
The vision 20/20
US Computer Emergency
Sex Offender Locator
Weather
Trace your missing pet

17. Thank You ...

18. Open Wi-Fi
by : Kiran Patil
Yahoo!!!!

19. Internet
VoIP
Phone access
Game
consumer electronic device
connectivity.
Wi-Fi ... the future wave

20. War driving ... used to
detect WiFi and collect
information to decide
which one to attack.
Wi-Fi ...hacking tools

21. Wi-Fi ...hacking tools

22. Evil Twin
Attack at two Miami Marshall's stores :
TJX Breach SEPTEMBER 25, 2007
Hijacking a Macbook in 60 Seconds or Less
Hacking using Open Wi-Fi

23. Enable WPA
Change the SSID from the default.
Enable Mac Address Filtering in your
Access Point
Restrict the range of available IP addresses
that your router will allow to connect
Wi-Fi ... What should be done ?

24. Always make sure you are connecting to right network.
Avoid Open Wi-Fi if absolutely not sure about it.
Do not assume that hackers will not target you ...
sometimes they do it just for fun.
Set up a software firewall (such as Zone Alarm) on each
computer.
Enable logs on your router
Wi-Fi ... What should be done ?

25. Thank You ...

26. Phishing
by : Pantesh Shah

27. From Wikipedia
In computing, phishing is an attempt to criminally and
fraudulently acquire sensitive information, such as usernames,
passwords and credit card details, by masquerading as a
trustworthy entity in an electronic communication
Phishing ... what’s that ?

28. Phishing ... an increasing problem
source : WikiPedia

29. Deceptive Phishing
Malware-Based Phishing
Keyloggers and
Screenloggers
Session Hijacking
Web Trojans
Phishing ...multiple faces
Hosts File Poisoning
Data Theft
DNS-Based Phishing
(“Pharming”).
Content-Injection Phishing
Man-in-the-Middle Phishing
Search Engine Phishing

30. Phishing ...one best(worst) example

31. Google’s anti-phising software
Anti-phising tool bar in IE
Many available anti-phising software
Phishing ... some protection
technology

32. Be-suspicious about the e-mail asking for
your private information.
Make sure that link you click brings you to
legitimate web-site
Look out for poor spelling / grammar in
official looking e-mail.
Do not fall for million dollars - money does
not come as free
Phishing ...a few tips to protect
ourselves

33. Thank You ...

34. Daily life Watch-
outs
by : Niketa Patel

35. A lot of password cracking softwares are
readily available on internet.
Modern technology enables hacker to try out
password cracking guesses ( from common
words to ancient language ) in a speed of light.
Account hacking can not only reveals private
information, but also can be a gateway to install
‘Torjan Horse’ ( or ‘back door’ ) program to
access our computer and data without us ever
knowing about it.
Password security

36. To protect password
Need to make our password unique
for each account
Need to change our password
frequently
Need to keep our password secret
Password security

37. Email has become such a commonplace part of our lives that many
of us forget just how insecure it can be. For instance:
Email generally travels across the Internet in an unencrypted form
(plain,readable text) that anyone between the source and destination can
read.
Email attachments are the most commonly used method for spreading
worms, viruses and Trojan Horses. Infection can happen by clicking on
something as innocent looking as a .jpg or .zip file.
Once an email has been sent, you have no control over what happens with
it.
E-mail security

38. Never send your password in an email.
Be certain of an attachment's safety before opening it.
Never reply to unsolicited email
Never allow guests to use your account.
Beware: HTML messages are a common way for viruses and other
hostile content to transmit themselves. Use caution when opening a
HTML message from an unknown source. Most email tools allow
you to read messages in plain-text format,which eliminates the risk
E-mail security- do’s & dont’s

39. Social Engineering
QuickTime™ and a
H.264 decompressor
are needed to see this picture.

40. Social engineering uses the
skills of the con artist ...
These "engineers" impersonate
computer administrators
company officials
employees of a partner company
Social Engineering

41. Social engineering is one of the
most effective hacker exploits
no technology can defend against it.
Some surveys have shown that over
70% of people will divulge their
password or other information under
the right circumstances
Social Engineering

42. Thank You ...

43. Can any technology
protect us ?
Information Security in High-Tech era
Our original quest . . .

44. what ever we have discussed so
far is revolving around
us

45. Security is only as strong as itsweakest link
which is again ...
Another empirical observation
us

46. http://www.theregister.co.uk/2007/03/19/diamond_bl
http://www.theregister.co.uk/2007/04/17/choco
late_password_survey/
Two recent news . . .

49. 22% IT professionals revealed their password with simple question
A further 42% of IT professionals revealed their password With
social engineering technique.
39% said that they will tell IT department staff their password
32% said that they will tell their password to their boss.
More on this password
survey ...

50. Technology may help us to build the strongest lock . . .
It is our responsibility toprotect the key.
Our Conclusion ...

51. Thanks to Haroon Mahmood and Rich
Brueckner of SUN Microsystems Inc. for
sharing their creation on the ‘social engineering’
video clip.
Many of the the information and ‘clip arts’
presented here has been taken from the ‘Security
Training’ documentation from SUN
Microsystems Inc.
Acknowledgment

52. Discussion
Session
. . .
. . .
. . .