Security awareness training
•
1 like•656 views
Sumedt Jitpukdebodin is a senior web application security specialist who teaches cybersecurity courses. He discusses several common cyber threats including social engineering, phishing, fake wireless access points, weak password security, and social networking threats. He provides examples of these threats and how attackers exploit them, often demonstrating with short videos. Throughout the presentation, he emphasizes the importance of security awareness and sharing knowledge to help others learn about computer security.
More Related Content
Viewers also liked
Similar to Security awareness training
Similar to Security awareness training (20)
More from Sumedt Jitpukdebodin
Recently uploaded
Recently uploaded (20)
Security awareness training
- 1. SUMEDT JITPUKDEBODIN SENIOR WEB APPLICATION SECURITY SPECIALIST NCLA,LPIC-1,COMPTIA SEC+,C|EH,ECPPT Fundamental Of Computer Security
- 2. Who am I? ● Sumedt Jitpukdebodin ● Jobs ○ Senior Web Application Security Specialist @ACIS i-Secure ○ Instructor Of “Introduction to Ethical Hacking, Mastering in Exploitation” Course Of CITEC ○ One Of Committee Of CSAT(Cyber Security Association of Thailand) ○ Writer Of Information Security and Linux forum of Hackazine ○ Writer Of “Hacking & Security – First Step Of Penetration Tester” Book. ● Hobby ○ Hacking ○ Whitehat ○ Writing ● Experience ○ Speaker in many universities ○ Speaker at “Hacker Secret #2,#3” seminar ○ Speaker at “Computer Security” seminar at BOI Fair. ○ Writer Of “How to pentest famous CMS” in Web App. Pentest Magazine. ○ Etc.
- 3. Threats Of Today 1. Social Engineering ○ Phishing ○ Owning with PDF 2. HTTP, HTTPS 3. Fake Wireless 4. Encryption Of Wireless Network 5. Strength Password 6. Fake Call Center 7. Social Network Threats
- 4. Social Engineering ● What ● Why ● When
- 5. Phishing ● How ○ Spam mail ○ Same or similar interface ● For ○ Steal credential ○ Exploit the web browser
- 6. Phishing Video ● Example 1 ● Example 2 ● Real Case (http://r00tsec.blogspot.com/2012/04/phishing- site.html)
- 7. Owning with PDF ● How ○ Exploit PDF Reader Software ○ Use the interesting name ○ Use the interesting content email ● For ○ Take the Bot ○ Compromise
- 8. Owning with PDF video
- 9. HTTP,HTTPS ● HTTP(Secure) ○ Identify the website ○ Protect sniffing attack
- 11. Identify the web
- 13. HTTP, HTTPS Video ● Try to sniffing traffic HTTP and HTTPS
- 14. Fake Wireless Access Point ● How ○ Similar name of true hotspot ○ Use ‘Public’ name ● For ○ Steal credential ○ Change destination to hacker website
- 15. Fake Wireless Access Point Video
- 16. Encryption Of Wireless ● Mode ○ Public ○ WEP ! RC4 Streaming Encryption ○ 64,128bits Encryption. ○ IV ○ WPA ! TKIP Encryption (Base on RC4) ! AES(Advance Encryption Standard) Encryption ! ICV ○ WPA2 ! AES Encryption ○ 256bit Encryption ○ *WPS(Wifi Protected Setup)
- 17. Brute Force Time ● WEP < 10 minutes ● WPA – 21 character > 4x10-20 years ● WPA2 > WPA
- 18. Break The Encryption Of Wireless ● WEP ● WPA/WPA2
- 19. Strength Password ● 1 Website/Username/Password ● > 8 Characters ● Upper Case ● Lower Case ● Special Characters: @, #, !, $, etc. ● Not in dictionary and personal information, company name.
- 20. Show time for use Keepass
- 21. Fake Call Center ● How ○ ถูกรางวัลต่างๆ ○ คืนภาษี ○ หนี4บัตรเครดิต ○ แอบอ ้างเป็น DSI ● Fr0m ○ จีน ○ ไต้หวัน
- 22. Fake Call Center Video
- 25. Example Of Social Network Threats ● Likejacking ○ Facebook User ○ Interesting Picture ○ Spread to friends and user’s group.
- 27. How to Learn Computer Security ● Love ● English ● Forum ● Share ● E-Book
- 28. Q & A
- 29. Thank You ● ☺