The document discusses traditional and digital views of security, types of security breaches like phishing and cross-site scripting, and security terminology like encryption and firewalls. It provides examples of data breaches at retailers and on Facebook. The author introduces themselves and shares contact information and resources on IT security best practices.

1. “To Serve & Protect”
Puleen Patel
November 6, 2010

2.  Introduction
 Traditional View
 The Map of The Web
 Digital View
 Types of Breaches
 Security Terminologies
 Questions

3.  My name is Puleen,
 Technology is my passion
 During the day a Canadian Bank lets me
apply, learn and grow my passion
 At other times

4.  Protection of Content
◦ Belongings
 Jewels, Car, Money…
◦ Information
 Financial, Bills, Will…
◦ Communication
 Voice conversations, Messages, Letters…

6.  Protection of Content
◦ Physical Assets
 Servers, Workstations, Laptops…
◦ Software & Intellectual Assets
 Applications, Code, Databases…
◦ Channels
 IM, Email, Web, Mobile…
◦ Social *NEW*
 Facebook, MySpace, Flickr, Picasa…

7.  Network
◦ IP Spoofing / Maquerading
◦ Packet Sniffing
◦ Denial of Service Attacks
◦ …
 Application
◦ Login / Password
◦ Email
◦ SQL Injection
◦ Session Hijacking
◦ Cross-Site Scripting
◦ Phishing
◦ …

8.  Encryption
◦ Secure Socket Layer (SSL / HTTPS)
◦ Secure FTP (SFTP)
◦ Secure Email (Digital Signatures)
◦ Public Key Interchange (PKI / Digital Certificates)
 Firewalls / Gateways
 Virtual Private Networks (VPN)

9.  In 2007, parent company of Winner / HomeSense had
2 million visa card numbers in Canada and 20 million
globally stolen by fraudsters
 Phishing sites attempt to send emails that take users
to legitimate looking websites which are setup to
capture confidential information
 May 2010, a security exploit was discovered which
allowed capturing Facebook friends list, email
addresses and other data by way of Cross Site
Scripting (XSS)
 IT security breaches at Canadian firms account for an
average annual loss of $834,149, a figure that
reflects a 97 per cent increase from the $423,469
average cost reported in 2008, according to a
national study released Tuesday.

11.  http://puleen.com
 http://blog.puleen.com
 puleen@gmail.com
 @puleen

12.  Making Sense of Security -
http://www.technicalinfo.net/index.html
 Web Application Security -
http://www.phpwact.org/security/web_application_security
 Apache Security - http://www.apachesecurity.net/
 IT Security Best Practices -
http://www.internet.com/IT/Security/BestPractices
 Best Computer Security Practices of Home, Home Office, Small
Business and Telecommuters -
http://www.sans.org/reading_room/whitepapers/hsoffice/co
mputer-security-practices-home-home-office-small-
business-telecommuters_616
 Security Best Practices for Twitter applications -
http://dev.twitter.com/pages/security_best_practices