Tutorial 1: Secure Your Computer

1
Tutorial 1 Secure Your Computer

• CS 3254 Information Security Management Semester
  2, 2007/2008

Elizabeth Koh diskre_at_nus.edu.sg 6 516
2829 SOC1-04-32 (by appt) Slides available after
Weds tutorial at http//www.comp.nus.edu.sg/ekoh
/teaching.htm
2
Outline

• CS3254 Assessment
• Tutorial expectations
• Ice-breaker
• Tutorial Questions
• Form groups

3
CS3254 Assessment

• Class participation 10
• Attendance for tutorials
• Preparation of tutorial assignments
• Participation in tutorials
• Participation in IVLE Discussion Forum
• Assignments 25
• Midterm test 15
• Final exam 50

4
Team assignments

• Form a team within your tutorial group (5 teams
  in a tutorial)
• Assignment 1 (10)
• Due in Week 7 (after recess week), around 3rd
  March
• Assignment 2 (15)
• Due in Week 11, around 31st March

5
Tutorial Expectations

• Prepare Tutorial
• Be Punctual
• Be friendly and Interact!
• Handphones in silent mode

6
Ice-breaker

• Pair up and introduce the person next to you
• Name, Year, Stream
• Why did you choose this module?

7
Tutorial Questions

• Becoming a security professional begins with
  learning how to secure your own computer. This
  tutorial is a simple exercise on the basics of
  computer security.
• View the presentations listed below and answer
  the questions that follow.
• IT Security Awareness
• Dangerous Net What You Do Not Know Can Hurt You!

8
Tutorial Questions

• What are the different forms of attacks presented
  in the IT Security Awareness presentation?
• Explain what the attacks are
• Which threat categories do these attacks belong
  to?

9
Attacks

• Virus attack
• Spam mail
• Port scanning
• System compromise
• Website defacement

10
Attacks Threat categories

• Virus attack
• deliberate software attacks, theft, deliberate
  acts of espionage or trespass
• Spam mail
• deliberate software attacks
• Port scanning
• deliberate acts of espionage or trespass
• System compromise
• deliberate acts of espionage or trespass,
  information extortion, theft
• Website defacement
• deliberate acts of espionage or trespass,
  deliberate acts of sabotage or vandalism

11

• 2) One of the tips presented in the IT Security
  Awareness presentation is to back up important
  files. Which threat categories does this tip
  address?
• Acts of human error of failure
• Deliberate acts of sabotage or vandalism
• Deliberate acts of theft
• Deliberate software attacks
• Forces of nature
• Technical hardware failure
• Technical software failure

12

• 3) The Dangerous Net video introduced the term
  personal firewall. What is a personal firewall?
  What are some benefits of using a personal
  firewall?

13

• 4) For each of the two presentations, who do you
  think is the target audience? Do you think the
  presentation is effective? Discuss.
• IT security awareness
• Dangerous net

14
Questions?
Elizabeth Koh diskre_at_nus.edu.sg 6 516
2829 SOC1-04-32 (by appt) Slides available after
Weds tutorial at http//www.comp.nus.edu.sg/ekoh
/teaching.htm