Cyber Security

1
Cyber Security

• Preserving your privacy
• Safeguarding your data
• Presented 1/21/05
• AGNR CIT Professional Development

2
Hardware

• Router-Firewalls
• Wireless Networks
• Spyware
• Pentium III
• Keyloggers

3
Software

• Virus scanners
• Passive/Active scanning
• http//www.helpdesk.umd.edu/virus/software.shtml

4
More Software

• Personal Firewalls
• Monitors traffic
• Windows XP Internet Connection Firewall warning

5
Still More Software

• Personal Proxy Software
• Controls cookies
• Filters advertising
• Blocks pop-ups and pop-unders
• Hides previous page
• Removes web bugs

6
A Little More Software

• Spyware protection
• Limiting access
• By time
• By content
• Windows Update
• Hidden embedded data
• msdn.microsoft.com/library/default.asp?url/librar
  y/en-us/dnword2k2/html/odc_protectword.asp

7
Email

• Outlook or Outlook Express
• Turn off the preview pane
• Disable javascript (affects IE as well)
• Netscape Messenger
• Turn off view message
• Un-enable javascript for mail and newsgroups

8
More Email

• Read mail offline
• Encryption
• Consider using the bcc field to send messages to
  multiple recipients

9
Most Despised Email

• Spam
• Never reply to spam
• Use filters
• Use alternate email addresses for shopping,
  newsgroups
• Create email addresses that are hard to guess
• http//www.cauce.org/news/

10
Internet

• Browser Settings
• IE 5 or higher, AutoComplete feature
• Netscape, store passwords
• Web Site privacy policies
• Spoof email/telephone requests

11
Other Best Practices

• Use a BIOS password
• Back up your data
• Be suspicious of email attachments
• Use secure passwords
• Be aware of new threats
• Dont promulgate hoaxes

12
12 Safety Tips - 1

• General
• Turn off (or disconnect) the computer when you're
  not using it, especially if you have an "always
  on" Internet connection.

13
12 Safety Tips - 2

• Laptop security
• Keep your laptop with you at all times when not
  at home. Regularly purge unneeded data files
  from your laptop.
• PDAs
• People tend to store more personal data
  (including passwords and PINs) on PDAs than they
  do on laptops. Be smart!

14
12 Safety Tips - 3

• Backups
• Back up regularly. Back up to disk, tape or
  CD-ROM
• Store at least one set of backups off-site (a
  safe-deposit box is a good place) and at least
  one set on-site.
• Remember to destroy old backups. One way to
  destroy CDs is to microwave them on high for five
  seconds. You can also break them in half or run
  them through better shredders.

15
12 Safety Tips - 4

• Operating systems
• Consider Macintosh or Linux.
• In Windows, set up Automatic Update so that you
  automatically receive security patches
• Delete, rename, or move the files "command.com"
  and "cmd.exe."

16
12 Safety Tips - 5

• Applications
• Limit the number of applications on your machine.
  If you don't need it, don't install it. If you no
  longer need it, uninstall it.
• Regularly check for updates to the applications
  you use and install them.

17
12 Safety Tips - 6

• Browsing
• Limit your use of MS Internet Explorer.
• Limit use of cookies and applets to those few
  sites that provide services you need. Set your
  browser to regularly delete cookies.
• Don't assume a Web site is what it claims to be,
  unless you've typed in the URL yourself.
• Make sure the address bar shows the exact
  address, not a near-miss.

18
12 Safety Tips - 7

• Web sites
• Secure Sockets Layer (SSL) encryption does not
  provide any assurance that the vendor is
  trustworthy or that its database of customer
  information is secure.
• Limit the financial and personal data you send to
  Web sites. If you don't want to give out personal
  information, lie.
• Opt out of marketing notices.
• If the Web site gives you the option of not
  storing your information for later use, take it.
• Use a credit card for online purchases, not a
  debit card.

19
12 Safety Tips - 8

• Passwords
• For high-security Web sites such as banks, create
  long random passwords and write them down. Guard
  them as you would your cash.
• Never reuse a password for something you care
  about. (It's fine to have a single password for
  low-security sites, such as for newspaper archive
  access.)
• Never type a password you care about, such as for
  a bank account, into a non-SSL encrypted page.

20
12 Safety Tips - 9

• E-mail
• Turn off HTML e-mail.
• Don't automatically assume that any e-mail is
  from the "From" address.
• Delete spam without reading it. Don't open
  messages with file attachments, unless you know
  what they contain immediately delete them.
• Never click links in e-mail unless you're sure
  about the e-mail copy and paste the link into
  your browser instead.
• If you use Microsoft Office, enable macro virus
  protection in Office 2000, turn the security
  level to "high" and don't trust any received
  files unless you have to.
• If you're using Windows, turn off the "hide file
  extensions for known file types" option it lets
  Trojan horses masquerade as other types of files.
  
• Uninstall the Windows Scripting Host, or, if you
  can get along without it, change your file
  associations so that script files aren't
  automatically sent to the Scripting Host if you
  double-click them.

21
12 Safety Tips - 10

• Antivirus and anti-spyware software
• Use it--either a combined program or two
  separate programs. Download and install the
  updates, at least weekly and whenever you read
  about a new virus in the news. Some antivirus
  products automatically check for updates. Enable
  that feature and set it to "daily."

22
12 Safety Tips - 11

• Firewall
• Spend 50 for a Network Address Translator
  firewall device it's likely to be good enough in
  default mode. On your laptop, use personal
  firewall software. If you can, hide your IP
  address.

23
12 Safety Tips - 12

• Encryption
• Install an e-mail and file encryptor (like PGP).
  Encrypting all your e-mail or your entire hard
  drive is unrealistic, but some mail is too
  sensitive to send in the clear. Similarly, some
  files on your hard drive are too sensitive to
  leave unencrypted.

24
Finally