Today's technology and you: Safe computing in a digital world - Eric Vanderburg - JurInnov

Today’s Technology and YouSafe computing in a digital world

May 17, 2013

Eric A. Vanderburg, MBA, CISSP Director, Cyber Security and Information Systems

© 2013 Property of JurInnov Ltd. All Rights Reserved© 2013 Property of JurInnov Ltd. All Rights Reserved

Who Are We?

JurInnov works with organizations that want to more effectively manage matters involving “Electronically Stored Information” (ESI). – Computer Forensics– Cyber Security– Electronic Discovery– Document and Case Management

© 2013 Property of JurInnov Ltd. All Rights Reserved4

What are Cybercriminals After?

Access to:– Personal information– Patent applications– Financial information– M&A documents– Intellectual property– Client correspondence

Business disruption of:– Calendar system– Billing system– Website

© 2013 Property of JurInnov Ltd. All Rights Reserved

90/10 Rule

Process

Technology

People

10%

90%


Starts with you• Exercise safe computing practices• Report suspicious activity• Notify IT/information security of potential

security incidents• Escort guests through facilities• Challenge guests

SEC-U-R-IT-Y


Passwords• Passwords are the keys to many things: your bank

account, your computer, your email, a server on a network.

• Your password gives others the power to:– Access your account (financial, email, etc)– Modify or destroy your files– Send malicious e-mail such as spam or threats

in your name– Commit fraud while masquerading as you– Use your computer to distribute illegally files

such as movies, songs or worse (child pornography)


Passwords and Accounts• Creating a secure password• Passphrase: Here24octopihad5legslike*fish• Secondary logon• Limit administrative accounts• Lock the computer• Autolock• Change default passwords• Change passwords that you suspect may have

been compromised• Choose recovery hints and challenges wisely


Passwords• Do not store them in obvious places• Do not let anyone observe you entering it• Do not share your password• Do not reveal a password

– on questionnaires or security forms– to anyone over the phone, e-mail, or IM

• Do not use same password for different servers/services

• Do not use written examples of passwords


Spotting password theft• Email

– Large number of rejected messages– Missing emails– Messages in sent mail that you didn’t send

• Social media– Posts you did not make– Many unknown contacts


When is data really gone?• Deleting a file does not actually remove it

from your computer• Files persist until they are overwritten• Full or partial files may be recoverable• Sensitive data should be wiped• Drives should be wiped before being

reused


Browser security• Cookies• Block pop-ups• HTTP vs. HTTPS• Certificates• Fake sites

– Swapped Characters yuotube.com– Replaced Characters wschovia.com– Inserted Characters Gooogle.com– Deleted Character Facbook.com– Missing dot wwwmicrosoft.com


Working remotely

• Free Wi-Fi• Encrypt and password protect mobile

devices• VPN• Enable computer firewall• Disable shares or use a homegroup

(if not on a domain)


Public computers• Limit what you do• Erase your tracks (clear history)

– IE (Tools, Internet Options, General tab, Delete Browsing History)

– Firefox (Tools, Options, Privacy tab, clear private data)– Use private browsing window

• Do not save files locally• Don’t save passwords• Watch for over the shoulder• Delete temporary files• Exit programs and close browser when you leave


Social media• Privacy settings

– Default– Per-post

• Who should be your friend?• Geolocation• Watch out for social scams

– Mugged on vacation– Free stuff– Spammed content and links


Social engineering• Social engineering preys on qualities of human

nature:

the desire to be helpful the tendency to trust people the fear of getting into trouble


Malware• Viruses• Trojans• Keyloggers• Bots• Spyware• Adware


Why malware?• Revenge• Sense of power• To prove a point• Bragging rights• Profit• To attack other systems• Because they can


Spyware• Corrupts/alters the current

software• Tracks browsing habits, sites• Interferes with system settings • (registry, startup)• Steals passwords, information

etc.


Spyware• How does it get there?

– Email– Instant Messaging– Internet Browsing– P2P Software

• Don’t take downloads from strangers– What else are you getting with the “free”

stuff– Be cautious with bundled installers


Spyware• Identifying it

– Sluggish computer– Annoying pop-ups– Changes to browser home pages– Unwanted toolbars– Unknown programs appear


Preventing malware• Safe browsing habits• Up-to-date antivirus• Antimalware software• Computer firewall• Windows updates


Virus Hoax


Phishing• False Sense Of Urgency - Threatens to

"close/suspend your account”, charge a fee or talks about suspicious logon attempts, etc.

• Suspicious-Looking Links - Links containing all or part of a real company's name asking you to submit personal information.

• Not personalized – does not address you by name or include a masked version of the account number.

• Misspelled or Poorly Written – Helps fraudulent emails avoid spam filters


Phishing Examples


Phishing examples


Phishing examples


Phishing examples


Phishing• Treat all email with suspicion• Never use a link in an email to get to any

web page• Never send personal or financial

information to any one via email • Never give personal or financial

information solicited via email


Spatial securityWHAT’S WRONG WITH THIS PICTURE?


Spatial security• Computers or whiteboard placement• Facing away from windows or public areas• Monitor privacy screen• One way window film

Questions

© 2013 Property of JurInnov Ltd. All Rights Reserved

Blogs & Podcasts

• 50,000 Medicaid providers’ data breached

• Data breach threats of 2013

• Ignorance of the breach is no excuse

• Over processing of ESI and the Microsoft letter

• Predictive coding gets a glossary

• LegalTech 2013


For assistance or additional information

• Phone: 216-664-1100• Web: www.jurinnov.com• Email: [email protected]

JurInnov Ltd.The Idea Center

1375 Euclid Avenue, Suite 400Cleveland, Ohio 44115

Entertainment & Humor

Today's technology and you: Safe computing in a digital world - Eric Vanderburg - JurInnov