Protecting Our Digital Devices
Uploaded by
Savannah Simone PetrachenkoProtecting Our Digital Devices
Uploaded by
Savannah Simone PetrachenkoProtecting Our Digital Devices
Computer Threats
Cybercrimes are criminal acts conducted by cybercriminals through the use of computers Computer users need to protect themselves from becoming victims of cybercriminals
Types of Cybercrime
Fraud-related (58 percent of cybercrime in 2008) o Auction fraud o Non-delivery of ordered items o Credits and debit card fraud Non-fraud-related o Computer intrusions o Unsolicited email o Child pornography
Computer Threats: Viruses
Virus: A program that attaches itself to another program and spreads itself to other computers Viruses are hidden within the code of a host program
What Viruses Do
Replicate themselves o Slow down networks Secondary objectives o Display annoying messages o Delete files on the hard drive o Change computer settings
How Does a Computer Catch a Virus?
Viruses copy themselves and infect a file on your computer Spread by o Sharing disks or flash drives o Opening an email attachment o Downloading infected audio or video files
Types of Viruses
Boot-Sector Viruses
Replicate themselves in the boot sector of the hard drive
Logic Bombs
Activate when certain conditions are met
Time Bombs
Triggered by the passage of time or on a certain date
Worms
Travel between systems through networks
Script Viruses
Hidden on web pages as mini-programs
Macro Viruses
Attached to documents
Email Viruses
Use email address books to distribute themselves
Encryption Viruses
Compress files using a complex encryption key
Virus Classifications
Polymorphic Viruses
Periodically rewrite themselves to avoid detection
Multipartite Viruses
Infect multiple file types
Stealth Viruses
Erase their code from the hard drive and reside in the active memory
Antivirus Software
Programs designed to detect viruses o Scan files looking for virus signatures (unique code) o Provide options for deleting or fixing infected files o Inoculate files against further infection Needs to be updated frequently
Dealing With an Infected Computer
Boot computer with antivirus DVD/CD in DVD drive Run directly from DVD/CD Allow software to delete or quarantine infected files Research viruses found to ensure further manual steps are not needed
Prevent Instant Messaging Viruses
Allow contact from Buddy or Friends List users only Never automatically accept transfers of data Avoid using instant messaging programs on public computers o Make sure you clear browsing history and do not select remember me when entering passwords etc.
Other Ways to Protect Your System
Keep your antivirus and operating system (OS) software up to date Load security patches as soon as they are available Enable automatic updates
Hackers
Anyone who unlawfully accesses a computer system Types of hackers o White hat o Black hat o Script kiddies
What Hackers Steal
Hackers try to steal data stored on hard drives: o Credit card numbers o Bank account numbers Also can steal information through packet sniffing o Wireless networks vulnerable, especially public Use information to commit identity theft
How Computers are Attacked
Trojan horse Backdoor program o Zombies Denial of service attacks (DoS) Distributed denial of service attacked (DDoS)
How Hackers Gain Access
Direct access o Hacking software Indirect access o Internet connection o Logical ports o Prevention-Website Captcha o Protects against bots
Firewalls
Software programs or hardware designed to close logical ports to invaders o A software firewall is built into Windows 7 o Other software firewalls are available from vendors o Network routers can contain a hardware firewall Firewalls are critical if you have an always-on broadband connection Test your computers vulnerability
Packet Filtering
Look at incoming data packets and refuse them under certain circumstances
Logical Port Blocking
E.g. FTP (port 21) is common access method for hackers. Firewall instructed to ignore packets coming to port 21
Change IP Often
Dynamic host configuration provider (DHCP) pool or IP addresses Easier for hacker to find you if your IP address is constant
Network Address Translation (internal IPs behind firewall) NAT capable router
Bluetooth Attacks
Bluesnarfing
Exploits flaw in access software to steal information contained on the device
Bluebugging
Hacker takes control of the device
Carwhisperer
Designed to eavesdrop on conversations in your car when using a hands-free device Make your device invisible
Only accept transmission from your devices
Wireless Networks on the Road
Beware of o Evil twins o Free internet access in paid locations Protect yourself o Check with authorized personnel for official name of hot spot o Do not use free access from unknown sources
Passwords
Create a strong password o At least 14 characters, including numbers, symbols, and upper- and lowercase letters o Not a single word or a word from a dictionary o Not easily associated with you (birthday, name of pet, nickname) o Use different passwords for different sites o Do not tell anyone or write down password o Change password regularly (every month)
Password Managers
Remember all your different passwords Built into o Operating systems o Web browsers o Some security packages
Anonymous Web Surfing
Public computers o Shared computers risk subsequent users viewing your data
o Might already have viruses or hacking tools installed Portable privacy devices Linux OS on a flash drive
Biometric Authentication Devices
Read unique personal characteristics o Fingerprint o Iris patterns o Voice patterns o Face patterns
Malware
Software that has a malicious intent o Grayware (nondestructive) Adware Spyware o Viruses (destructive)
SPAM or SPIM
SPAM: Unwanted or junk email o To avoid spam Create free web-based email account for filling out online forms or making online purchases Use a spam filter Do not try to unsubscribe from spam emails Use an email forwarding service SPIM: Unsolicited instant messages
Cookies
A web site assigns an ID number to your computer, stored in a cookie file Each time you log in to the site, it notes the visit and keeps track of it in a database Provide information about browsing habits Identify user preferences Pose some privacy risks, but low security threat
Backing Up Your Data
Backup o A copy of a file that can be used to replace the original Types of files to back up o Program o Data Backup routine o Frequency o Changed files Software programs for easy backup o Schedule automatic backups o Can back up files, folders, or entire drives o Back up to USB device, CD, or DVD Entire system backup software o Takes an image of the entire system o Stores on a separate hard drive o In case of failure, a new drive is inserted Store backups offsite Online backups o Store backup files on internet servers o Fees for the service
Social Engineering
Uses social skills to generate human interaction to entice individuals to reveal sensitive information
o Bots o Sometime does not use a computer or face-to-face interaction o Pretexting
Phishing and Pharming
Phishing o Uses email to lure user to fake web sites o Tricks user into revealing private data Pharming o Malicious code changes web browsers ability to find web addresses
Hoaxes
An attempt to make someone believe something that is untrue o Target large audiences o Practical joke, agents of social changes, or time wasters o Mostly email
Protect Physical Assets
Environmental factors o Avoid Sudden movement Excessive heat or cold Dust Food and liquids o Use padded case for notebooks
Power Surges
Occur wen electrical current is supplied in excess of normal voltage (120 volts in the United States) Caused by o Old or faulty wiring o Downed power lines o Malfunctions at electric substations o Lightning strikes Use surge protectors
Deterring Theft
Alarms Locks and surrounds Software alerts
