240 likes | 372 Views
Identity Theft and Safe Computing. Keeping yourself You by good habits and good technology. The Threats. Malware Adware Spyware Worms Viruses Trojan Horses Bots/Zombies. The Threats. Phishing and Pharming. Safe Computing. Safe Surfing (safe web, email, IM) Safe Passwords
E N D
Identity TheftandSafe Computing Keeping yourself You by good habits and good technology
The Threats • Malware • Adware • Spyware • Worms • Viruses • Trojan Horses • Bots/Zombies
The Threats • Phishing and Pharming
Safe Computing • Safe Surfing (safe web, email, IM) • Safe Passwords • Safe Systems (making your computer help you)
Safe Surfing • Windows popup or web popup? • Careful where you click • URL Spoofing • Vulnerabilities (IE/Firefox spoofs) • Others
Safe Surfing • URL Spoofing examples: • http://www.ebay.com-SECURITYCHECKw8grHGA889yK@evilhackersRus.com • Mouseovers • HEX Encoding • Decimal IP address • Email and web
Safe Surfing • Under Lock and Key • SSL • Terminology • Certificate • Certificate Authority • How to Check it
Safe Surfing • Safe Email • Unexpected attachments • Guilty until proven innocent • No real security • From/Reply-to arbitrary • Encryption / Authentication
Safe Surfing • Email Spoofing • Embedded forms • URL spoofing in email • ‘Account Updates’ • ‘Security Notices’
Safe Surfing • Safe IM • Similar to email • Same defenses
Safe Surfing • Summary • Email is untrustworthy • Watch the URLs • Common sense
Safe Passwords • New Campus Policies • http://www.it.ufl.edu/policies/passwords.html • Why do we have this policy? • Single point of failure • Tradeoffs
Safe Passwords • Making good passwords • Phrases • Lyrics, poems, quotes • Obfuscate • Storing your password • Protect like a credit card • Password vault • Multi-factor protection
Safe Systems • Check with your local support staff • Anti-virus • McAfee is FREE! • http://www.software.ufl.edu/mcafee • Necessary, but not enough to be safe
Safe Systems • Anti-spyware • Ad-aware • http://www.lavasoftusa.com/software/adaware/ • Spybot Search and Destroy • http://www.safer-networking.org/en/index.html • Still not enough!
Safe Systems • Automatic Updates • http://windowsupdate.microsoft.com/ • http://net-services.ufl.edu/security/public/patches.shtml • Most important, and very nearly enough
Safe Systems • Alternate Browsers • IE vulnerabilities • Opera • http://www.opera.com/ • Firefox (mozilla) • http://www.mozilla.org/products/firefox/
Summary • Secure your machine • Choose good passwords and protect them • Be careful how you surf • At Home / At Work
Questions? Jordan Wiens Security Team http://infosec.ufl.edu/ 352-392-2061 ufirt@ufl.edu