AMSC FM Training Symposium

1. Cyber Security AMSC FM Training Symposium Alex Roosma, 1st Lt, USAF 6 March 2014

2. Overview • Real-world cyber attacks • Hacker methodology • How to protect yourself and others • Resources • Questions

3. Real-World Examples • Recent High Profile Breaches: • Adobe user passwords • Target • US Dept of Energy • LivingSocial • Snowden Leaks • New York Times • AHMC Hospitals Breach

4. Hacker Motivations • Motivations for network attacks: • Money – Selling financial, personal or corporate information • Fame – Kevin Mitnick • Ideology – Edward Snowden, Anonymous

5. Attack Vectors • Social Engineering • Fraudulent Website • Phishing • Malicious Code • Insider Threat

6. Anatomy of an Attack

7. How to protect yourself and others • Be aware of attack vectors • Phishing • Social Engineering • Email Attachment Malware • Websites (just because you can get to a site at work doesn’t guarantee its safety) • Secure your password • Not guessable from your social media profile • Employ a password manager • Secure Personal Identifiable Information (PII) • Keep data at rest encrypted • Encrypt email messages or use AMRDEC SAFE: https://safe.amrdec.army.mil/safe/

8. Resources • http://www.staysafeonline.org/ • http://www.getnetwise.org/ • http://www.onguardonline.gov/ • http://www.ikeepsafe.org/

9. Questions ?