1. Computer System and Internet Misuse at the Work Place By: Kris Dimon

2. Why Should We Be Concerned? 71% of companies that have been attacked report the attack came from inside. This may be intentional or unintentional Many times is pure ignorance on the users side

3. How does it happen? Email-47 percent of people send 5 personal emails per day and 28% open up to 20 personal emails per day at work. Spyware and Trojans enter from online gaming and internet browsing. Its easier to hack from inside the company than outside.

4. Scary Numbers A company may be liable for up to 150k $ for each piece of pirated material on its system. 70% of porn is downloaded between 9-5 and 1 in 5 employees view porn at work. 45% of exe files on kazaa contain malicious code. 27% of fortune 500 companies have battled sexual harassment claims that involve employee misuse.

5. What Can be Done? Content and Email Filtering –Can work or be more counter productive than helpful. Network monitoring –Many times too much data to identify misuse –Does allow to see who is using the most resources

6. What Can Be Done? Keyloggers –Much like monitoring network packets to many small bits of data to mean much Logging programs –Can work only on the pc or be monitored from a remote pc

7. What Can Be Done? Realtime monitoring software –Can be installed remotely –Allows for true knowledge of what is going on on the PC –Does how ever aggravate employees

8. What Can Be Done? Education –Most do not know the effects of their actions Email Downloading wonder programs and screen savers P2P file sharing –Also most don’t realize they are violating company policies

9. What Can Be Done? Clear policies and procedures –Define what can and cant be done –Define consequences

10. Conclusion In Conclusion we cant take for granted the inside the network security aspect of things. –Can be very costly to a business if ignored –Need to use a combination of monitoring and education to be most effective. “Computer users are IT security incidents waiting to happen”

11. References http://www.gigalaw.com/articles/2001- all/handelsmann-2001-12-all.htmlhttp://www.gigalaw.com/articles/2001- all/handelsmann-2001-12-all.html http://www.cccure.org/Documents/misuse/I nformation_Systems_Misuse.pdf http://www.trainingreference.co.uk/news/it s040109.htmhttp://www.trainingreference.co.uk/news/it s040109.htm http://www.expressitpeople.com/20040308 /cover.shtml

12. Questions!