1. The OWASP Foundation http://www.owasp.org Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. #GET RooT IUT 2012 Myths in Information Security

2. 2 Who Am I ? Shahee Mirza # Certified Ethical Hacker (C|EH). # MCSE, RHCE and CCNA # Computer and Network Security Consultant. # Teacher/Instructor/Lecturer. # Engineer. http://www.shaheemirza.com FB: shaheemirzaTwitter: @shaheemirza

3. 3 MYTH #1 Organizations are more secure now than they were a year ago.

4. 4 MYTH #2 I Will Know When I Am Infected.

5. 5 MYTH #3 External consultants know more about information security than in- house personnel do.

6. 6 MYTH #4 Information security must be managed as a separate business unit to be effective.

7. 7 MYTH #5 Complex, frequently changed passwords will make my enterprise secure.

8. 8 MYTH #6 The padlock icon present during an SSL session means my data is safe.

9. 9 MYTH #7 Migrating from Internet Explorer to other browser will make my enterprise secure.

10. 10 MYTH #8 Stay Safe by Not Visiting Risky Sites.

11. 11 MYTH #9 Wireless networks aren't secure.

12. 12 MYTH #10 Dumping Windows for Linux will increase security.

13. THANK YOU !!