Information Security 101 Richard Davis, Rob Laltrello

What is Information Security? Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification or destruction. Why should I care? State and Federal Laws Georgia Highlands College Policy Protecting the college’s image Clean-up costs (both in time and money) Team ghc: working to win

Team ghc: working to win Some Common Terms Phishing ... is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, accounts numbers or passwords by posing as legitimate websites or entities requesting this information. Shoulder Surfing ... is the process of obtaining security credentials or other data as it is being entered by watching or recording the physical entry of the data either behind, next-to or in view of the victim. Spyware ... is hidden software that obtains data, or other information from a persons computer without notification or without the user’s consent. Malware ... is software that is designed to infiltrate and destroy or damage either data or other components of a computer system. Social Engineering ... is the process of getting someone to divulge personal or secret information through use of lies, misguided trust, apparent authority or other forms of deception. Team ghc: working to win

Team ghc: working to win Online Banking Always keep your credentials to yourself. Ensure you login only by visiting your bank’s website. Email is not a method used by banks to request personal info. Avoid using publicly available computers for your online banking. Trust your instincts. If something looks wrong it probably is. Always run and keep your anti-x software up to date. Team ghc: working to win

Team ghc: working to win Social Media Keep your statuses simple and never divulge your physical location. Monitor who can see your social networking information. Choose strong passwords to prevent someone accessing your social networking account. Avoid divulging highly personal information such as your address – even in configuration or informational pages. If you click on a link, make sure the website address that opens is the same as the link you clicked on. Always remain anonymous when entering open or “free-for-all” chat rooms and similar gatherings. Team ghc: working to win

Passwords / Passphrases Information about you should never be in your password. If your password can be looked-up in a dictionary, it is too weak. Don’t write passwords down. Change passwords on a regular basis. No website/bank/store will send you email asking you to reply with your password or username. Do not reply to such requests. Team ghc: working to win

Passwords / Passphrases Continued … Team ghc: working to win

Team ghc: working to win Email Replying to spam or junk-mail only serves to inform the sender you are reading it and that the account is being checked. Avoid sending confidential files, passwords, credit-card numbers or ANY other confidential data in email. Be cautious when opening links from email messages. Make sure the link address is what actually opens in the browser. Ensure all emails are scanned for viruses and other possible malware, phishing or spyware threats. When you use reply-all, make sure everyone on the recipient list needs to know what you have to say. Team ghc: working to win

Team ghc: working to win Email Continued … Connections to public and/or public-service Wi-Fi or other networks should be treated as non-secure. Ensure you have a firewall, and other protection software running. Shoulder Surfing is when someone watches you type your password or credentials on your laptop from behind, to the side or with zoom lenses. Always take care when entering this information in a public area. Do not leave your laptop unattended. Apart from theft you may find key loggers or other spyware software very quickly installed. Keep removable storage, memory cards, memory sticks and other small data storage devices safe. Team ghc: working to win

Team ghc: working to win Mobile Use Connections to public and/or public-service Wi-Fi or other networks should be treated as non-secure. Ensure you have a firewall and other protection software running. Email messages urging you take action with lots of warnings, time-limits and grammar or spelling mistakes should be treated as possible threats. Team ghc: working to win

Questions / Discussion Team ghc: working to win