Protect your PC virus, worm, Trojan horse, phishing, spam, botnet and zombies, spoofing, social engineering, identity theft, spyware, rootkits Click your mouse to advance slides

Social Engineering Also known as pretexting Feeds on human behavior How people interact Tells you that you are trustworthy Are you to willing to please Uses false pretense to get personal information Examples: Scammer comes to your office claiming to be a IT person. He wants to fix your computer and asks for personal information such as account names and passwords to access your account, all while he claims to need it to fix your computer. Scammer plays on sympathy, while pretending to be a new employee and forgot access codes. He will ask you so he won’t get into trouble for his forgetfulness and possibly lose his job. Scammer calls on the phone and pretends to be a boss and uses intimidation to get info from you.

Protect Yourself and Your Job Never feel obligated to pass along sensitive information Ask pertinent questions about the person making requests: Correct name and spelling Who is the person/company representing Employee number Ask for account number request is being made Ask if you can verify any information

Phishing It is using email to get you to click on links and making personal information available to scammers/hackers. Sends email to make you think you have a problem with your personal accounts Wants you to open email and click on links that take you to fake websites where your personal information is captured for them to access your accounts

Protect Your Personal Information Hover over email sender in the Inbox and view true address in the status bar Many of them will have country codes other than US (United States of America) Their only purpose is to get into your accounts Never respond/verify by email Always call o/website or go to the financial institution Report the phishing scam

Identity Theft acquires access to: Name Address Social Security number Account numbers Driver’s license Birthday steals portable storage: Laptop Flash drive Cell phone PDA Ipad

Protect Your Identity Learn how to set passwords Use Passwords that will not be easy for theft Use biometric security, fingerprint scan, if possible (newer devices)

What is… Spam Spyware Virus Trojan horse Worms Rootkits Buffer overflow Spoofing Botnets and zombies

Spam Unsolicited commercial email and schemes Prescriptions, insurance, adult sites, etc. Steal/acquire addresses from Websites, Internet mailing lists, newsgroups, etc.

Spyware Unsuspectingly collects computer user information without consent Software that runs along with a legitimate program Surveillance software that tracks keystrokes, screen capture, chat loggers, etc Used for spying: spouses, worried parents, government, private detectives Adware that tracks your surfing habits-this is not illegal Legitimate Adware will disclose nature of data collected Involves privacy issues; User has no control

Spyware on my computer? Windows desktop is very slow booting Computer is slower when browsing Internet Clicking on links gets unexpected results Nothing, different website, etc Home page changes, unable to reset it Web sites automatically added to bookmarks/favorites list

Virus (like human flu) Program or code loaded onto computer without permission and knowledge Attaches itself to code on your computer and replicates itself when a file is launched or executed Then attaches itself to other files and spreads throughout computer

Various Viruses… Boot sector-puts virus into the first section of hard disk so the virus is loaded into the memory when computer is booted up Program-infects executable program files: .exe, .com, .sys, etc Multipartite-uses multiple techniques such as boot sector and program at the same time Polymorphic-changes each time it is used, avoiding detection Macro-is inserted to a Microsoft Office document and emailed to the unsuspecting user Triggered by clicking, opening, booting

Trojan Horse Like the historic Trojan Horse, it appears to be legitimate software - enemy hiding inside Games, videos, screen saver, file sharing etc. When opened the destructive code is loosed onto the computer

Worms Takes advantage of holes in security in applications and operating systems Automatically replicates itself-needs no triggers by computer user Looks for network or Internet connection so it can move to another system

Rootkits It hides the tracks of intruders so antivirus software cannot detect them Can incorporate itself with other malicious code to take complete control of a system Usually do not replicate themselves

Buffer Overflow Too much data that is sent to the memory buffer that is causes it to go beyond its fixed boundary Results is overwriting data in adjacent memory locations Can result from vulnerabilities or flaws in software Causes service disruption and lost data Currently no way to check and stop the requests

Spoofing Program or person pretending to be something or someone they are not to send false information Data appears to be coming from somewhere other than its original place Makes modifications in addresses, IP headers or other source of information Often works with phishing

Botnets and their Zombies Bot - like a robot - remotely controlled by IM (Instant Messaging) or IRC (Internet Relay Chat) Performs automated tasks Botnet is a group of bots that run automatically Goal is to take over as many systems as possible Zombies - assembled botnets of individual compromised computer that are remotely controlled Look on the Internet for more hosts to infect Launch DDoS (distributed denial of service) attacks Can shut down a server