US Copyright Law & Protecting Your Privacy On-Line Marty Manjak Information Security Officer

US Copyright Law Signed by Pres. Washington in 1790 Protects authors of “maps, charts, and books” Author possesses sole authority to print, publish, and sell Violators fined $.50 for each unauthorized copy

Intellectual Property Roberto (Law) has an idea Roberto commits his idea to “tangible form” (paper, electronic) Roberto’s idea is now copyrighted No one else may copy, distribute, or sell his idea without his permission

Intellectual Property (IP) Copyright protects IP Examples: choreography, sculpture, films, books, screenplays, essays, scripts, diagrams, paintings, drawings, research, designs, maps, architectural drawings, songs, poems, non-fiction….. All are protected against theft…in any format

Digital Millennium Copyrigh Act-1998 DMCA: written to protect IP from digital copying and distribution. If university receives a DMCA complaint: They must remove the copyrighted material from their network Or, be liable for financial penalties

File Sharing and Peer-to-Peer File sharing software (Limeware and BitTorrent) can violate copyright law Sharing protected works without permission Worse-They can cost you thousands of dollars! Up to $250,000 per item! Recent awards: $54,000-$67,5000

Be Careful with file sharing! Don’t embarrass your host school Don’t embarrass yourself Don’t become liable for financial penalties

The Copyright Test If you don’t have permission, you can’t share it

On-line Protection Cyber crime is big business You will be a target You need to be pro-active in protecting your privacy and your computer

The Torpig Botnet Researchers at UC Santa Barbara gained control of botnet for 10 days 180,000 machines were infected 70Gbs (7 x 10 10) of personal data collected 8,310 account passwords 410 financial institutions 1,660 credit card numbers

Scareware Fake antivirus products earn promoters $100 million (for starters) d/Notices/Data/2009/45/2009_13445.asp d/Notices/Data/2009/45/2009_13445.asp 05/28/swede-u-s-citizen-accused-of- running-scareware-scam/ 05/28/swede-u-s-citizen-accused-of- running-scareware-scam

How were machines infected? Drive-by downloads from legitimate web sites. Good web sites have been compromised and seeded with malicious code that attacks your computer Malware will attack your browser and other software (Adobe products [Flash, Reader], iTunes, Quicktime, Java)

Protection #1 Don’t use the web with administrator privileges Use less privileged “User” accounts This is standard with Vista and Windows 7 machines

Protection #2 Keep EVERYTHING patched secunia.com/vulnerability_scanning/online/ Secunia will check for missing patches and vulnerable software Install the Personal version: personal/

Protection #3 Use anti-malware products Anti-virus Anti-spyware Spyware Blaster Spybot Search and Destroy Windows Defender Keep them up-to-date!

Protection #4 Use long passphrases (> 14 characters), even on Facebook! J’aimedespommesfr!t3S = Use different passphrases for different services Use KeePass2 to remember your passphrases

Protection #2 Keep EVERYTHING patched secunia.com/vulnerability_scanning/online/ Secunia will check for missing patches and vulnerable software Install the Personal version: personal/

Protection #5 Use a firewall Most operating systems (Windows, Mac OS X) come with built in firewalls Don’t turn them off!

Protection #6 Beware of social engineering Most malware is installed by the victim Fake video codecs Poison links in messages Phishing: “Send us your password now!” Fraudulent messages from “friends” Fake anti-virus warnings Criminals will pose as friends, victims, and authorities

Protection: Bonus Points Use the Firefox browser with No Script Forces you to decide what content you will allow Will break a lot of web pages  But will also stop 99% of web attacks US/firefox/addon/722/

More Firefox Bonus Points Browser Plug-in: AdBlock Plus US/firefox/addon/1865/ US/firefox/addon/1865/ Browser Plug-in: Better Privacy Deletes persistent cookies US/firefox/addon/6623/

Review 1. Don’t run as admin 2. Keep EVERYTHING patched 3. Use Anti-virus software 4. Different site; Different passphrase 5. Firewalls: don’t disable 6. Be wary of social engineering

Thank you! And good luck!!