1. October 28, 2015 Cyber Security Awareness Update

2. 2 NATIONAL CYBER SECURITY AWARENESS MONTH Stop. Think. Connect

3. National Cyber Security Awareness Month –Every October Sponsors –Department of Homeland Security –National Cyber Security Alliance –Multi-State Information Sharing and Analysis Center Goals –Engage and educate the public and private sector –Raise awareness about cyber security –Increase resiliency of the nation in the event of a cyber incident 3

4. Common Terminology Malware = malicious software –Virus, trojan, worm, spyware, ransomware –“zero day” = no known patch (fix) for the malware/attack Security Incident –Event that compromises the confidentiality, integrity, or availability of an information asset Data Breach –Incident that resulted in confirmed disclosure to an unauthorized party 4

5. 5 DISTRICT CYBER SECURITY TRAINING You are the Target

6. WHY HACKING EXISTS TypeMotives Cyber Criminal (monetary) ID theft, credit card info, extortion (ransomware, DDoS), click-jacking, Point-of-Sales, ATM skimmers Hacktivists Political, ideological, religious, social reasons (Ashley Madison, WikiLeaks, Eric Snowden) Nation State National offense/defense, espionage, sabotage, intellectual property, counterintelligence Cyberwar/Cyber Terrorism Large-scale disruption/destruction of critical systems (Smart Grid, nuclear, water/wastewater, banking, military) 6

7. CYBER CRIME EXAMPLES 7

8. 2015 DATA BREACH INVESTIGATION REPORT 8 * Verizon 2015 Data Breach Investigations Report

9. ATTACKS ON SCADA SYSTEMS Springfield, Illinois –Network breach allowed attackers remote access –Hackers controlled a water pump and burned it out Attack lasted 2-3 months before an operator noticed a “glitch” –Stole credentials Televent (maker of SCADA software) –Network breach allowed malware install –Customer files affected –Project information stolen (OASyS – remote admin tool) –Televent manages 60% if total hydrocarbon movements in North American and Latin American pipelines Australian Wastewater Plant (Maroochy Water Services) –SCADA system attacked for 3 months with a laptop, proprietary radio, and homemade cable –140 sewage pumping stations compromised –Sewage spilled into waterways and canals 9

10. 10 EVWD Security Activity Malware and Web Filter Statistics

11. RECENT MALWARE ACTIVITY 11

12. RECENT MALWARE ACTIVITY 12

13. WEB FILTER 13

14. SUMMARY OF OTHER TOPICS –Email is our most common vector for malware Social Engineering and Phishing Emails –Mobile Devices Privacy, rogue apps, security practices –Tips and Resources Managing Passwords Securing Your Home Network 14

15. Questions