1. Safe Computing Dave Carter, CISSP Michigan State University College of Agriculture and Natural Resources

2. Safe Computing – Scary!

3. Agenda Exploits What we can do Tools already available Other tools you can use Protect your home computers Questions

4. Exploits Dumpster Diving. They rummage through trash looking for bills or other paper with your personal information on it. Skimming. They steal credit/debit card numbers by using a special storage device when processing your card. Phishing. They pretend to be financial institutions or companies and send spam or pop-up messages to get you to reveal your personal information. Changing Your Address. They divert your billing statements to another location by completing a change of address form. Old-Fashioned Stealing. They steal wallets and purses; mail, including bank and credit card statements; pre-approved credit offers; and new checks or tax information. They steal personnel records, or bribe employees who have access. Pretexting. They use false pretenses to obtain your personal information from financial institutions, telephone companies, and other sources. Malware/Virus. Social Engineering.

5. From: SANTOS... Add to Contacts To: Exploits - Phishing

6. From: SANTOS... Add to Contacts To: Exploits - Phishing

7. From: SANTOS... Add to Contacts To: Exploits – Malware/Virus’

8. How do we Protect the Data? Use Desktop Firewalls Learn how to use them effectively Use up to date Antivirus/AntiMalware software Keep it up to date!!!!! (please) Renew your license yearly and upgrade when it is available. Destroy hard drives when they are being replaced or computers are being retired Or use a D.O.D. certified data wiper

9. How do we Protect the Data? Hard drive Encryption for Laptops (FIPS Certified) Store data in properly protected and secured locations (Server) Server should be maintained by qualified Technician. Best Practices should be used in the deployment Use shredders for paper documents and disposable Media (CD’s, DVD’s, etc.)

10. How do we Protect the Data? Consider Encrypting Email Use file encryption when sending sensitive data over a network (internet) - This requires a password to decrypt the file so it can be opened Keep your Operating System and Software packages patched

11. ANR Safeguards WSUS Server – Update services for Microsoft Software ForeFront Protection Suite – Anti-Virus & Anti- Malware Campus VPN access to File Servers Servers set up using Best Practice Standards Investigating standardized hard drive encryption

12. Home Computers Free Anti-Virus Software http://free.avg.com/us-en/homepage http://www.microsoft.com/security_essentials/ Drive Encryption http://www.safenet- inc.com/Products/Data_Protection/Disk_and_File_Encrypt ion/ProtectDrive.aspx http://www.safenet- inc.com/Products/Data_Protection/Disk_and_File_Encrypt ion/ProtectDrive.aspx Free Firewalls http://www.zonealarm.com Free Anti-Malware http://www.malwarebytes.org/

13. Questions? http://support.anr.msu.edu Email – support@anr.msu.edusupport@anr.msu.edu Phone – 517-355-3776