Post on 08-Apr-2018
transcript
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 1/29
ABC of Digital Security
Marek Suczyk
April 13, 2011
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 2/29
Cyberworld
2
Source: www.sxc.hu
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 3/29
Cyberworld
United States
» 239,2 mln Internet users (77,3% of the American population)
90%
3
0%
10%20%
30%
40%
50%
60%
70%
2000 2005 2007 2010
Source: http://www.internetworldstats.com; July 1, 2010
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 4/29
Cyberworld
Poland
» 22,5 mln Internet users (58,4% of the Polish population)
70%
4
0%10%
20%
30%
40%
50%
60%
2000 2005 2007 2010
Source: http://www.internetworldstats.com; July 1, 2010
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 5/29
So, what? What does it mean for me?
5
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 6/29
Two worlds
6
Source: www.sxc.hu
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 7/29
Am I secure?
Your system is as strong as its weakest link
7
„I didn’t break systems, I broke people.”
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 8/29
Internet threats
8
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 9/29
1. Malicious software (malware)
Infectious malware
» Computer viruses» Computer warms
Concealment
» Trojan horses
» Backdoors
For profits
» Spyware
» Keystroke logger
» Dialer, etc., etc...
9
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 10/29
Hackers or criminals?
90’s
» Hacking for fun, entertainment and recognition» Internet hooligans
Today
» Well organized and managed groups
» Often politycally motivated
» Earning huge amounts of money
10
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 11/29
2. Phishing
11
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 12/29
and fake landing page
Typosquating
» Original page: www.millennium-online.pl
» Fake landing page could be:
– www.milennium-online.pl (one ‘l’) – wwwmillennium-online.pl (w/o dot)
– www.millennium-0nline.pl (zero instead of ‘o’)
– Etc.
12
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 13/29
3. Naivness
259 723 visits in 6 months
409 „victims”
...with an investment of 17 Euro
13
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 14/29
4. Virtual friends
Do you know who on the other side is...?
14
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 15/29
5. Social networking
15
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 16/29
Golden rules
Use recent updates of your OS and security software
Do NOT turn off your self-preservation instinct
Behave like in your real life
,
Have a limited trust for a „virtual friend”
Remember that you are not anonymous on the Internet
ENJOY the Internet but be aware of what can happen
16
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 17/29
Digital format threats
17
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 18/29
Methods of physical data transport
18
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 19/29
Electronic cards
19
Source: www.sxc.hu
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 20/29
How to make a counterfait card?
20
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 21/29
Or buy it?
American credit card
» with CVV $2.11» w/o CVV $0.53
Non-american cards» with CVV $2.64
» w/o CVV $1.06
21
Source: CERT report 2010
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 22/29
Golden rules
Protect your digital data carriers
Use PINs and passwords where possible
Protect your PINs and passwords well
22
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 23/29
End of the life-cycle of your computer
23
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 24/29
Kroll Ontrack experiment
Purchase of 100 used hard drives on the Internet
Data Recovery
Found:
» 118 documents with confidentialit clause
» 18 364 personal data records
» 3 complete marketing strategies
» 12 company budgets
» 687 various business contracts
24
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 25/29
Do you use a shredder?
25
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 26/29
Do you really delete your computer data?
„Delete” does NOT erase your data
System Format does NOT erase your data
Reinstallation of your Operating System does NOTerase your data
Hammer does NOTdelete you data...
26
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 27/29
Golden rules
Use professional software to delete your sensitive data
Use a degausser to destroy your hard driveseffectively
27
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 28/29
Questions?
28
8/7/2019 OSAC/AmCham Country Council Meeting in Kraków 2011. ABC of Digital Security
http://slidepdf.com/reader/full/osacamcham-country-council-meeting-in-krakow-2011-abc-of-digital-security 29/29
THANK YOU
Marek SuczykManaging Director at Kroll Ontrack Poland
29