IT Security Awareness DayOctober 22, 2015

Protecting Your Social Media Identity

Prepared by: Nicholas Davis; Edited & Presented by: Thomas Callaci

Consider…Consider…

“Contrary to popular belief, all people have a digital ‘footprint’ that is very extensive and rather intrusive.” *

* (ISC)2 HealthCare Information Security and Privacy Practitioner (textbook) 2015

04/21/23 UNIVERSITY OF WISCONSIN 2

IntroductionIntroductionFacebook, Instagram, LinkedIn, Twitter, Snapchat, Digg, MeetUp, blogs--the number of social networking sites and tools is exploding. Social networking is the killer app of the Internet for everyone.

National Crime Prevention Council 3

HoweverHowever

Using social networking tools and sites seems to be in direct conflict with another important principle of using the Internet –> protect your identity from identity theft.  

04/21/23 UNIVERSITY OF WISCONSIN 4

DilemmaDilemma

What’s a current-day Internet user to do? Should we go blithely along like a fish protected in a larger school of potential identity theft victims, or maybe we should forego social networking altogether? (“No,” in case you were wondering.)

04/21/23 UNIVERSITY OF WISCONSIN 5

The SolutionThe Solution

Each of us should take responsibility for protecting ourselves.  On the following pages, we bring you tips to help reduce your online risk, including the practices toward safe social networking usage.

04/21/23 UNIVERSITY OF WISCONSIN 6

The First Step is to AdmitThe First Step is to AdmitThere is a ProblemThere is a Problem

Realize that you can become a victim at any time. Not a day goes by when we don’t hear about a new hack. With 55,000 new pieces of malware a day, security never sleeps.

04/21/23 UNIVERSITY OF WISCONSIN 7

Too Much InformationToo Much Information(TMI)(TMI)

Think before you post. Status updates, photos, and comments can reveal more about you than you intended to disclose. You could end up feeling like some silly politician as you struggle to explain yourself.

04/21/23 UNIVERSITY OF WISCONSIN 8

Don’t Post Your Life Don’t Post Your Life BiographyBiography

Nothing good comes from filling out a “25 Most Amazing Things About You” survey. Avoid publicly answering questionnaires with details like your middle name, as this is the type of information financial institutions may use to verify your identity.

04/21/23 UNIVERSITY OF WISCONSIN 9

Recall…Recall…

“Contrary to popular belief, all people have a digital ‘footprint’ that is very extensive and rather intrusive.” *

* (ISC)2 HealthCare Information Security and Privacy Practitioner (textbook) 2015

04/21/23 UNIVERSITY OF WISCONSIN 10

Don’t Give Away Your RightsDon’t Give Away Your RightsIn Exchange For the In Exchange For the

“Superpoke” App“Superpoke” AppThink twice about applications that request permission to access your data. You would be allowing an unknown party to send you email, post to your wall, and access your information at any time, regardless of whether you’re using the application.Heck, even Flashlights are scary.

04/21/23 UNIVERSITY OF WISCONSIN 11

Top Ten Mobile Flashight Apps used Top Ten Mobile Flashight Apps used for taking info about you*for taking info about you*

04/21/23 UNIVERSITY OF WISCONSIN 12

http://www.snoopwall.com/wp-content/uploads/2014/10/Flashlight-Spyware-Appendix-2014.pdf

Don’t Click on What YouDon’t Click on What YouCan’t SeeCan’t See

Be very cautions with “shortened URLs”

Test unknown links at Siteadvisor.com by pasting the link into the “View a Site Report” form on the right-hand side of the page.

04/21/23 UNIVERSITY OF WISCONSIN 13

(Links will be compiled at the end. Slides will be availble on line.)

Don’t Let CuriousityDon’t Let CuriousityKill the CatKill the Cat

Beware of posts with subjects along the lines of, “LOL! Look at the video I found of you!”  When you click the link, you get a message saying that you need to upgrade your video player in order to see the clip, but when you attempt to download the “upgrade,” the malicious page will instead install malware that tracks and steals your data.

04/21/23 UNIVERSITY OF WISCONSIN 14

If it Seems Too Strange toIf it Seems Too Strange toBe Real…Be Real…

…it probably is.Be suspicious of anything that sounds unusual or feels odd. If one of your friends posts, “We’re stuck in Cambodia and need money.”Correlate DataVerify Information

04/21/23 UNIVERSITY OF WISCONSIN 15

Keep Your ProfileKeep Your ProfileLocked DownLocked Down

Understand your privacy settings. Select the most secure options and check periodically for changes that can open up your profile to the public.

04/21/23 UNIVERSITY OF WISCONSIN 16

A Note About UW NetIDA Note About UW NetIDYour NetID is like your toothbrush, only you should use itUW-Madison will NEVER ask for your NetID and/or password via emailReport any such requests to abuse@wisc.edu

04/21/23 UNIVERSITY OF WISCONSIN 17

Keep ‘Em GuessingKeep ‘Em GuessingWhere You AreWhere You Are

Geolocation apps such as Facebook Check-In, share your exact location, which also lets criminals know that you aren’t home, so reconsider broadcasting that information.

04/21/23 UNIVERSITY OF WISCONSIN 18

A few minutes have passed, so A few minutes have passed, so reminder…reminder…

“Contrary to popular belief, all people have a digital ‘footprint’ that is very extensive and rather intrusive.” *

* (ISC)2 HealthCare Information Security and Privacy Practitioner (textbook) 2015

04/21/23 UNIVERSITY OF WISCONSIN 19

Being Nostalgic Is NiceBeing Nostalgic Is NiceBut Not your BrowserBut Not your Browser

Use an updated browser. Older browsers tend to have more security flaws.

Check it, and all the extra stuff, often:https://browsercheck.qualys.com/

04/21/23 UNIVERSITY OF WISCONSIN 20

(Links will be compiled at the end. Slides will be availble on line.)

Be Yourself, But Be UniqueBe Yourself, But Be Unique

Choose unique logins and passwords for each of the websites you use. I’m a big fan of password managers, which can create and store secure passwords for you.Use them to generate passwords that you never even see!

04/21/23 UNIVERSITY OF WISCONSIN 21

Be Aware of your Be Aware of your “surroundings;”“surroundings;”

Avoid Impersonators Avoid Impersonators Check the domain to be sure that you’re logging into a legitimate website. So if you’re visiting a Facebook page, look for the www.facebook.com address.

04/21/23 UNIVERSITY OF WISCONSIN 22

Just Because it is onJust Because it is onFacebook Does Not Make it Facebook Does Not Make it

SafeSafeBe cautious of any message, post, or link you find on Facebook that looks at all suspicious or requires an additional login.

04/21/23 UNIVERSITY OF WISCONSIN 23

Keep Your Devices FreshKeep Your Devices Freshand Up to Dateand Up to Date

Make sure your security suite is up to date and includes antivirus, anti-spyware, anti-spam, a firewall, and a website safety advisor.

Use tools, or ask for assistance – or both.

04/21/23 UNIVERSITY OF WISCONSIN 24

If You Are Extra ConcernedIf You Are Extra ConcernedThere Are Always OptionsThere Are Always Options

Invest in identity theft protection. Regardless of how careful you may be or any security systems you put in place, there is always a chance that you can be compromised in some way. It’s nice to have identity theft protection watching your back.  It isn’t a 100% guarantee though.

04/21/23 UNIVERSITY OF WISCONSIN 25

Remember – it’s just business.Remember – it’s just business.

Your information is valuable.Most social media organizations are for profit, some are publicly traded companies.Always: •Think before sharing.•Think before clicking•Think before responding.

04/21/23 UNIVERSITY OF WISCONSIN 26

Contact InformationContact Information(Slides will be made available)(Slides will be made available)

https://www.cio.wisc.edu/security/

Nicholas A. Davis, UW-System Administration Chief Information Security Officer: ndavis1@wisc.edu

Thomas P. Callaci, UW Madison Office of Cybersecurity Consultant: thomas.callaci@wisc.edu

04/21/23 UNIVERSITY OF WISCONSIN 27

Links Links (Slides will be on-line later)(Slides will be on-line later)

Check all of your browsers often:https://browsercheck.qualys.com

Pre-Check web sites:https://www.siteadvisor.com/analysis/

Password managers:http://passwordsafe.sourceforge.net/ (MS Win)http://pwsafe.info (Mac OS-X, Apple iOS)

Keep you apps updated:http://secunia.com/vulnerability_scanning/personal/

04/21/23 UNIVERSITY OF WISCONSIN 28

IT Security Awareness DayOctober 22, 2015

Protecting Your Social Media IdentityEnde / Fin

Prepared by: Nicholas Davis; Presented by: Thomas Callaci