the human firewall - amazon s3 · 2019-04-22 · the human firewall “as we’ve come to realize,...
TRANSCRIPT
![Page 1: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/1.jpg)
The Human Firewall
![Page 2: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/2.jpg)
“As we’ve come to realize, the idea that security starts and ends with the purchase of a
prepackaged firewall is simply misguided.”
-Art Wittman
![Page 3: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/3.jpg)
Best Practices For Office Information Security
• Be suspicious of email links and attachments.
• Back up your files regularly.
• Use strong passwords. • Use password
protected screensavers.
• Be careful when using public Wi-Fi.
• Download only from approved sources.
• Don’t give out information to unverified individuals.
• Know and follow information security policies.
![Page 4: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/4.jpg)
Phishing The act of sending an email message claiming to be a business to scam the receiver into sharing
personal data or private information.
• Spear phishing • Whaling
![Page 5: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/5.jpg)
![Page 6: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/6.jpg)
More Phishing Examples “Log in now to claim your prize!” “Credit Card on file has Expired” “Your account has been compromised” INTERNAL REVENUE SERVICE “Court attendance notification ID#608” “Your eBay confirmation of your PayPal transaction.”
![Page 7: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/7.jpg)
Avoiding Malware • Be wary of email from
strangers. • DO NOT double-click
attachments • DO NOT click on links. • Look for obvious social
engineering: – Free stuff! – Flattery – Urgency
AND…
![Page 8: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/8.jpg)
Back Up Your Files Regularly
• Determine how often by how much you
are willing to lose. • Test your files and your recovery success. • Store your backup files securely and at a
different location. • Have multiple backup files, just in case.
![Page 9: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/9.jpg)
Passwords 101: Use Strong Passwords and Keep Them Safe
![Page 10: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/10.jpg)
Passwords 101: Use 2-Factor Authentication
Use 2 of the Following:
-Something you know… …Password
-Something you have… …Authenticator
-Something you are… …Fingerprint
With 2FA, the password alone will not be enough to access your account.
![Page 11: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/11.jpg)
Password 101: What Makes a Good Password
Passwords should be: 15+ Characters – size matters! Complex: ABC abc 123 @#$ Unique for each important site. PRIVATE
![Page 12: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/12.jpg)
Passwords 101: Use Strong Passwords
Complex (15) Ih@dnLily&acnC! (I have a dog named Lily and a
cat named Charlie!)
Long (23) TrueMonkeyRaceCarBucket
Both (27) B*ttleneck11AirplaneC@rseat
B11AC
![Page 13: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/13.jpg)
Another Idea for Making Passwords
Take 4-6 letters LotR (Lord of the Rings)
Pick some random numbers 20150424
Random symbols !@
Base password: LotR20150424!@
Add a few letters from site: IG (Instagram)
Password for Instagram: LotR20150424!@IG
![Page 14: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/14.jpg)
Has My Password Been Compromised?
• How to tell: – Strange activity on your account – Your password or email address is changed – Communications from your account that you don’t
remember sending • Where to check:
– www.HaveIBeenPwned.com • What to do:
– Change your password – Contact the service to notify them – Contact people who have been affected by interaction
with your account
![Page 15: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/15.jpg)
Use Password Protected Screensavers
![Page 16: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/16.jpg)
Be Careful with Public WiFi
Public WiFi Networks are NOT SECURE
Verify you’re connecting to the correct one Never send confidential information
over an open wireless network Check for shoulder surfers
![Page 17: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/17.jpg)
Wi-Fi at Home
Make sure your router at home has a secure password, too!
A strong password on your router: – Protects your devices from becoming zombies
in a botnet – Protects your sensitive data from being stolen – Helps protect your work network if you are
working from home
![Page 18: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/18.jpg)
Protecting Your Family at Home
• Keep your kids safe. – An open line of communication can help you
spot trouble – Many cable companies and mobile carriers offer
parental control programs for free to customers • Practice safe browsing habits
– Only input data into websites that have https protection (look for the little padlock next to the web address)
![Page 19: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/19.jpg)
Download Only From Approved Sources
![Page 20: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/20.jpg)
Download Only From Approved Sources
Research the website. Research the file. Watch out for executable files.
.exe, .bat, .pif, and .scr Google is your friend!
![Page 21: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/21.jpg)
Don’t Give Out Information to Unverified Individuals
![Page 22: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/22.jpg)
How Does It Work?
Research Develop Trust Exploit Trust
Use the Information (…Repeat)
![Page 23: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/23.jpg)
Social Engineer: Frank Abagnale
Pilot, doctor, reporter, prosecutor…all by age 20!
![Page 24: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/24.jpg)
How Do I Avoid Being Tricked?
Verify that the person: 1. Is who they say they are. 2. Works where they say they do. 3. Has a need to know the information.
![Page 25: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/25.jpg)
Countermeasures
Policies and Procedures Awareness training If it’s a violation of policy
– SAY NO!
![Page 26: The Human Firewall - Amazon S3 · 2019-04-22 · The Human Firewall “As we’ve come to realize, the idea that security starts and ends with the purchase of a prepackaged firewall](https://reader035.vdocuments.mx/reader035/viewer/2022070714/5ed54d033b23684a2a12179a/html5/thumbnails/26.jpg)
Know Your Policies and Procedures
• Read them carefully! • If you suspect a problem, contact
your Information Technology office first.
• Document what is happening, the time, take screenshots.