Computer Security Basics

1
Computer Security Basics

• Usama Georges

2
Topics discussed..

• What is computer security?
• Can some one break into my computer?
• Why should I care?
• What can I do?

3
Computer Security

• Confidentiality
• Integrity
• Availability

4
Types of Internet Access

• Dial Up
• Broadband
• DSL
• Cable
• Satellite
• Network

5
Intentional Misuse of computers
6
Computer Viruses and Worms

• Programs designed to infect computers and
  programs.

7
Trojan Horses

• www.cert.org/advisories/CA-1999-02.html
• www.ppsl.com/virus_info/torjans

8
Remote administrations programs

• Back Doors
• Allow other people to access and control your
  computer
• www.cert.org/vul_notes/VN-98.07.backorifce.html

9
Denial of Service

• Your computer to crash or become so busy
  processing that you are unable to use it!

10
Distributed denial of services

• Being an intermediary for an attack on another
  computer

11
Unprotected File Shares

• Can be exploited by intruders
• www.cert.org/incident_notes/IN-2000-02.htm
• www.cert.org/incident_notes/IN-2000-03.htm

12
Mobile CodeJava/Java Script/ActiveX

• Programs executed by your Web Browser
• www.certorg/tech_tips/malecious_code_FAQ.html

13
E-Mail Spoofing

• An e-mail message can appear to come from one
  source when it was sent from another.

14
Hidden File Extensions

• Disguise malicious programs
• www.cert.org/other_sources/viruses.html

15
Chat Clients

• Allow information to be transmitted
  bi-directionally between computers on the
  internet

16
Information from your computer

• Cookies
• Records of where you have been.
• www.cookiecentral.com/faq
• www.nlc-bnc.ca/cf1-cbgf/liaison/1997/97-6/9706-3e.
  htm

17
What Do I do now ???????
18
Use Virus Protection Software

• Use it on all internet-connected computers.
• Be sure to keep the AVS up to date (virus
  signatures)
• Use automatic updates for virus definitions when
  Available

19
E-mail Attachments

• Never open unknown e-mail attachments. Know the
  source
• Before you open any attachments make sure your
  virus definitions are up to date
• Save the file to a removable disk the scan it
  with you AVS before you open it

20
Running a program

• Dont run a program unless you know its from a
  trusted source
• Never transfer programs from unknown origins

21
Hidden File extensions

• Instructions on revealing hidden file extensions
  are given at
• www.cert.org/incident_notes/IN-2000-07.html

22
Keep it Patched!

• Keep all applications patched to the most recent
  level
• OS
• Internet browsers
• E-mail programs
• Word processors
• Spreadsheets
• All MS products in General

23
Disable the following!

• Java script
• ActiveX
• Scripting features in e-mail programs
• www.cert.org/tech_tips/malicious_code_FAQ.html

24
Use a Firewall

• Hardware based
• Software based
• www.sonicwall.com
• www.zonealarm.com
• www.networkice.com www.watchdog.com

25
Extra Protection

• Protect your registry
• www.grware.com/software/grr/
• Manage adds and cookies
• www.adsubtract.com/

26
Turn off your computer.

• Disconnect from any network when it is not in use.

27
Plan..

• Make regular backups of your data
• ZIP, Tape, floppy
• Another hard drive
• CD-RW, DVD-RW
• Another PC on the network

28
..For the worst!............

• Create an emergency boot disk remember, before
  you have a security event
• Save all data

29
..and hope for the best!

• The internet is still a wonderful information
  resource
• Take precautions, but use and enjoy internet
  access.

30
Any Questions?

• See you at the network security class Spring
  2004..