Malware

1
Malware
2
Malware

• A definition (Websters wont likely be calling
  me)
• Malicious software, designed specifically to
  damage or disrupt a computer system (or user)
• Malware is software (not people)

3
Handout 15

• Virus most people would include Trojans and
  Worms. anything email?
• Ad-ware and Spy-ware usually dont come by email
• Pfishing, scams hoaxes, urban legends not
  malware, but still bothersome

4
Malware, or not?

• Malware
• Virus, Trojan, Worm, Adware/Spyware
• NOT Malware
• Spam, Pfishing, Scams, Hoaxes, Urban Legends,
  mass-forwards
• Maybe
• Pop-ups
• Malware or not, ALL are not good things

5
Where is the problem?

• Malicious code writers
• Spammers liars!
• Over-aggressive marketing?
• Or get-rich-quick victims?
• The uninformed
• The gullible
• The trusting
• None of your staff, of course. Right?

6
Defenses

• Review the BASICS document again

7
Defenses

• Anti-virus
• EVERY machine
• FREQUENT updates
• Windows Updates
• Automatic?
• Education and Information
• Just a hint of paranoia

8
More defenses

• Users NOT administrators!
• No on-demand software installation
• Firewalls
• Spam Firewalls
• Email attachment control
• Anti-Spyware products

9
Highest Risk?

• Where is your highest risk?
• What is your best defense?
• PEOPLE
• Education, or lack of, determines your survival
• (Compare to building security. Or financial
  safeguards.)

10
Handout 16

• Some good definitions from our friends at HP

11
2600 (Hacker Quarterly)

• Pick it up at your newsstand!
• http//www.2600.com

12
Phrack underground ezine for hackers

• http//www.Phrack.org
• http//en.wikipedia.org/wiki/Phrack
• "As long as there is technology, there will be
  hackers. As long as there are hackers, there will
  be PHRACK magazine. We look forward to the next
  20 years."

13
Whats the next action?

• Any take-aways?
• Anything to add to My Actions?

14
(No Transcript)