Security

1
Security

• Hiroshi Toyoizumi
• toyo_at_u-aizu.ac.jp
• toyo_at_aoni.waseda.ac.jp

2
Social Engineering

• Your kindness may put you in danger.
• You as a team may put you in danger.
• Your reliable person may put you in danger.
• What can you do?

3
Malicious Mobile Codes Viruses and Worms
4
Laroux Excel Macro Virus
5
Current epidemics
6
Cracking

• Hijacking your machine.
• Stepping stone.
• Tamper with www pages.
• Leak of important information.

7
Scanning IP addresses
8
Detect Windows shared folder
9
How to protect cracking

• Anti-virus
• Pacth
• Encryption
• Firewalls
• IDSIntrusion Detection System

10
BlackICE An IDS
11
Secure communication using cryptography

• Encrypt important information.
• Certify the other party.
• Public Key Cryptography
• PKIPublic Key Infrustructure

12
Common key system Cryptograhpy
13
Give it a try! Cipher communication
Bob
Alice
14
Any problems?

• It is easy to eavesdropping the key on thei
  internet.

15
Public Key Cryptograhpy
16
Give it a try! Public key cipher communication
Bob
Alice
17
Any problems?

• Swiching the public key.
• Man-in-the-middle-attack.

Bob
Alice
18
Digital signature
19
??????????
20
Key with digital signature
Bob
Alice
21
Real cipher communication
22
Public key and digital signature
23
Certificate authority
24
e-Government
25
Topics

• Stop Blaming the Victims
• The author of Sasser
• Adware,Spyware
• Spoofing, Backdoor
• Personal Firewall
• Anti-virus
• Spam
• Intrusion Detection System
• Cookies, Java, Active-x
• Biometric

26
Role Play

• Cast
• Ohta Employee of Microsoft
• Yamada Employee of Takada delivery company
• Employees of Waseda Hospital
• Yamaguchi accounting section
• Yano freshman in general affair

27
Scene 1 call from waseda delivery

1. Yano Hello, this is Yano, general affair section
   in Waseda Hospital.
2. Yamada Hi, this is Takada delivery calling. It
   seems that one of our customer wrongly faxed her
   address to your company. Could you fax it to us?
3. (after checking the fax machine.)
4. Yano No, we havent received your fax.
5. Yamada You may found it other place Maybe in
   your accounting section? If you find it, please
   fax it to us at 03-1111-1111.
6. Yano OK.

28
Scene 2call from Microsoft

1. Ohta Hello, this Ohta from Microsoft customer
   service. We found that your PC is sending too
   much viruses on the internet, and we received
   many complaints about it. Please download the
   anti-virus software that I will mention and
   install it on your PC.
2. Yano Sure. Where can I find the software?

29
Scene 3call from other section

1. Tahara This is Tahara from accounting. Could
   you do me a favor?
2. Yamaguchi Yes. What?
3. Thara Our computers are all infected by viruses,
   but I need the address of a patient, Ryoko
   Hirosue. Could you call up the data on your
   screen and fax it to me at accounting section?
4. Yamaguchi No problem.

30
Quiz

• Did you find any security problem in the
  role-play?
• Write them down.
• Describe the counter measures.