Download - Security Basics Webinar

talks!

Security Basics: Keep your Computers Safe October 28, 2010

Audio is only available by calling this number:Conference Call: 866-740-1260; Access Code: 6339392

Sponsored by

Security Basics: Keep your Computers Safe Conference Call: 866-740-1260 Access Code: 6339392

Using ReadyTalk

• Chat & raise hand • All lines are muted• If you lose your

internet connection, reconnect using the link emailed to you.

• If you lose your phone connection, re-dial the phone number and re-join.

• ReadyTalk support: 800-843-9166


You are being recorded…

• Streaming into Second Life• This seminar will be available on the

TechSoup website along with past webinar presentations:– www.techsoup.org/go/webinars

• You will receive a link to this presentation, material and links.

• After the webinar, you can ask follow-up questions in our Community Forum:– http://bit.ly/ts-sec

• Twitter hashtags: #techsoup

talks!

Security Basics: Keep your Computers Safe

Presenter: Marian MerrittSponsored by


We are working toward a time when every nonprofit and social benefit organization on the planet has the technology resources

and knowledge they need to operate at their full potential.


Home page screen grab


Today’s Speakers

Kami Griffiths TechSoup Global

Marian MerrittSymantec

Assisting with chat questions: Kevin Lo & Gary Lamontagne, TechSoup Global


Agenda

• Threat landscape• How do computers get infected• What is driving growth in malware• Staying safe• What to do if infected• Resources


Poll #1: Does your organization have an Acceptable Use Policy?

• Yes• No


Poll #2: Do you provide internet safety training for your employees and volunteers?

• Yes• No


Threat Landscape

2/3 of adults globally have been victim of cybercrime:• Viruses/malware 51%• Online scams 10%• Phishing 9%• Social network hacking 7%• Online credit card fraud 7%• Sexual predation 7%


Types of Malware• Virus – program that can

spread from computer to another

• Worm – virus that can spread on its own

• Trojan – hidden in an offer of something good

• Bot – robot network, remotely controlled by criminal

• Keystroke logger – silently records valuable info and sends to criminal over the web


How Does This Happen?• Dangerous links in email, IM, Twitter

messages, Facebook and YouTube comments

• Infected devices: USB sticks, disks, laptops, digital photo frames

• Fake work at home schemes, online auctions, online dating

• Phishing attacks, “spearphishing”• Fake antivirus pop-up alerts• Ex-employees using privileges to

access systems• Skimming


Why The Rapid Growth in Malware?

• Underground cybercrime economy• Bigger business than international drug

trade• Hackers with computer skills and desire

for money• Organized online buy/sell of breached

and stolen data• Low risk, high reward


Zeus Trojan - $70 million stolen from small business, non-profits


Huge growth in malware and new physical threats


How Do We Protect Ourselves?

• Internet Security (more than just AntiVirus) on all systems

• Create culture of security in the organization (not us vs. them)

• Explain the “why” to your employees so they can practice safe computing at home and with their families

• Create security policy and enforce it• Separate systems where possible• Backup data in more than one form• Other suggestions:

– Web filtering– Enforce Safe Search settings


Acceptable Use Policy Tips

• Created by IT and HR, approved by Legal• Identify restricted activities: (examples)

– Taking devices home– Accessing inappropriate websites like porn or online shopping– Installing software other than IT approved and provided– Conducting financial transactions– Email activities are for work-related only– Social networking activity

• Remind employees that email, IM and other activities are company property and monitored

• Identify what happens if policy isn’t followed


When To Suspect Malware Infection

• Strange pop-ups ads• Hijacked browser• Slow computer• Antivirus isn’t working• Lots of activity when you

aren’t doing anything• Strange icons in tool tray• Search isn’t working• Lots of bounced back

email or sent email


What To Do If Infected?

• Report to IT• Determine scope of infection (device only, account

only, network wide)• Determine availability of backup, restore points and

other forms of restoring to a clean system• Proceed to identify and remove malware

– Scan with security software, remove or quarantine malware

– Use more powerful malware removal tools from Norton, Microsoft, etc

• Determine how the infection occurred and communicate to team

• Contact financial institutions or other impacted organizations for further assistance


Social Network Risks

• Dangerous links and hacked accounts• Sharing information incorrectly• Inappropriate photos and videos• Violating acceptable use policy by

displaying offensive imagery, language, sharing jokes, etc


Resources• Symantec Security Response Blog• Norton Family Resource website

– Free booklets on online safety

• Every Click Matters website

• Microsoft and Norton malware removal tools:– Norton Power Eraser

• Federal Trade Commission • Nat’l Cyber Security Association

http://www.symantec.com/business/security_response/landing/blogs.jsp

http://www.symantec.com/redirects/norton/norton_com/familyresource/

http://www.everyclickmatters.com/

http://security.symantec.com/nbrt/npe.asp?lcid=1033

http://www.onguardonline.gov/topics/net-cetera.aspx

http://staysafeonline.org/


Wrap Up

• Malware – what is it, where does it come from, how to stay safe

• Cybercriminals – how do they work• What to do if you get infected• Acceptable Use Policies• Additional Resources• Questions? Send me an email:

[email protected]

talks!

Questions?

Submit your questions using the chat box.


Continue the Discussion…

• Additional questions can be answered by posting in in our Community Forum:– http://bit.ly/ts-sec


Upcoming Webinars

• Is FileMaker Right for Your Organization? – Thursday, November 18, 11 a.m.

• Manage your Data, Donations and More with CiviCRM– Tuesday, November 23, 11 a.m.


Thank you to our Webinar Sponsor!

ReadyTalk offers dedicated product demos for TechSoup organizations 4 times per week.

For more information: pages.readytalk.com/techsoup.html

talks!

Thank you! Please complete the post event survey!

Kami Griffiths, [email protected], 415-633-9392