information security forum fall 2018
play

Information Security Forum Fall 2018 Gary McCrillis & Jon - PowerPoint PPT Presentation

Jan 22, 2023 •273 likes •387 views

Information Security Forum Fall 2018 Gary McCrillis & Jon Vazquez Information Security Analysts, Cal Poly Information Security Office 9/28/18 1 Better Passwords, with 9/28/18 2 Ninjio Video 9/28/18 3 Passwords Are (Still) Hard

  1. Information Security Forum Fall 2018 Gary McCrillis & Jon Vazquez Information Security Analysts, Cal Poly Information Security Office 9/28/18 1

  2. Better Passwords, with 9/28/18 2

  3. Ninjio Video 9/28/18 3

  4. Passwords Are (Still) Hard • Secure passwords are hard to remember. • Should be unique per site, but often aren’t. • Passwords are still used everywhere. • Everyone has a horror story about passwords. • Over 1 billion passwords breached by hackers. 9/28/18 4

  5. Why Use A Password Manager? • One password to remember. • One thing to secure well. • Auto-fills unique, secure passwords. • Works great on Android and iOS. • LastPass, purchased by Cal Poly, allows secure password sharing. • LastPass link: lastpass.com • Mac/iOS alternative: 1password.com 9/28/18 5

  6. A Warning! • Master Password MUST be remembered and kept secure. • Lose your Master Password and you lose ALL your passwords. • Reputable vendors cannot access your passwords. • TIP: Print out your master password and keep it with you for a few days. • TIP: Use Multifactor Authentication 9/28/18 6

  7. LastPass & Duo Getting Started Guide • Set up Duo on the Cal Poly Portal • Official LastPass Getting Started Guide 9/28/18 7

  8. LastPass Tips • Install the iOS/Android apps and browser extensions. • If you have many passwords in Chrome/Firefox, you can import them into Lastpass. • Use LastPass to generate and fill in long, secure passwords for sites. • Enterprise LastPass allows for simple password sharing. 9/28/18 8

  9. Use Multi-factor/2-Step Verification • Use Multifactor Authentication (MFA) for password manager and for email. • Email is a common central point for many accounts (Netflix, bank, news site subscription, retirement account, etc.) • No Google employee have been successfully phished with MFA in place since 2017. • Cal Poly DUO provided for free to faculty/staff. • Google 2-Step instructions link 9/28/18 9

  10. Cal Poly Information Security Office infosec@calpoly.edu Report suspicious emails to abuse@calpoly.edu 9/28/18 10

Recommend

ECE590 Computer and Information Security Fall 2018 Buffer Overflows and Software Security Tyler

ECE590 Computer and Information Security Fall 2018 Buffer Overflows and Software Security Tyler

ECE590 Computer and Information Security Fall 2018 Buffer Overflows and Software Security Tyler Bletsch Duke University What is a Buffer Overflow? Intent Arbitrary code execution Spawn a remote shell or infect with worm/virus

1.26k views • 76 slides
ECE590 Computer and Information Security Fall 2018 Wireless and Mobile Security Tyler Bletsch

ECE590 Computer and Information Security Fall 2018 Wireless and Mobile Security Tyler Bletsch

ECE590 Computer and Information Security Fall 2018 Wireless and Mobile Security Tyler Bletsch Duke University Adapted from Chapter 24: Wireless Network Security by Dr. Hossein Saiedian at Univ. Kansas, which in turn was adapted from

452 views • 27 slides
ECE590 Computer and Information Security Fall 2018 Database Security Tyler Bletsch Duke

ECE590 Computer and Information Security Fall 2018 Database Security Tyler Bletsch Duke

ECE590 Computer and Information Security Fall 2018 Database Security Tyler Bletsch Duke University Table of data consisting of rows and columns Each column holds a particular type of data Each row contains a specific value for each

236 views • 19 slides
ECE590 Computer and Information Security Fall 2018 Cryptography Tyler Bletsch Duke University

ECE590 Computer and Information Security Fall 2018 Cryptography Tyler Bletsch Duke University

ECE590 Computer and Information Security Fall 2018 Cryptography Tyler Bletsch Duke University Some slides adapted from slideware accompanying Computer Security: Principles and Practice by William Stallings and Lawrie Brown REAL advice

1.16k views • 79 slides
ECE590 Computer and Information Security Fall 2018 Computer Security Overview Tyler Bletsch

ECE590 Computer and Information Security Fall 2018 Computer Security Overview Tyler Bletsch

ECE590 Computer and Information Security Fall 2018 Computer Security Overview Tyler Bletsch Duke University Is this circle secure? PROBLEM: The question is under-defined. What does it mean to for a circle to be secure? LESSON:

763 views • 29 slides
ECE590 Computer and Information Security Fall 2018 Shell Proficiency and Data Manipulation

ECE590 Computer and Information Security Fall 2018 Shell Proficiency and Data Manipulation

ECE590 Computer and Information Security Fall 2018 Shell Proficiency and Data Manipulation Tyler Bletsch Duke University Motivation Everyone needs to manipulate data! Attackers need to: Scan target environment for assets

1.08k views • 92 slides
ECE590 Computer and Information Security Fall 2018 Denial of Service Attacks Tyler Bletsch

ECE590 Computer and Information Security Fall 2018 Denial of Service Attacks Tyler Bletsch

ECE590 Computer and Information Security Fall 2018 Denial of Service Attacks Tyler Bletsch Duke University Denial-of-Service (DoS) Attack The NIST Computer Security Incident Handling Guide defines a DoS attack as: An action that

565 views • 28 slides
ECE590 Computer and Information Security Fall 2018 Malware Tyler Bletsch Duke University

ECE590 Computer and Information Security Fall 2018 Malware Tyler Bletsch Duke University

ECE590 Computer and Information Security Fall 2018 Malware Tyler Bletsch Duke University [SOUP13] defines malware as: a program that is inserted into a system, usually covertly, with the intent of compromising the confidentiality,

766 views • 53 slides
Computer and Information Security Fall 2019 Endpoint security Tyler Bletsch Duke University

Computer and Information Security Fall 2019 Endpoint security Tyler Bletsch Duke University

ECE590 Computer and Information Security Fall 2019 Endpoint security Tyler Bletsch Duke University Overview How do you configure endpoints for better security? 1. Updates 2. Correct settings 3. Reduce attack surface 4. Limit privilege 5.

477 views • 19 slides
ECE590 Computer and Information Security Fall 2018 Networking Overview Tyler Bletsch Duke

ECE590 Computer and Information Security Fall 2018 Networking Overview Tyler Bletsch Duke

ECE590 Computer and Information Security Fall 2018 Networking Overview Tyler Bletsch Duke University Some slides adapted from Brian Rogers (Duke) Network fundamentals This course isnt a networking course, so well just hit the highlights

682 views • 65 slides
Definitions and Terminology Fall 2014 CS 334 Computer Security 1 Security Goals

Definitions and Terminology Fall 2014 CS 334 Computer Security 1 Security Goals

Definitions and Terminology Fall 2014 CS 334 Computer Security 1 Security Goals Confidentiality : concealment of information or resources. Availability : preserve ability to use information or resource desired. An unavailable

318 views • 19 slides
Victorian Protective Data Security Framework Victorian Information Security Network - VPS Forum

Victorian Protective Data Security Framework Victorian Information Security Network - VPS Forum

Victorian Protective Data Security Framework Victorian Information Security Network - VPS Forum December 2016 C ommissioner for P rivacy and D ata P rotection Introductions Pr Presenter esenter Commissioner Privacy and Data Protection David

415 views • 20 slides
ECE590 Computer and Information Security Fall 2018 Reverse Engineering Tyler Bletsch Duke

ECE590 Computer and Information Security Fall 2018 Reverse Engineering Tyler Bletsch Duke

ECE590 Computer and Information Security Fall 2018 Reverse Engineering Tyler Bletsch Duke University With additional content by Jiaming Li, NC State University, 2015 What is software reverse engineering? Determine and possibly change

643 views • 35 slides
ECE590 Computer and Information Security Fall 2018 Human Factors and Social Engineering Tyler

ECE590 Computer and Information Security Fall 2018 Human Factors and Social Engineering Tyler

ECE590 Computer and Information Security Fall 2018 Human Factors and Social Engineering Tyler Bletsch Duke University Definition What is non-social engineering? Manipulating objects to achieve an end What is social engineering?

656 views • 19 slides
ECE590 Computer and Information Security Fall 2018 Introduction and Course Policies Tyler

ECE590 Computer and Information Security Fall 2018 Introduction and Course Policies Tyler

ECE590 Computer and Information Security Fall 2018 Introduction and Course Policies Tyler Bletsch Duke University Instructor and TAs Professor: Tyler Bletsch Office: Hudson Hall 106 Email: Tyler.Bletsch@duke.edu Office Hours:

521 views • 14 slides
Computer and Information Security Fall 2020 Buffer Overflows and Software Security Tyler Bletsch

Computer and Information Security Fall 2020 Buffer Overflows and Software Security Tyler Bletsch

ECE560 Computer and Information Security Fall 2020 Buffer Overflows and Software Security Tyler Bletsch Duke University What is a Buffer Overflow? Intent Arbitrary code execution Spawn a remote shell or infect with worm/virus

983 views • 75 slides
ECE590 Computer and Information Security Fall 2018 User Authentication and Access Control Tyler

ECE590 Computer and Information Security Fall 2018 User Authentication and Access Control Tyler

ECE590 Computer and Information Security Fall 2018 User Authentication and Access Control Tyler Bletsch Duke University User Authentication Determining if a user is who they say they are before giving them access. 2 The four means of

1.24k views • 66 slides
Security Measurement Professor Adam Bates Fall 2018 Security & Privacy Research at Illinois

Security Measurement Professor Adam Bates Fall 2018 Security & Privacy Research at Illinois

CS 563 - Advanced Computer Security: Security Measurement Professor Adam Bates Fall 2018 Security & Privacy Research at Illinois (SPRAI) Administrative Learning Objectives : Discuss two recent studies that use measurement methods

925 views • 54 slides
Nicosia Risk Forum 2018, Cyprus 14/11/2018 European Security Agenda Shortcomings and Major

Nicosia Risk Forum 2018, Cyprus 14/11/2018 European Security Agenda Shortcomings and Major

H2020-SEC-21-GM-2016-2017 Mediterranean practitioners network & capacity building for effective response to emerging security challenges Nicosia Risk Forum 2018, Cyprus 14/11/2018 European Security Agenda Shortcomings and Major Challenges

193 views • 18 slides
Victorian Protective Data Security Framework Victorian Information Security Network - VPS Forum

Victorian Protective Data Security Framework Victorian Information Security Network - VPS Forum

Victorian Protective Data Security Framework Victorian Information Security Network - VPS Forum MELBOURNE MARCH 2017 C ommissioner for P rivacy and D ata P rotection Introductions Data Pr Data Protect otection Branch ion Branch

443 views • 21 slides
Computer and Information Security Fall 2019 Database Security Tyler Bletsch Duke University

Computer and Information Security Fall 2019 Database Security Tyler Bletsch Duke University

ECE590 Computer and Information Security Fall 2019 Database Security Tyler Bletsch Duke University Table of data consisting of rows and columns Each column holds a particular type of data Each row contains a specific value for each

540 views • 19 slides
Security 101 Definition of Information Security Information security is the protection of

Security 101 Definition of Information Security Information security is the protection of

Computing Services Information Security Office Security 101 Definition of Information Security Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction or disruption. The

469 views • 22 slides
Physical Information Security Fall 2009 CS461/ECE422 Computer Security I Reading Material

Physical Information Security Fall 2009 CS461/ECE422 Computer Security I Reading Material

Physical Information Security Fall 2009 CS461/ECE422 Computer Security I Reading Material Secrets of Computer Espionage Chapter 5 Soft TEMPEST paper http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf Outline Forensics/Spying

771 views • 47 slides
Physical Information Security Fall 2010 CS461/ECE422 Computer Security I Reading Material

Physical Information Security Fall 2010 CS461/ECE422 Computer Security I Reading Material

Physical Information Security Fall 2010 CS461/ECE422 Computer Security I Reading Material Secrets of Computer Espionage Chapter 5 Soft TEMPEST paper http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf Outline Forensics/Spying

595 views • 46 slides

More recommend