personal security onlinefiles.granneman.com/presentations/ladue-chapel/2... · once a technology...

93
Personal Security Online: Protecting Yourself Ladue Chapel Presbyterian Church R. Scott Granneman © 2006-2010 R. Scott Granneman Last updated 20101114 You are free to use this work, with certain restrictions. For full licensing information, please see the last slide/page. 1

Upload: others

Post on 22-Jun-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Personal Security Online:Protecting Yourself

Ladue Chapel Presbyterian Church

R. Scott Granneman

© 2006-2010 R. Scott GrannemanLast updated 20101114

You are free to use this work, with certain restrictions.For full licensing information, please see the last slide/page.

1

Page 2: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Once a technologymakes something possible,

it gets applied,whether for good or bad.

Donald A. Norman

2

Page 3: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

What toBelieve?

3

Page 4: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

4

Page 5: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

5

Page 6: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

6

Page 7: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

7

Page 8: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

“Bert Is Evil”Webmaster

Yesterday a lot of youalerted me to a picture

of a Taliban propaganda posterwith Bert!

Reality is imitating the Web!I am honestly freaked out!

8

Page 9: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

9

Page 10: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

10

Page 11: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

TMI

11

Page 12: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

12

Page 13: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

13

Page 14: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

500,000,000+ active users(200,000,000 access via mobiles)

50% log in every day700,000,000,000 minutes/month

http://www.facebook.com/press/info.php?statistics

14

Page 15: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

900,000,000 objects to interact with(pages, groups, events)Average user creates

90 pieces of content per month30,000,000,000 pieces of content

shared every month

http://www.facebook.com/press/info.php?statistics

15

Page 16: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

#1photo sharing

16

Page 17: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Status updatesMessaging

Video sharingNews sharing

Location sharing

Advertising

17

Page 18: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

18

Page 19: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

The Story of Zack

19

Page 20: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

20

Page 21: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

21

Page 22: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

21

Page 23: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

21

Page 24: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Malware

22

Page 25: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

VirusWorm

Trojan HorseSpyware

23

Page 26: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

VirusSelf-replicating

Infects another program& uses that to spread

Alters the way a computer operates

24

Page 27: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

WormSelf-replicatingUses a network

to send copies of itselfto other computers

Spreads without human intervention

25

Page 28: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Trojan HorseMalicious program

that disguises itself aslegitimate software

Looks harmless or useful,but hides something harmful

26

Page 29: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

SpywareGathers information

about you & your computer useTransmits informationto an external entity

without your knowledgeor informed consent

27

Page 30: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Wireless

28

Page 31: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

29

Page 32: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

What’s a packet sni!er?A program and/or devicethat monitors the data

passing through a networkIt can tell the user

where data is coming from,where data is going,and what the data is

30

Page 33: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

www.wireshark.org

31

Page 34: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

32

Page 35: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

33

Page 36: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

34

Page 37: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

34

Page 38: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

34

Page 39: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

35

Page 40: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

35

Page 41: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

35

Page 42: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

35

Page 43: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

36

Page 44: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

36

Page 45: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

36

Page 46: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

FiresheepAppeared October 27, 2010

Firefox extensionMakes cookie sidejacking easy

37

Page 47: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

38

Page 48: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

39

Page 49: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

39

Page 50: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

39

Page 51: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

39

Page 52: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

39

Page 53: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

39

Page 54: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

The solution: encryption

40

Page 55: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Service providers(Facebook, Yahoo Mail, Twitter)need to use HTTPS everywhere

41

Page 56: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Send email using encryptionRead email using encryption

IM using encryptionConduct e-commerce

using HTTPS

42

Page 57: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

VPN(Virtual Private Network)

encrypts all Internet tra!cStrongVPN

www.strongvpn.com$7/month

43

Page 58: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Email! Gmail

! Hotmail

44

Page 59: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

IM! Skype

! Google Chat

45

Page 60: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Firefox extensions! HTTPS Everywhere

! Force-TLS

46

Page 61: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Google Chrome extensions! Secure Login Helper! KB SSL Enforcer

47

Page 62: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

For more info, see my“Co"ee shop WiFi for dummies”

www.securityfocus.com/columnists/385

48

Page 63: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Backup

49

Page 64: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Why?

50

Page 65: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

51

Page 66: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Source: Sylvain Pedneault; edited by jjron; http://commons.wikimedia.org/w/index.php?title=File:FirePhotography_edit1.jpg&oldid=26671960

52

Page 67: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Source: Sylvain Pedneault; edited by jjron; http://commons.wikimedia.org/w/index.php?title=File:FirePhotography_edit1.jpg&oldid=26671960

52

Page 68: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Source: Sylvain Pedneault; edited by jjron; http://commons.wikimedia.org/w/index.php?title=File:FirePhotography_edit1.jpg&oldid=26671960

52

Page 69: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Source: Sylvain Pedneault; edited by jjron; http://commons.wikimedia.org/w/index.php?title=File:FirePhotography_edit1.jpg&oldid=26671960

52

Page 70: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Source: Sylvain Pedneault; edited by jjron; http://commons.wikimedia.org/w/index.php?title=File:FirePhotography_edit1.jpg&oldid=26671960

52

Page 71: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Backing UpOnline

53

Page 72: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Dropboxwww.dropbox.com

Mozywww.mozy.com

Backblazewww.backblaze.com

54

Page 73: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

CrashPlanwww.crashplan.com

55

Page 74: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

56

Page 75: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

57

Page 76: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Data encryptedduring transport

& in storage

58

Page 77: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

59

Page 78: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

1 PC/$54/yearAll PCs/$100/year

Unlimited data

60

Page 79: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Backing UpLocally

61

Page 80: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Time Machine

62

Page 81: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Backup and Restore Center

Vista only63

Page 82: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

64

Page 83: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Backup Personal

Files

Backup System Files

Complete PC

BackupAutomated

Backup

Home Basic

Home Premium

Business

Enterprise

Ultimate

!

! !

! ! ! !

! ! ! !

! ! ! !

65

Page 84: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

CrashPlan

66

Page 85: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

67

Page 86: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Cloning

68

Page 87: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Carbon Copy ClonerFree

www.bombich.com

69

Page 88: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Acronis True Image$50 for Home

www.acronis.com

70

Page 89: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

ClonezillaFree

clonezilla.org

71

Page 90: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

72

Page 91: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Thank you!

Email: [email protected]: www.granneman.com

Publications: www.granneman.com/pubsBlog: blog.granneman.comTwitter: scottgranneman

73

Page 92: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Personal Security Online:Protecting Yourself

Ladue Chapel Presbyterian Church

R. Scott Granneman

© 2006-2010 R. Scott GrannemanLast updated 20101114

You are free to use this work, with certain restrictions.For full licensing information, please see the last slide/page.

74

Page 93: Personal Security Onlinefiles.granneman.com/presentations/ladue-chapel/2... · Once a technology makes something possible, it gets applied, whether for good or bad. Donald A. Norman

Licensing of this workThis work is licensed under the Creative Commons Attribution-ShareAlike License.

To view a copy of this license, visit http://creativecommons.org/licenses/by-sa/1.0or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.

In addition to the rights and restrictions common to all Creative Commons licenses, the Attribution-ShareAlike License features the following key conditions:

Attribution. The licensor permits others to copy, distribute, display, and perform the work. In return, licensees must give the original author credit.

Share Alike. The licensor permits others to distribute derivative works under a license identical to the one that governs the licensor’s work.

Questions? Email [email protected]

75