UNDERSTANDING INFORMATION SECURITY.pptVIP

UNDERSTANDING INFORMATION SECURITY Lee Ratzan, MCP, Ph.D. School of Communication, Information Library Studies at Rutgers University Lratzan@ IT’S A JUNGLE OUT THERE AND THE EVER POPULAR: In 1980 a computer cracked a 3-character password within one minute. DEFINITIONS A computer program SALIENT DIFFERENCES TYPICAL SYMPTOMS File deletion File corruption Visual effects Pop-Ups Erratic (and unwanted) behavior Computer crashes BIOLOGICAL METAPHORS WHY DO WE HAVE THIS PROBLEM? Software companies rush products to the consumer market (“No program should go online before its time…”) AND A FEW MORE REASONS HACKER MOTIVATIONS Attack the Evil Empire (Microsoft) NETWORKED SYSTEMS VS SECURED SYSTEMS POPULAR FALLACIES AND A FEW MORE…. THINGS THE LIBRARY CAN DO WHAT CAN THE LIBRARIAN DO? BACK IT UP MACHINE INFECTED? ACTION PLAN: If appropriate: THE HOAX STOPS HERE POPULAR HOAXES INCLUDE: JDBGMGR (teddy-bear icon) STOPPING THE TROJAN HORSE The Horse must be “invited in” …. NOTE #1 Search engines are NOT reliable sources of virus information NOTE #2 Computer companies are NOT reliable sources of virus information ONLINE RESOURCES Authoritative Hoax Information /avcenter/hoax.html /vil/hoaxes.asp Authoritative Anti-Virus Vendor Information /avcenter/vinf odb.html /us/security/vil.htm REFERENCES Authoritative Security Alert Information / (Symantec) /security (Microsoft) /support/security/ (Apple) Authoritative Anti-Virus Organizations (Computer Emergency Response Team-CMU) /ciac (CIAC-Department of Energy) /aboutsans.php (Server and Network Security) (Forum of Incident Response and Security Teams) (Computing Incident Response Team-Rutgers) Authoritative Free Public Anti-Virus Removal Tool Information /avcenter/tools.list.html /vil/averttools.asp /documentation/viruses (Rutgers) some professional library sites have pointers to reliable anti-virus information PRINT RESOURCES Allen, Julia, (2001)