ICT Security Issues in Europe.ppt

ICT Security Issues in Europe Tony Brett Oxford University Computing Services http://users.ox.ac.uk/~tony Agenda Brief Security Update Identity Theft Standards and Governments The Future of Spam Vulnerabilities Biometrics Some Stories Questions URLs “Even in 2003, security is the least understood of all computer system components.” What is being spent? How much of the Budget? Security Adoption in Europe Are you serious? European Password Survey by NTA: 67% of users rarely or never change their passwords 22% admit that they would only ever change their password even if forced to by a Web site or system/IT department Average passwords to know: Average: 21 Maximum: 70 Users who write down their passwords: 49% heavy computer users 31% average of all users Identity Theft A true story TriWest Healthcare Alliance in Arizona provided healthcare services for members of the U.S. military. Thieves stole computers containing confidential records. Losses were $2.7 million. Cost to victims: $30 million to repair damage to credit ratings The worst case scenario Stolen identities used for criminal acts First day of work for a woman in San Diego Employer did a background check She arrived, and then departed in handcuffs Her ID was used when another woman was arrested for drug possession. Phishing E-mail purporting to be from Bank etc Invites submission of personal details The recent Russian phishing scams load the real Barclays/Halifax/Nationwide etc. pages in one browser window along with a pop-up site from the fake site requesting account details. Fake URLS: http://www.barclays.co.uk@3468664375/verify.htm Pop Quiz 1 Since 1976, more than 2.5 million U.S. patents have been issued. How many reference the word “security”? A. 16,475 B. 123,210 C. 64,689 D. 493,298 Standards Governments The United States has taken an industry-by-industry approach to privacy protection in its laws and regulations, in contrast to European countries. Privacy measures are contained in specific