Happy Computer Security Day

Computer Security Day is an annual event that is observed worldwide. It was started in 1988 to help raise awareness of computer related security issues. The goal of Computer Security Day is to remind people to protect their computers and information. Officially, Computer Security Day is November 30th. However, some some organizations choose to have functions on the next business day or week if CSD falls on a weekend.

Computer Security Day is a great opportunity for information security professionals and their organizations to raise the level of awareness within their users. We can help by providing ideas for CSD activities, posters and other resources.

For 2008 the theme for CSD will be “A Good Defense ” The poster has yet to be designed but will include an image and text portraying the idea that we must be proactive and active for security to work. Each individual is responsible and plays a part in protecting information assets and resources. These include:

* Viruses
* PC security
* Firewalls
* Using strong passwords
* Social engineering
* Physical security of information resources and assets

Plan a great CSD event for your organization and get your users involved with protecting your computers and information.

Computer Security Day Poster 2008

Right click and select “Save Target As” to download a high resolution ready-to-print PDF of this year’s poster.

A nice article below
By Ellen Messmer
I’m told Nov. 30 is Computer Security Day; started back in 1988 when the Washington, D.C., chapter of the Association for Computing Machinery’s Special Interest Group on Security, Audit, and Control decided to raise awareness of computer security. The Web site for CSD is here, according to IBM, which didn’t want us to forget. If you’re wondering why you don’t have the day off, well I can only imagine it’s because computer security is such an strenuous undertaking, it’s more likely you’ll be working overtime to even begin to achieve it.

Anyway, in the event you can take a few moments away from your job of fighting hack attacks, insider sabotage, spam and phishing to read this, IBM, in honor of Computer Security Day, has come up with a dictionary of terms that that clearly suggests why network security is a hellish endeavor. Here goes:

Airsnarf
n. A rogue wireless device added to a network that steals usernames and passwords from people using public wireless hotspots

Backdoor
n. A way to bypass authentication and obtain remote access to a computer. A spammer might install a backdoor to send junk mail from that computer

Hijacking
v. A hacker takes over a connection, appearing to be the real computer user

List bomb
v. Forging messages that cause the victim to unknowingly subscribe to mass mailing lists (such as a subscription to an online newsletter) in volumes that may crash their systems

Logic bomb
n. Trojan Horse that releases viruses and/or worms

Phreaking
v. 1. Cracking into the telephone network, which has now evolved to include cracking into cellphones and computer communications networks

Spit and spim
n. Spit is Spam sent over an Internet telephone connection n. Spim is Spam sent over an instant message connection

Spoofing
v. Impersonating another host on a network; pretending to be a trusted host

Wabbit
n. Any hack that repeatedly replicates itself on a local computer

Fork bomb
n. A species of “wabbit” that performs a denial of service on a computer system by creating a large number of processes very quickly and overloading the computer.

IBM has also come up with its own “Ten Tips to Aid Online Security,” and here they are, including how to deal with wicked wabbits:

1. Make sure your computer has antivirus software, and ALWAYS keep it up to date. Believe it or not, IBM’s Security Threats and Attack Trends team continues to see activity from viruses as old as CodeRed and Nimda, which first appeared three years ago.

2. Install a firewall for your home computer network, especially if you use an always-on connection like broadband or DSL, and avoid being a victim of a list-bomb. Intruders are constantly scanning for home systems they can hijack.

3. If you like to take your laptop with you and use wifi hotspots at your local coffee shop or airport, it should have its own firewall so you can fend off those “airsnarfs”.

4. If your computer uses a wireless device, the device should use the WPA or WPA2 Wi-fi Protected Access protocol. One easy way to check is to look at the package label to see if the box for Wi-Fi Protected Access is checkmarked.

5. Don’t respond to unsolicited e-mail, Spit or Spim. Even the Unsubscribe function on a Spam e-mail probably won’t take you off any junk lists, and it may even redirect you unknowingly to a malicious Web site that creates a backdoor or downloads a virus on your PC.

6. Did you know that 40% of all computer users use the word “password” as their password? When choosing a password, here are a few ways to slow down programs that are specially written to crack your password. Don’t choose obvious things like the name of a pet, friend or your birth month. Go for longer passwords, at least 7 or 8 characters. Mix letters with non-letters such as numbers and punctuation. And if you absolutely have to use a real word, misspell it.

7. Don’t take ANY of your online connections for granted. Experts project that 2 billion spim messages will bombard IM applications this year. If you’re an IM user, be cautious about following links or running software sent to you by someone else. These are commonly used to build networks of computers that are unwittingly part of a denial of service attack.

8. Don’t be fooled by spoofers. There is no good reason to give out your password, social security number, or bank account information in response to an e-mail or phone call. Most legitimate banks and Internet service providers would never ask you to send them that kind of information. If in doubt, call them.

9. If you’re like many holiday shoppers, you’ll be doing a lot of your shopping by pointing and clicking instead of parking and walking. Before giving out your financial or account information at any Web site, look for a third-party privacy seal to ensure that the transaction is secure.

10. Last but not least, when was the last time you backed up your files?
There is no such thing as 100% protection from phreaks, spoofers and spammers, so make sure you have a recent back-up before a wicked wabbit brings your system to a halt.

You might also like:

Popularity: 1%