Using Your Safely to Protect Personal/Sensitive Data & to Prevent Security Attacks

Transcription

1 Using Your Safely to Protect Personal/Sensitive Data & to Prevent Security Attacks Communication and Collaboration with Office 365 Workshop Series #4

2 Agenda Attacks Protect Personal / Sensitive Data in Staff System

3 Attacks Spam/Junk Mail

4 What is SPAM?

5 Best Practices to Avoid Receiving Spam Don t publish your work or your primary address on any web site or discussion forum. Have a separate address for signing up for newsletters and posting online, etc., then if the mailbox starts receiving lots of unwanted mail, it can be deleted or more aggressively filtered.

6 Attacks Spam/Junk Mail Virus

7 What is Virus? A computer virus is a program which can replicate itself and then spread from one computer to another. Sometimes, malware, adware and spyware are called viruses, although they cannot replicate themselves. Instead, they can exploit the security of the computer as well as computers within their network. Viruses can harm a computer s data or performance.

8 Best Practices in Preventing Virus Infection Install anti-virus software and make sure that it is up-to-date. Enable your firewall as this will prevent unwanted PC access from the internet. Regularly update software installed in your computer. Otherwise, malicious users may exploit these software bugs to attack your computers. Do not open s from unknown senders as they may have attachments that are infected with viruses.

9 Attacks Spam/Junk Mail Virus Phishing/Spoofing Mail

10 What is Phishing Mail? Phishing refers to the malicious attack method which imitates legitimate companies in sending s to entice people to share their passwords, credit card number or other sensitive personal information. Phishing s will almost always tell you to click on a link that will take you to a website where your personal information will be requested.

11 Example of Phishing Mail

12 Example of Phishing Mail

13 Best Practices Protect yourself from Phishing s We will NEVER ask for your password over . Registered financial institutions such as banks normally WILL NOT request users to confirm or update their password or any personal information by clicking on a link and visiting their web sites. Be suspicious of s with urgent request for personal information. Never give out personal information upon request.

14 Best Practices Protect yourself from Phishing s (Con t) Don t open unexpected attachments or instant messaging download links. Enable anti-phishing features of web browser. Inspect the web address carefully. Don t trust links in an . An that appears to be from PayPal could direct you to a fraudulent website such as or Look for and a lock icon in the address bar before entering any private information on the website.

15 Responded to Phishing s?

16 Responded to Phishing s? If you have ever responded to a phishing or submitted your NetID/NetPassword to a phishing web site, change your NetPassword IMMEDIATELY. Call IT Help Centre at to clean your computer.

17 Attacks Spam/Junk Mail Virus Phishing/Spoofing Mail Zero day attack (e.g. Ransomware)

18 What is Ransomware? Spreading via spam or phishing s carrying malicious file attachments. Once infected, victims' files become encrypted, which is currently unbreakable, and they receive a message saying they need to pay a ransom (e.g., bitcoin) to get their files back.

19 Example of Ransomware (e.g. Cerber)

20 Best Practices Protect yourself from Ransomware Be extremely wary of any Microsoft Office attachment that advises you to enable macros to view its content. Do not enable it if in doubt. Please DO NOT open suspicious attachment or URL link. Delete any suspicious-looking s you receive, especially if they contain links or attachments. Regularly backup the files stored on your computer, and keep an offline copy of the backup. Always keep your security software up to date. Keep your operating system and other software updated.

21 Responded to Ransomware?

22 Unfortunately Infected Ransomware? You shall isolate the infected computer from the network and external storage immediately and do not open any file before clearing the malware. Call ITS Help Centre at to clean your computer. Restore the backup

23 Security Enhancements Pilot Stage Two server side rules will be implemented. Then spoofing s claiming to be from will be classified as spoofing and moved into Outlook Junk Mail folder.

24 Security Enhancements (Con t) Pilot Stage

25

26 Staff OWA

27 Staff OWA

28 Other Authentication Methods

29 Security Enhancements (Con t) Evaluation Stage Advanced Threat Protection (ATP) With Advanced Threat Protection, you can protect your mailboxes against new, sophisticated attacks in real time. By protecting against unsafe attachments and expanding protection against malicious links, it can provide better zero-day protection.

30 Protect Personal / Sensitive Data

31

32 Solution

33 Rights Management sharing application (RMS Sharing App) - Objectives Can protect single/multiple attachment. Can protect any type of attachment (office/non-office file types). Sender can track how people are using a protected document in the document tracking site. In case the message is accidentally attached an incorrect attachment, sender can revoke the assigned permission so that the recipient(s) cannot make access to it. Remarks: RMS Sharing Apps only protect attachment. Sender is recommended to put sensitive data into attachment instead of body.

34 How to Send with Protected Attachments

35 How to Send with Protected Attachments (Con t)

36 How to Send with Protected Attachments (Con t)

37 RMS Sharing Apps (Con t) Track and Revoke Documents Users can track how people are using a protected document in the document tracking site. If necessary, they can also revoke access to these documents when sharing is no longer needed by clicking Revoke access against a document.

38 RMS Sharing Apps (Con t) Track and Revoke Documents

39 Data Loss Prevention (DLP) Objectives Reduce the possibility of data leakage (sensitive data) through communication by Data Loss Protection (DLP).

40 Data Loss Prevention (DLP) (Con t) Features and Benefits To detect whether the message content and/or the attachment (not encrypted by other method) containing some sensitive data. The detection is based on our defined pattern such as Hong Kong ID card number China Resident Identity Card (PRC) Number Credit Card number PolyU Student Number If PolyU Student Number is found, the sender will receive MailTips alerts. If other sensitive data is found, and the mail will be blocked and sender will receive a non-delivery report (NDR). Sender is recommended to put sensitive data into RMS protected attachment instead of body.

41 Data Loss Prevention (DLP) (Con t)

42 What s Next?

43 Regular IT Training Workshop

44 Q & As For particular issue, please contact IT HelpCentre at x5900.