OCT Training & Technology Solutions Training@qc.cuny.edu (718) 997-4875

OCT Training & Technology Solutions Training@qc.cuny.edu (718) 997-4875

Understanding Information Security Information Security Information security refers to safeguarding information from misuse and theft, caused accidentally or otherwise. Information may be accessed or stored in devices like telephones, fax machines, and computers. Cyber Security Pertains to the protection of data and systems that are connected to the Internet. Cyber security calls for steps to prevent, detect, and defend against potential information theft attacks. Confidentiality Pertains to protecting private and sensitive information from falling into the hands of the unauthorized. Poor Information Security Can result in identity theft that can occur due to loss of personal information.

Security Exploits Security threats come from many sources. By identifying and responding appropriately to potential attacks, you can protect yourself against unauthorized access to your information. Pharming Is a fraudulent website that contains copies of pages from a legitimate website, to capture confidential information from users. Users tend to end up on the bogus site on their own and are not suspicious because the page looks similar to the original site. Spoofing Is impersonating something else in order to trick your target into doing something that they may not ordinarily do. Phishing Example: A spoofed email can appear to come from an online bank that is asking you to confirm information that can then be used for fraudulent actions. Is an attack wherein the sender tries to trick the target into giving up sensitive information, such as financial information. These internet messages should be IGNORED and you should NEVER click on any of the links provided.

Identifying Security Measures DO NOT send personal information over public Wi-Fi. Wireless networks can be easily intercepted and you are better off using your carriers 3G or 4G. DO create strong passwords. It is always a good idea to use a combination of capital and lower case letters and numbers when creating a password. And while it can be annoying, creating different passwords for each of your accounts gives you the added safety that if one of your accounts are breached, the hacker will not be able to get into all of them. NEVER send out ANY personal information over email. Emails can easily be hacked and you do not want to make it any easier for someone to find more information about you.

Maintaining File Security In some security attacks, files on your hard drive can be corrupted or deleted and that is why protecting your files from catastrophes is important. If you have backed up your files, you can recover them without having to re-create them. Data backup Is a type of information protection scheme that enables you to store copies of critical files and folders for safekeeping. Regular backups provide safety of information. Data restoration Is a type of information protection scheme that enables you to recover stored copies of critical files and folders. A restore protects you against loss of data due to a security disaster. File sharing Involves making files or data available to members on a network. You can control access to your files by limiting the users. By allowing only authorized users to access the content, it protects it from being altered.

Maintaining File Security File transfer Is the process of copying files from one computer to another on a network, including the Internet. With the implementation of security measures, you can prevent unauthorized people from downloading files. File encryption Is a type of file protection that disguises the data within a file or message so that the specific information included within the file or message cannot be read or understood by an unauthorized user. A key can be used to encode the data, so neither the file nor the key can be read by anyone who does not have access. File decryption Is a type of file protection that decodes the data within an encrypted file. Decryption goes hand in hand with encryption, and the tool that was used to encrypt the data will be needed, along with the key to decrypt the data.

Guarding Against Attacks In the cyber world, many of the security breaches occur with email attachments. By defending yourself and your organization against these types of attacks, you can protect your system. Malware Performs actions that cause damage to data contained on a system, or prevents the system from being used in its normal way. Virus Computer programs that can attach to files and replicate themselves, often without your knowledge. Virus Hoax An email message that warns of a fake virus threat and urges the recipient to forward the message to everyone he knows. Example: An email might warn you of a new virus and tell you to spread the word to your friends and give a link to a dangerous website.

Guarding Against Attacks Spam Is a type of email message that is unsolicited and unwanted. Most spam includes at least one link to redirect the user to a different website, which may or may not be a legitimate commercial site. Trojans Are malicious programs that masquerade themselves as harmless applications and purposefully do things that the user does not expect Hacking Is a process of illegally accessing other people's computer systems for destroying or disrupting normal activity

Virus Protection Virus Protection Software Is a type of computer program that enables you to identify and remove malware from a computer. In some instances, the virus protection software might be able to repair damage done by a malicious piece of code. Virus Definition Updates Are files that identify and deal with known malware that was discovered after the initial installation of virus protection software. Virus definition files need to be updated constantly to include protection against newly discovered threats. Virus Scans Are activities that use the software engine and virus definition files to check a computer for the presence of malware. You can also manually force the virus protection software to scan for viruses at any time or set up an automated time. Email Filter Is a software application that categorizes email according to specified rules or instructions. Filters can sort incoming mail into different folders that are set up, including the folder that holds deleted items.

Block Spyware Spyware is a malicious software designed to intercept or take control of a computer s operation without consent. Spyware gains information about the user and silently tracks its surfing behavior to create a marketing profile. When you have spyware on your computer, you will see pop-up advertisements, even when you are not surfing the Internet. You will also observe other odd behavior such as slow downs and crashes. Using anti-spyware programs such as popup blockers and adjusting security settings can help in counteracting the increasing cases of spyware.

Any Questions? Feel free to contact the Training & Technology Solutions: Office: I-214 Ext: 74875 Email: Training@qc.cuny.edu Facebook: www.facebook.com/qc.training Tumblr: http://qc-tech.tumblr.com/