Anti-Cyber Crime Team
Training Services (ACCTTS)
Integrates
information protection expertise
with education and team training programs.
These programs include lively presentations
and interactive workshops.
Dimension 1: Information Protection
& Cyber Ethics Overviews
Safeguards - 101
Menu-D1
Description
A11A: Quick Intro to
CyberCrime Fighting
for All Stakeholders
Simple Computing Safeguards
for Small Business and Home Computer Users
Visit www.nipc.gov
to learn about password protection practices!
Use
effective software protection from malware.
A - Have it correctly installed
on your workstation,
B - Check for new virus
signature updates DAILY . . .
C - Scan dynamic file areas
either incrementally or periodically
File servers, Mail servers & ALL
input devices.
Do
NOT keep computers online when inactive!
Log-off from workstations, but keep available for
anti-virus signature file updates.
For Small Offices or Home Office (SOHO), either
shut them off
-OR- physically disconnect them from Internet
connections.
| |
Gateway
|
| |
(-1-)
A computer performing protocol
conversion between different types of
networks or applications.
For example, a gateway converts a TCP/IP
packet to a NetWare IPX packet and vice
versa
or from AppleTalk to DECnet, from SNA to
AppleTalk and so on.
Gateways function at layer 4 and above in
the OSI model. They perform complete
conversions
from one protocol to another rather than
only supporting one protocol
from within another, such as IP tunneling.
Routers can sometimes implement
gateway functions.
An electronic mail, or messaging, gateway
converts messages
between two different messaging protocols.
See LAN and IP
gateway
(-2-) A computer acting as a go-between
for two or more networks using the same
protocols.
In this case, the gateway functions as an
entry/exit point to the network.
Transport protocol conversion may not be
required, but some form
of processing is typically performed.
See proxy
server
. It is an application that
breaks the connection between sender and
receiver.
All input is forwarded out a different
port, closing a straight path between two
networks
and preventing a cracker from obtaining
internal addresses and details of a
private network.
E-Poll
on Corporate Firewalls: Getting Personal
. . . DSL
and Computer Security Issues [Dont
Stop Looking @ Vulnerabilities ! ]
|
For HELP with first
& last safeguard
listed
. . . visit www.securemicrosoft.com
While Code Red has infected over 350,000
computers during the last several days,
neither it nor viruses like Sircam will be end of
civilization as we know it.
Nevertheless, the threat from worms, viruses, and other
'bad guys' (malware) is real.
But, like a freeway
traffic jam, it's only 'really' real when you're among
those stuck in it.
While it is effectively impossible to completely
eliminate the risk of loss from these
nefarious agents of doom, here are seven (7) things you
can do to mitigate the risk.
_______________________________________________________________
Click
here for NDU KnowledgeNet Glossary . . .
Also
scan NCMS Trusted Access
& www.humanfirewall.com
To
learn more about . . . Tips, Tricks and Traps to AVOID
A11S: Information
Protection Overview
(for Executives)
Overview
Our orientation
session is designed for non-technical executives
and professionals who need to understand key
business issues
about effective information protection and
network security.
This
introductory course uses real world examples to
show how competitors
or Cyber-criminals may compromise data integrity
or disrupt your networks availability and
reliability.
It anchors our team training series with a focus
on people, policy and process.
Focus
- Participant workshops
reinforce both risk assessment and mitigation
methods
in a straight-forward common sense format with a
take-home executive
risk assessment checklist and policy template.
- Delivers overview and
guidelines for preparing, responding to
and following-up after digital disruptions.
Learning Objectives
What you will learn:
- Are we at
risk?
- Who and
what are the threats?
- How do we
prepare for the inevitable?
- How do we
determine if we have been attacked?
|
How do we
stop an attack in progress?
What do we
do?
Who do we
notify?
How do we
recover from an attack?
|
Outline
Section
|
Topic
|
1
|
Course Objectives & Overview /
CBS "Cyber Thief" Video (15 Min) |
2
|
Cyber
Crime:
A Most Unnatural Disaster |
3
|
An Ounce of Prevention - AVOID
Being Victimized! |
4
|
Breakout-1: Assessing Risks
& Security Incident Response Team (SIRT)
Preparation |
5
|
Prudent Protection Practices &
Safeguards |
6
|
A Pound of Cure - Detection and
Correcton |
7
|
Breakout-2: Responding to "Cyber
Attack" - Digital Disruption Simulations |
8
|
Forensics & Dr. Quincy, ME -
Analyzing Root Causes |
9
|
Q&A
Review
with Overall Evaluation |
| Length 1/2
Day |
Materials
Workbook, Workshop Guide
& Information Protection Policy
Templates
|

Click here for NDU KnowledgeNet Glossary . .
.

Preview NCMS
Trusted Access
& www.humanfirewall.com
To learn more about . . .
Tips, Tricks and Traps to AVOID

Internet Security & Microsoft's PSA+


By:mark.j @ 10:28:AM
- - SendNews [HERE] / BT
eSecurity [HERE]
Following the recent
problems with Internet worms
such as Code
Red .
. . Microsoft have offered up
a 'Personal Security Advisor' (MPSA)
system:
Microsoft Personal
Security Advisor (MPSA-Demo)
is an easy to use web-based application
that helps you
protect your Windows NT™
4.0 or Windows
2000™
workstation privacy and productivity.
MPSA will scan your
system and build a customized
report on items such as
missing security patches, weak passwords,
Internet Explorer and Outlook Express
security settings, and Office macro
protection settings.
* * For each weakness identified on your
computer, MPSA provides easy to
understand information on the
security issue at hand, how to fix it,
and links to additional information about
the issue.
Once you correct a reported deficiency,
you can run the scan again and see the
results of the change. Running MPSA on a
regular basis helps ensure your system's
configuration stays current and secure.
Shavlik's online self-audit coach
can be found HERE and is very
relevant tool for those of you on broadband
connections.
If you don't run a fully
functional firewall
then this should be a requirement for
always-on connections.
We'd also like to point out the following
system for those on any other operating
system:
https://grc.com/x/ne.dll?bh0bkyd2
[Shields Up! @ Gibson
Research Corporation]
It's somewhat less complex and should be
ideal
for Windows 9x/ME™
and Linux etc. users trying to find
security holes / gaps in their systems
that need to be plugged.
Every reader to this
site
would be well informed to try either or
both.
|
Source: www.ispreview.co.uk/archives.shtml [29 Aug 2001]
|


With
the growth of digital business and
communications, security has become a key
issue. It's important that information
can be shared safely between colleagues,
customers and suppliers. Security is also
vital for encouraging customers to
purchase online.
And if your business can't demonstrate a
commitment to security, you run the risk
of losing your place as a supplier.
 |
Key
facts:
|
On
average, 60 per
cent of
organisations have suffered a
security breach in the last two
years1
|
 |
During 2001, the
number of emails
containing viruses
detected by a leading scanning
service
rose above the one in 400 mark2 |
 |
Unchecked
viruses could cost businesses
£907 billion
world-wide by the end of 20023
|
 |
One survey found
that 90 per cent
of sampled businesses had
experienced computer breaches
in a 12-month period - up
from 62 per cent
in the previous year4 |
 |
Security
breaches are often caused by
poorly implemented internal
processes, lack of staff
awareness and lax controls on
contractors
|

|
40 per cent
of breaches in security
are due to operator error5
|
Not just
adding to your costs:
Getting your
internet security right has
significant benefits. In fact it
could add value to your business
by removing some of the barriers
to doing business online. Operational
continuity safeguard investments
can
help sustain your business's
integrity, improve reliability of
your service and give greater
confidence to your customers.
- DTI
Information Security
Breaches Survey 2000.
- Message
Labs, reported in the
Guardian newspaper,
August 2001.
- Price
Waterhouse Coopers (PwC).
- Internet
Security Investor
Handbook
- Lehman Brothers,
March 2001.
- DTI
Information
Security
Breaches Survey 2000.
|
|
© 2001
ACCTTS, LLC
File-ID: ACCTTS-CiberPAC3.htm
EIPO-IPO4Execs-Syllabus.htm
Safeguards - 101
Menu-D1
|
|