Computer Basics Rabie A Ramadan Ph D 6

Computer Basics Rabie A. Ramadan, Ph. D 6

Viruses, Worms, Zombies, and others 2

What is Computer Security? 3

What is Computer Security? l Computer Security is the protection of computing systems and the data that they store or access 4

Why is Computer Security Important? l Computer Security allows the University to carry out its mission by: • Enabling people to carry out their jobs, education, and research. • Supporting critical business processes • Protecting personal and sensitive information 5

Why do I need to learn about Computer Security? Isn’t this just an IT Problem? 6

l Good Security Standards follow the “ 90 / 10” Rule: • 10% of security safeguards are technical • 90% of security safeguards rely on the computer user (“YOU”) to adhere to good computing practices 7

What Does This Mean for Me? l This means that everyone who uses a computer or mobile device needs to understand how to keep their computer, device and data secure. • Information Technology Security is everyone’s responsibility 8

What’s at Stake? Kinds of damage caused by insecurity • Nuisance: spam, … • Data erased, corrupted, or held hostage • Valuable information stolen • (credit card numbers, trade secrets, etc. ) Services made unavailable (email and web site outages, lost business) 9

Breaking into a Computer 10

Breaking into a Computer What? • Run unauthorized software How? • Trick the user into running bad software • (“social engineering”) Exploit software bugs to run bad software without the user’s help 11

Example of “social engineering”: Trojan Horse Cool. Screen. Saver. exe 12

Viruses and Worms l Automated ways of breaking in; Use self-replicating programs l (Recall self-replicating programs: Print the following line twice, the second time in quotes. “Print the following line twice, the second time in quotes. ” ) 13

Computer Viruses l Self-replicating programs that spread by infecting other programs or data files Cool Screen Saver Notepad Solitaire Paint Payload l Must fool users into opening the infected file 14

Email Viruses l l Infected program, screen saver, or Word document launches virus when opened Use social engineering to entice you to open the virus attachment Self-spreading: after you open it, automatically emails copies to everyone in your address book Other forms of social engineering: downloadable software/games, P 2 P software, etc. 15

The Melissa Virus (1999) l l l Social engineering: Email says attachment contains porn site passwords Self-spreading: Random 50 people from address book Traffic forced shutdown of many email servers $80 million damage 20 months and $5000 fine David L. Smith Aberdeen, NJ 16

Computer Worms l Self-replicating programs like viruses, except exploit security holes in OS (e. g. , bugs in networking software) to spread on their own without human intervention Payload 17

l l l First Internet worm Created by student at Cornell Exploited holes in email servers, other programs Infected ~10% of the net Spawned multiple copies, crippling infected servers Sentenced to 3 years probation, $10, 000 fine, 400 hours community service Robert Tappan Morris 18

“Can we just develop software to detect a virus/worm? ” [Adleman’ 88] This task is undecidable. (so no software can work with 100% guarantee) Current methods: (i) Look for snippets of known virus programs on harddrive (ii) maintain log of activities such as network requests, read/writes to hard-drive and look for “suspicious” trends (iii) look for changes to OS code. No real guarantee 19

Spyware/Adware l l l Hidden but not self-replicating Tracks web activity for marketing, shows popup ads, etc. Usually written by businesses: Legal gray area 20

Zombies Attacker’s Program Bot program runs silently in the background, awaiting instructions from the attacker 21

Can we stop computer crime? Probably not! l Wild West nature of the Internet l Software will always have bugs l Rapid exponential spread of attacks But we can take steps to reduce risks… 22

Protecting Your Computer Six easy things you can do… l l l Keep your software up-to-date Use safe programs to surf the ‘net Run anti-virus and anti-spyware regularly Add an external firewall Back up your data Learn to be “street smart” online 23

Keep Software Up-to-Date

Use Safe Software to Go Online Firefox (web browser) Thunderbird (email)

Anti-virus / Anti-spyware Scans Symantec Antivirus (Free from OIT) Spybot Search & Destroy (Free download)

Add an External Firewall Provides layered security (think: castle walls, moat) (Recent operating systems have built-in firewall features)

Back Up Your Data Tivoli Storage Manager (Free from OIT)

Learn Online “Street Smarts” l Be aware of your surroundings l Don’t accept candy from strangers • Is the web site being spoofed? • How do you know an attachment or download isn’t a virus, Trojan, or spyware? l Don’t believe everything you read • Email may contain viruses or phishing attack – remember, bad guys can forge email from your friends

Quiz: A hacked computer can be used to… (select all that apply) 1. 2. 3. 4. 5. 6. 7. 8. 9. Send spam and phishing emails. Harvest and sell email addresses and passwords. Illegally distribute music, movies and software. Distribute child pornography. Infect other systems. Hide programs that launch attacks on other computers. Record keystrokes and steal passwords. Access restricted or personal information on your computer or other systems that you have access to. Generate large volumes of traffic, slowing down the entire system 30

Next time is an exam l Assignment • Survey some of viruses and security incidents that ha been found in the last five years ? 31