Binary Code
Computers and other electronic devices store information as Binary Code (which is a series of 1s and 0s that might look like this: 10101001 01101100 11001010).
Network Topology Map
A Network Topology Map is a diagram of a computer network's components, including network access points and connections between its various parts.
Fake Anti-Virus Software
Fake Anti-Virus Software - also known as 'scareware' - is designed to trick you into buying worthless anti-virus protection that you do not need.
Domain Name System
The Domain Name System (DNS) is like the ‘telephone book’ of the Web – it translates a website's name into its corresponding numerical IP address on the Internet.
Social Engineering
A Phishing e-mail is an attempt to trick the recipient into giving up information, such as account, credit card or password information.
Data Encryption
Data Encryption is the intentional scrambling of information into unreadable form - until it is later converted back into its original form by the intended recipient.
Botnet, or Compromised Computers
A Botnet is a collection of computers compromised by a malware attack that can be controlled remotely (via the Internet) to attack websites, send out spam emails, etc.
Distributed Denial of Service Attack
A Distributed Denial of Service (DDoS) Attack can use a botnet to force a website, network or other resource to shut down by overloading it with requests for data.
USB Flash Drive
A USB Flash Drive, aka a 'stick drive' or 'thumb drive' is a portable data storage device which connects to a computer's USB port to send and receive data.
Electronic vs. Static Media
Static Media is something like a book, magazine or printed photo, while Electronic or Digital Media (websites, digital photos, etc.) requires power to be viewed.
Administrative Access
A user with Administrative Rights has unrestricted power to create, modify or delete files, folders, settings and programs on a particular computer.
Computer Security Tip of the Week
Scott Aurnou – Computer forensics experts need to be both qualified to retrieve data without altering it and potentially be ready to testify in any subsequent litigation. There are a number of certifications that should be considered when choosing one.
If you enjoyed this video, you can see more on TheSecurityAdvocate YouTube channel.
By Scott Aurnou
No doubt you’ve noticed that high profile data breaches are increasingly in the news lately. Recent cyber attacks against Target, Neiman Marcus and Michael’s are just a taste of what’s to come.
As you might expect, a data breach – high profile or not – can be a nasty surprise to deal with. In addition to potentially negative publicity (sometimes very negative), there are often significant costs associated with a breach. These include forensically analyzing your organization’s electronic systems to figure out what happened, taking steps to fix the problem, notifying clients/customers that their data has been potentially compromised, possible statutory fines, and extra costs like credit monitoring services for the affected clients and/or customers and engaging public relations and crisis management firms to try and mitigate the damage done to your organization’s brand.
In recent years, data breaches have also increasingly led to lawsuits (Target already has a bunch). That’s why your first call should be to an outside law firm with cyber security expertise. If not, every panicked email, detailed investigative report and potentially embarrassing internal memo could be subject to discovery in a subsequent government investigation or lawsuit and wind up in the hands of class action plaintiffs’ attorneys determined to make your organization pay. On the other hand…
Read more ›
Computer Security Tip of the Week
Scott Aurnou – Recent revelations about the NSA’s Project ‘Bullrun’ paint a frightening picture concerning the security of the encryption underlying the Internet itself. Here are the basics regarding what the program entailed, as well as a few basic tips to protect yourself and your data.
Websites referenced in this video include:
TrueCrypt
GNU Privacy Guard
If you enjoyed this video, you can see more on TheSecurityAdvocate YouTube channel.
By Scott Aurnou
Get a new smartphone or tablet? Awesome!
Unfortunately, hackers, cyber criminals and real world thieves won’t wait for you to break it in before they start making trouble. In addition, it could be said that the device manufacturers and wireless carriers haven’t taken advantage of some currently available measures to safeguard the smartphones and tablets they sell. With that in mind, here are nine basic (and relatively easy) steps you can take that will go a long way towards securing your new device:
1) Set a passcode or password. A passcode is a basic four-digit code required to use the device. Without one, anyone holding your device only needs to turn it on to access everything on it. Most new devices also offer the option to use a longer alphanumeric password (which is considerably more secure than a passcode).
If you have an iPhone 5S (or HTC One Max), you can use a fingerprint scanner, though hackers found a way around it within days of its release and numerous users have had problems with it.
2) Turn on the auto-lock function. Right after you set a passcode or password, you should enable the auto-lock function on your device and set it to as short a time period as you’re comfortable with (1 to 5 minutes is good). Aside from saving a bit of battery life, a shorter period makes it that much less likely that someone will stumble upon your phone or tablet while it’s still turned on.
Read more ›
Computer Security Tip of the Week
Scott Aurnou – LinkedIn’s new ‘Intro’ app is cool… and dangerous. Learn more about it (and the security risks that come with it) here…
If you enjoyed this video, you can see more on TheSecurityAdvocate YouTube channel.
