Cyber security awareness and prevention is everyone’s responsibility. Each of us that connect needs to control our information and actions online. Each person taking responsibility for security is an excellent step in thwarting cyber attacks and cyber crimes.
National Cyber Security Awareness Month
The Department of Homeland Security chose October as National Cyber Security Awareness Month. 2018 is the 15th year of cyber security awareness. The goal of this year’s dedicated efforts is making sure that cyber security is everyone’s responsibility. Initiatives include information for online security and steps we can take to protect our data.
Every person and organization has its own responsibility in cyber security awareness: governments, companies, groups, and individuals. Cyber crimes cross across all sectors. Our society is increasing dependence on digital networks and tools. Thus, cyber threats and crimes have increased as well. All of us are connected in some in some manner. It is up to organizations and persons to be diligent and take precautionary steps to deter cyber threats.
Cyber Security Terminology
W. Greg Price, Sr., CTO/CSO for Troy University, describes several key terms that we should know through a question/answer format. Having this knowledge is valuable so we can take the necessary steps in supporting cyber security.
Cybercrime
Q: What is cybercrime?
A: We don’t often consider whether or not the people we interact with online might be breaking the law. But legal wrongdoing is just as prevalent on the internet as it is in the physical world.
Q: Why should you care?
A: We all want a safer world to live in, and it’s clear, now more than ever, that computers and other network enabled devices are part of that world. Being safe on the computer is often very similar to being safe in your daily routine. You wouldn’t leave your car unlocked – so why not apply the same safety principle to your online life?
Ransomware
Q: What is ransomware?
A: It’s easy to forget sometimes how valuable the information we store on our computers and devices really is to us. Family photos, financial information, address books, homework assignments – so much of our lives is stored digitally! Ransomware is a type of malware in which the attacker encrypts the victim’s data to make it as inaccessible as possible. Then, the attacker demands a ransom to release or unencrypt that information.
Q: Why should you care?
A: The fees extorted by cybercriminals through ransomware can be extreme or prohibitive – not to mention that there’s no guarantee that your data will actually be returned to you after you pay! Luckily, there’s a simple way to make yourself and your data resistant to ransomware attacks. In addition to keeping your software and antivirus programs up to date, regularly back up your system data.
Physical Cyber Attacks
Q: What are physical cyberattacks?
A: Cyber attacks don’t always have to come from the internet, and some malware can hide easily on some of the data storage devices we trust and use on a daily basis. Physical cyber attacks use hardware, external storage devices, or other physical attack vectors to infect, damage, or otherwise compromise digital systems. The attack can hitch a ride on USB storage devices or flash drives, CDs, hard copies of video games, and the Internet of Things devices such as smartphones, smartwatches, and even signal devices such as key fobs.
Q: Why should you care?
A: These kinds of attacks are frighteningly versatile, tough to identify and detect, and painfully difficult –sometimes close to impossible – to remove. Always try to keep track of where your storage devices have been, and don’t plug “lost and found” USB drives into your computer. Keep your personal and workplace data storage and other devices separate to avoid transferring malware from one system to another – just like washing your hands to prevent the flu from spreading!
Social Engineering
Q: What is social engineering?
A: Sometimes bad actors don’t need computers to gain access to your information. Social Engineering is when bad actors gather commonly available information about you and things you care about to trick you into revealing information or giving unauthorized access to information systems. Social Engineering attacks can be quite sophisticated and are not always easy to recognize. This includes attacks such as Phishing, Swatting, and more.
Q: Why should you care?
A: Social engineering attacks don’t require superpowered programming skills to be successful. The information you post on social media and other sharing platforms may make you vulnerable to this attack vector, and it may be difficult to tell when you are being targeted.
Phishing
Q: What is phishing?
A: Phishing is a kind of Social Engineering attack in which a bad actor poses as a trusted or reputable source and sends fraudulent digital messages, such as emails, with the intent of manipulating individuals into revealing personal or protected information, or with the purpose of gaining unauthorized access to a system through a download or link.
Q: Why should you care?
A: Phishing attacks are some of the most common – and most commonly successful – types of attacks. Learning how to recognize fraudulent messages by paying close attention to detail and never clicking on embedded hyperlinks, as well as remembering to report phishing attempts when you are targeted, are the best ways to defeat this kind of cyber attack.
Swatting
Q: What is swatting?
A: Think Social Engineering is just for Phishing? Think again. Swatting is an attack centered around location sharing. Bad actors use your location to call the police, claiming that the victim has committed a serious crime. Sometimes, the intent behind these attacks are merely pranks – but the consequences are almost always severe.
Q: Why should you care?
A: Unlike many cyber based attacks, Swatting has clear, physical, and immediate consequences. These attacks can easily result in injury and arrest. Your location is your business. Text or call friends the old fashioned way, if you want to meet up, share vacation photos only after you’ve gotten safely home, and remember to turn off location services on your devices when you don’t need them.
You might also want to read Your Cyber Security is Your Responsibility.