The OWASP Foundation Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. #GET RooT IUT 2012 Myths in Information Security

2 Who Am I ? Shahee Mirza # Certified Ethical Hacker (C|EH). # MCSE, RHCE and CCNA # Computer and Network Security Consultant. # Teacher/Instructor/Lecturer. # Engineer. FB:

3 MYTH #1 Organizations are more secure now than they were a year ago.

4 MYTH #2 I Will Know When I Am Infected.

5 MYTH #3 External consultants know more about information security than in- house personnel do.

6 MYTH #4 Information security must be managed as a separate business unit to be effective.

7 MYTH #5 Complex, frequently changed passwords will make my enterprise secure.

8 MYTH #6 The padlock icon present during an SSL session means my data is safe.

9 MYTH #7 Migrating from Internet Explorer to other browser will make my enterprise secure.

10 MYTH #8 Stay Safe by Not Visiting Risky Sites.

11 MYTH #9 Wireless networks aren't secure.

12 MYTH #10 Dumping Windows for Linux will increase security.

THANK YOU !!