1. CIT 380: Securing Computer SystemsSlide #1 CIT 380 Securing Computer Systems Threats

2. Scary Internet Stuff: Underground http://www.youtube.com/watch?v=AYWYvJ __Dxk&feature=relatedhttp://www.youtube.com/watch?v=AYWYvJ __Dxk&feature=related CIT 380: Securing Computer SystemsSlide #2

3. CIT 380: Securing Computer SystemsSlide #3 What Are Our Defenses? Firewalls Virus Scanners Spyware Scanners Intrusion Detection Systems (IDS/IPS) Patches Backups Prevent Detect Respond Recover

4. CIT 380: Securing Computer SystemsSlide #4 What Are The Attacks? Phishing Malware Ransomware Spyware Botnets

5. CIT 380: Securing Computer SystemsSlide #5 Phishing E-mail

6. CIT 380: Securing Computer SystemsSlide #6 Phishing Site

7. Scary Internet Stuff: Phishing http://www.youtube.com/watch?v=Ao20tAS 3x3I&feature=relatedhttp://www.youtube.com/watch?v=Ao20tAS 3x3I&feature=related CIT 380: Securing Computer SystemsSlide #7

8. Amazon.com - Your Cancellation (516-203578-8141423) order-update@amazon.com Dear Customer, Your order has been successfully canceled. For your reference, here`s a summary of your order: You just canceled order #991-86824-273919 Status: CANCELED _____________________________________________________________________ ORDER DETAILS Sold by: Amazon.com, LLC _____________________________________________________________________ Because you only pay for items when we ship them to you, you won`t be charged for any items that you cancel. Thank you for visiting Amazon.com! --------------------------------------------------------------------- Amazon.com Earth`s Biggest Selection http://www.amazon.com --------------------------------------------------------------------- ORDER DETAILS http://www.amazon.com CIT 380: Securing Computer SystemsSlide #8

9. CIT 380: Securing Computer SystemsSlide #9 Malware Trojan Horses Viruses Worms

10. CIT 380: Securing Computer SystemsSlide #10 Ransomware

11. CIT 380: Securing Computer SystemsSlide #11 Spyware and Adware Most Trojan Horses, some infect directly. –Browser hijacking –Pop-up advertisements –Keystroke and network logging –Steal confidential data from email and files

12. Spyware and Adware 89% of PCs are infected with spyware (2006Q2 Webroot.) –http://www.webroot.com/resources/stateofspywa re/excerpt.htmlhttp://www.webroot.com/resources/stateofspywa re/excerpt.html CIT 380: Securing Computer SystemsSlide #12

13. CIT 380: Securing Computer SystemsSlide #13 Rootkits Execution Redirection File Hiding Process Hiding Network Hiding User Program Rootkit OS

14. Rootkits Video http://www.youtube.com/watch?v=PcqnG4- NkZ4http://www.youtube.com/watch?v=PcqnG4- NkZ4 CIT 380: Securing Computer SystemsSlide #14

15. CIT 380: Securing Computer SystemsSlide #15 Botnets Worm or direct attack usurps control of PC, then installs control software to listen for instructions. Instructions can include: Attempt to infect other PCs Send spam message Launch DOS attack Upgrade attack and control software Virus writers sell botnets to spammers for $0.10/compromised PC

16. Scary Internet Stuff: Botnets http://www.youtube.com/watch?v=BRhauoX pNSshttp://www.youtube.com/watch?v=BRhauoX pNSs CIT 380: Securing Computer SystemsSlide #16

17. Wikipedia: Botnet http://en.wikipedia.org/wiki/Botnet –Historical list of botnets Kraken botnet –http://en.wikipedia.org/wiki/Kraken_botnethttp://en.wikipedia.org/wiki/Kraken_botnet CIT 380: Securing Computer SystemsSlide #17

18. CIT 380: Securing Computer SystemsSlide #18 Key Points Computer crimes same as pre-computer crimes. Differences in digital threats –Automation –Action at a distance –Technique propagation Digital threats –Phishing –Malware –Ransomware –Spyware –Botnets

19. CIT 380: Securing Computer SystemsSlide #19 References 1.Alexander Gostev et. al., “Malware Evolution: January – March 2006,” Virus List, http://www.viruslist.com/en/analysis?pubid=184012401, April 12, 2006. http://www.viruslist.com/en/analysis?pubid=184012401 2.The Honeynet Project, Know Your Enemy, 2nd edition, Addison-Wesley, 2004. 3.John Leyden, "The illicit trade in compromised PCs," The Register, Apr 30 2004. 4.Stuart McClure, Joel Scambray, and George Kurtz, Hacking Exposed, 5th edition, McGraw-Hill, 2005. 5.Rachna Dhamija and J. D. Tygar, "The Battle Against Phishing: Dynamic Security Skins," Proceedings of the Symposium on Usable Privacy and Security (SOUPS), July 2005. 6.SANS Internet Storm Center, http://isc.sans.org/survivalhistory.php 7.Schneier, Bruce, Beyond Fear, Copernicus Books, 2003. 8.Ed Skoudis, Counter Hack Reloaded, Prentice Hall, 2006 9.Stuart Staniford, Vern Paxson, and Nicholas Weaver, "How to 0wn the Internet in Your Spare Time," Proceedings of the 11th USENIX Security Symposium, 2002. 10.Richard Stiennon, "Spyware: 2004 Was Only the Beginning," CIO Update, Jan 26 2005. 11.Thompson, Ken, “Reflections on Trusting Trust”, Communication of the ACM, Vol. 27, No. 8, August 1984, pp. 761-763 ( http://www.acm.org/classics/sep95/)