Showing posts with label data cleanup. Show all posts

Cyber Essentials - I'm Hacked, Now What?

by in , , , , , , , , , , , 0



Continuing our blog series targeted at protecting yourself against cyber threats, today's blog topic covers Cyber Bullying.


Today's guest blog contributor is Eric Varela. Eric is a student here at CSU Channel Islands majoring in Information Technology with a minor in Security Systems Engineering.

Define Hacked: No matter how securely you use technology in your day-to-day life, you may eventually be hacked or more commonly called “compromised.” In this blog, you will learn how to determine if your mobile device or computer has been hacked and, if so, what you can do in response. Bottom line, the quicker you detect something is wrong and the faster you respond, the more likely you can reduce the harm a cyber-attacker can cause.

Clues You Have Been Compromised: It can be difficult to determine if you have been compromised, as there is often no single way you can figure it out. On the other hand, hackers usually leave behind several clues, often called ‘indicators’. The closer your system matches any of these indicators, the more likely it has been compromised:

  • Your anti-virus program has flagged an alert that your system is infected, specifically if it says that it was unable to remove or quarantine the affected files.
  • Your web browser’s homepage has unexpectedly changed or your browser is taking you to websites that you did not want to go to.
  • There are new accounts on your computer or mobile device that you did not create, or new programs running that you did not download and install.
  • Your computer or applications are constantly crashing, there are icons for unknown apps on your mobile device, or strange windows keep popping up.
  • A program requests your authorization to make changes to your system, though you’re not installing or updating any of your applications.
  • Your password no longer works when you try to log into your system or an online account, even though you know your password is correct.
  • Your friends ask you why you are spamming them with emails that you know you never sent. 


How to Respond: If you believe your computer or mobile device has been compromised, the sooner you respond the better. Here are some steps you can take:

  • Anti-Virus: If your anti-virus software informs you of an infected file, you can follow the actions it recommends (delete, quarantine, etc.). (Note: Most anti-virus software will have links you can follow to learn more about the specific infection.)
  • Change your passwords: This includes not only changing the passwords on your computers and mobile devices, but for all of your online accounts. Be sure you do not use the compromised computer to change the passwords. Alternatively, use a different computer or device that you know is secure to change the passwords.
  • Rebuilding: If you are unable to fix the infection or you want to be absolutely sure your system is fixed, a more secure option is to rebuild (reformat) it. Follow your system manufacturer’s instructions. In most cases, this will mean using the built-in utilities to reinstall the operating system. (Tip: If these utilities are missing, corrupted, or infected, then contact your manufacturer for guidance or visit their website.)
  • Backups: The most important step you can take to protecting yourself is to prepare ahead of time with regular backups. (Tip: The more often you back up, the better. Often times, recovering your data from a backup is the only way you can recover from being hacked.)

Derived from sans.org

Cyber 101 Series - Backup and Recovery

by in , , , , , , , , , , , , 0

Continuing our "Cyber 101" blog series targeted at protecting yourself against cyber threats, today's blog topic covers Backup and Recovery.


Today's guest blog contributor is Eric Varela. Eric is a student here at CSU Channel Islands majoring in Information Technology with a minor in Security Systems Engineering.


What are ‘Backups’? Backups are copies of your information that are stored somewhere else. When you lose important data, you can recover that data from your backups. The issue is that most people do not perform backups, which is unfortunate, because they can be simple and inexpensive.

When should you Back Up? Common options include hourly, daily, weekly, etc. For home use, personal backup programs, such as Apple’s Time Machine or Microsoft’s Windows Backup and Restore, allow you to create an automatic “set it and forget it” backup schedule. For university use, backing up your classwork files on your personal computer, and when using university equipment, manually backup your files to a USB flash drive or cloud solution. (Tip: Backing up your classwork could save you unimaginable headaches during the semester.)

How to Back Up? There are two ways to back up your data: physical media or Cloud-based storage.
Physical media is any type of hardware, such as DVDs, USB drives or external hard drives. The potential problem with physical media is that if your location has a physical disaster (theft or fire), then not only can you lose your computer, but the backups as well. You should plan to store copies of your backup off-site in a secure location. For extra security, encrypt your backups.
(Tip: Whichever media you choose, never back up your files to the device that holds the original files.)

Cloud-based solutions are different than physical media. This is a service where your files are stored somewhere on the internet. Depending on how much data you want to back up, this may be a paid service. This solution works by installing a program on your computer that automatically backs up your files for you. There are also solutions such as Google Drive and Apple iCloud that make it easy for you to save information on-the-go and from almost any computer. The advantage with this solution is that since your backups are in the ‘Cloud’, your backups are still safe if a disaster happens to your house or device. Plus, you can access your backups, or often even just individual files, from almost anywhere.
(Tip: If you are not sure which backup option is best for you (physical media or Cloud) keep in mind you can always do both.)

Recovery Backing up your data is only half the battle; you have to be certain that you can recover it. Check every month that your backups are working by recovering file and validating the contents. In addition, be sure to make a full system backup before a major upgrade or a major repair and verify that it is restorable.
(Tip: When rebuilding an entire system from a backup, be sure you reapply the latest security patches and updates before using it again.)

Derived from sans.org

Don't give away your data when you give away your handheld device.

by in , , , , , , , , , , 0

Be careful before you resell or give away your handheld devices such as smart phones or any other device that can store data. The new owner will be able uncover your previous data from the device including id's, passwords or any other personal information that may have been stored. At a minimum, figure out how to reset it to the factory standard before turning it in or reselling it. Refer to your manual or call the manufacturer. Follow this link for more information on deleting data.

Clean up after yourself!

by in , , , , , 0

Being able to access the Internet from different locations — the library, a computer lab at school, an Internet cafe — is a great convenience, but it can also pose a security risk to personal information. If you do access the Internet from a shared computer, here are a few things you need to remember.

  1. Don't check the "remember my password" box. 
  2. When you're done, make sure you log off completely by clicking the "log off" button before you walk away. 
  3. If possible, clear the browser cache and history.
  4. Never leave the computer unattended while you're logged in. 
  5. Move all documents you've used to "Trash", and empty the recycle bin.

Effectively Delete Your Files

by in , , , , , 0

When you delete a file, depending on your operating system and your settings, the file may be transferred to your trash or recycle bin.  This "holding area" essentially protects you from yourself - if you accidentally delete a file, you can easily restore it.  Unfortunately, an unauthorized person may also be able to retrieve it.  Do the files in your recycle bin include credit card information, passwords, medical, or other personal data?  Does it contain sensitive corporate information?  


Trash Bin, Recycle Bin

Empty your trash or recycle bin on a regular basis to ensure that deleted information stays deleted!

Save your work to the network file share.

by in , , , 0

A computer user working on a critical project was saving their analysis document on their desktop. Unfortunately, the desktop was located on their local hard drive and local hard drives were not automatically being backed up. When the hard disk failed, they lost the file and had to work through nights and a weekend to make up for the lost time. CI utilizes network backups so that your important files get backed up. P.S... important files don't include things like vacation pictures, or music files which can overburden the backup system.

09/26/12 - Tip of the Day!

by in , , 0

Effectively delete files 

When you delete a file, depending on your operating system and your settings, the file may be transferred to your trash or recycle bin. This "holding area" essentially protects you from yourself—if you accidentally delete a file, you can easily restore it. An unauthorized person will also be able to retrieve it. Does your recycle bin include credit card information, passwords, medical, or other personal data? Is there sensitive corporate information? Empty the trash or recycle bin on a regular basis to ensure that deleted information stays deleted.

08/31/2012 - Tip of the Day!

by in , , , 0

Do not allow Internet Explorer to store passwords for you

Stored passwords allow anyone who can access your machine to log in to your web accounts as you. In addition, there are numerous utilities that can expose that hidden information and actually reveal the password. If you've reused that password for other logins, many systems or web sites could be compromised.

07/20/12 - Tip of the Day!

by in , , 0

Paper Files Have to be Protected Too


You've probably heard that to err is human, but to foul things up completely you need a computer. We know it's important to protect the big databases that we store, but we can't ignore paper records. The amount of information held on paper may be much smaller, but many of the most serious leaks happen through very human methods — reports stolen from desktops or read over someone's shoulder.  Keep sensitive paper files locked away when they are not being used and don't read them in public places.

July 2012 - secureCI Ouch! Monthly Bulletin

by in , , , 0

secureCI presents Ouch!

The SANS Monthly Information Security Bulletin at Channel Islands

  • Stored Information
  • Wiping your Device
  • SIM Cards / SD Cards
  • Options for Disposal

Safely Disposing of Your Mobile Device

OVERVIEW
Mobile devices, such as smart-phones and tablets, continue to advance and innovate at an astonishing rate. As a result, many of us replace our mobile devices as often as every 18 months. A key question becomes, What are you doing with your older devices? Many people simply dispose of their older mobile devices with little thought about all the personal data they have accumulated. However, a surprising amount of personal information is stored on these older devices. If your devices are not securely wiped before disposal, this information can easily be recovered, exposing you or your organization to tremendous risk.

STORED INFORMATION
Mobile devices store far more sensitive data then you may realize, perhaps more than your computer. When you dispose of your device you could be exposing the following information:
  • The contact details for everyone in your address book, including family, friends, and co-workers
  • Call history, including inbound, outbound, and missed calls
  • Text messages or logged chat sessions
  • Location history based on GPS coordinates or cell tower history
  • Web browsing history, cookies, and cached pages
  • Personal photos, videos, audio recordings, and emails
  • Stored passwords and access to personal accounts, such as your voicemail
WIPING YOUR DEVICE
Before you begin securely wiping your mobile device, consider whether or not you want to back up any of your data, such as photos, videos, or any other information. Once you’ve followed the steps below, you will not be able to recover any of your data. In addition, if your mobile device was issued to you by your employer or has any organizational data stored on it, be sure to check with your supervisor about proper backup and disposal procedures before following the steps below. Unfortunately, just deleting your data is not enough, it can still be recovered. We recommend that you use the device “factory reset” function to remove all data from the device and return it to the condition it was in when you bought it.
We have found that factory reset will provide the most secure method for removing data from your mobile device. The location of the factory reset function varies among devices; listed below are the steps for the most popular devices.

• Apple iOS Devices : Settings > General > Reset > Erase All Content and Settings
• Android Devices     : Settings > Privacy > Factory Data Reset
• Windows Phones    : Settings > About > Reset Your Phone
• BlackBerry Phones : Options > Security Options > Security Wipe

If you still have questions about how to perform a factory reset, check your owner’s manual or the manufacturer’s website. Another option is to take your mobile device to the store you bought it from and get help resetting it from a trained technician. Remember, simply deleting your personal data is not enough as it can be easily recovered.

SIM CARDS
In addition to the data stored on your device, you also need to consider what to do with your SIM (Subscriber Identity Module) card. Many mobile devices use a SIM card to uniquely identify you and your account information when you place and receive calls on a mobile network. When you perform a factory reset on your device, the SIM card retains information about your account. If you are keeping your phone number and moving to a new phone, talk to the phone salesperson about transferring your SIM card to the
new phone. If this is not possible (for example, if your new phone uses a different size SIM card) keep your old SIM card and physically shred or destroy it to prevent someone else from re-using it.

EXTERNAL STORAGE CARDS
Some mobile devices utilize an external SD (Secure Digital) card for additional storage. These storage cards often contain pictures, smart phone applications, and other sensitive content. Remember to remove any external storage cards from your mobile device prior to disposal (for some devices, your SD cards may be hidden in the battery compartment of your device). These cards can often be reused in new mobile devices or can be used as generic storage on your computer with a USB adapter. If reusing your SD card is not possible, then just like your old SIM card, we recommend you physically destroy it.

OPTIONS FOR DISPOSAL
When it comes to disposing of your old mobile device, instead of throwing it out, consider recycling it instead. Most carriers offer a discount on your next purchase when you recycle. Another option is to donate your mobile device to the charitable cause of your choice. Below are just some of the many places you can either recycle or donate your mobile device.


Verizon Recycling

Sprint Recycling

AT&T Recycling

Recycling Mobile Phones

EPA Mobile Phone Donations Site

National Coalition Against Domestic Violence
http://preview.tinyurl.com/l48kw4 

Operation Gratitude


RESOURCES
Some of the links shown below have been shortened for greater readability using the TinyURL service. To mitigate security issues, OUCH! always uses TinyURL’s preview feature, which shows you the ultimate destination of the link and asks your permission before proceeding to it. 

Common Security Terms:
http://preview.tinyurl.com/6wkpae5 

SANS Security Tip of the Day:
http://preview.tinyurl.com/6s2wrkp 

LEARN MORE
Subscribe to the monthly OUCH! security awareness newsletter, access the OUCH! archives, and learn more about SANS security awareness solutions by visiting us at http://www.securingthehuman.org.  OUCH! is distributed under the Creative Commons BY-NC-ND 3.0 license.

06/28/12 - Tip of the Day!

by in , , , 0

Effectively delete files

When you delete a file, depending on your operating system and your settings, the file may be transferred to your trash or recycle bin. This "holding area" essentially protects you from yourself—if you accidentally delete a file, you can easily restore it. An unauthorized person will also be able to retrieve it. Does your recycle bin include credit card information, passwords, medical, or other personal data? Is there sensitive corporate information? Empty the trash or recycle bin on a regular basis to ensure that deleted information stays deleted.