Transcript waseda2004-security

Security
Hiroshi Toyoizumi
[email protected]
[email protected]
1
Social Engineering
• Your kindness may put you in danger.
• You as a team may put you in danger.
• Your reliable person may put you in danger.
• What can you do?
2
Malicious Mobile Codes:
Viruses and Worms
3
Laroux: Excel Macro Virus
4
Current epidemics
5
Cracking
•
•
•
•
Hijacking your machine.
Stepping stone.
Tamper with www pages.
Leak of important information.
6
Scanning IP addresses
7
Detect Windows shared folder
8
How to protect cracking
•
•
•
•
•
Anti-virus
Pacth
Encryption
Firewalls
IDS:Intrusion Detection System
9
BlackICE: An IDS
10
Secure communication
using cryptography
• Encrypt important information.
• Certify the other party.
• Public Key Cryptography
• PKI：Public Key Infrustructure
11
Common key system
Cryptograhpy
12
Give it a try!
Cipher communication
Bob
Alice
13
Any problems?
• It is easy to eavesdropping the key on thei
internet.
14
Public Key Cryptograhpy
15
Give it a try!
Public key cipher communication
Bob
Alice
16
Any problems？
• Swiching the public key.
• Man-in-the-middle-attack.
Bob
Alice
17
Digital signature
18
電子証明書は印鑑証明
19
Key with digital signature
Bob
Alice
20
Real cipher communication
21
Public key and digital signature
22
Certificate authority
23
e-Government
24
Topics
•
•
•
•
•
•
•
•
•
•
Stop Blaming the Victims
The author of Sasser
Adware,Spyware
Spoofing, Backdoor
Personal Firewall
Anti-virus
Spam
Intrusion Detection System
Cookies, Java, Active-x
Biometric
25
Role Play
• Cast
 Ohta: Employee of Microsoft
 Yamada: Employee of Takada delivery company
 Employees of Waseda Hospital
 Yamaguchi: accounting section
 Yano: freshman in general affair
26
Scene 1:
call from waseda delivery
1. Yano: Hello, this is Yano, general affair section in
Waseda Hospital.
2. Yamada: Hi, this is Takada delivery calling. It
seems that one of our customer wrongly faxed her
address to your company. Could you fax it to us?
3. (after checking the fax machine.)
4. Yano: No, we haven’t received your fax.
5. Yamada: You may found it other place… Maybe in
your accounting section? If you find it, please fax it
to us at 03-1111-1111.
6. Yano: OK.
27
Scene 2:
call from Microsoft
1. Ohta: Hello, this Ohta from Microsoft customer
service. We found that your PC is sending too
much viruses on the internet, and we received
many complaints about it. Please download
the anti-virus software that I will mention and
install it on your PC.
2. Yano: Sure. Where can I find the software?
28
Scene 3:
call from other section
1.
2.
3.
4.
Tahara: This is Tahara from accounting. Could you do
me a favor?
Yamaguchi: Yes. What?
Thara: Our computers are all infected by viruses, but I
need the address of a patient, Ryoko Hirosue. Could
you call up the data on your screen and fax it to me at
accounting section?
Yamaguchi: No problem.
29
Quiz
• Did you find any security problem in the
role-play?
• Write them down.
• Describe the counter measures.
30