This website is intended to bring you the latest news, how to's, tools and resources in Information Security. Security Awareness of our Faculty, Members and Staff is key in creating a safer computing environment.
The three major Principles of Information Security, Availability, Integrity and Confidentiality, will be covered throughout the security awareness program at the Institute. For a description of these principles, please see our About section.
In keeping with the spirit of the Institute, I encourage questions and open discussions about security. And if you discover anything out of the ordinary, please feel free to bring it to my attention so that we can work together to create a more productive, safer environment.
Thanks,
Brian Epstein <security@ias.edu>
twitter: @epepepep
Submitted by ep on
Phishing is a term used to describe a scam, a malicious attempt aimed at trying to trick you into divulging sensitive information via electronic communication. One recent avenue for this type of attack is through emails appearing to come from your IT helpdesk requesting information, such as your username and password.
Submitted by ep on
http://www.krebsonsecurity.com/2010/03/would-you-have-spotted-this-atm-f...
I don't know about you, but I cringe every time I go to an ATM nowadays. "Why?" you ask. Because I've heard of a lot of reports and seen a lot of pictures of ATM skimmers. These devices attach to the front of an ATM where your card goes in. When you insert your card, they scan it as well as the ATM. Now they can create a copy of your card.
Submitted by ep on
Sometimes you might receive a fraudulent email asking you for personal information that could be used for illegal activities. A lot of people just delete the email and move on. But, what if you want to notify someone? What if the scam is very convincing and you want someone to look into it?
Here are some tips on what to do in this situation.
Have you been using the same password for years because you don't think you will ever be able to remember a new one? Are you using a password that can easily be found in a dictionary? Here is a video showing some good information on how to create a secure, yet easy to remember password.
Remember, you are the first line of defense when it comes to computer security!
Submitted by ep on
"Phishing" is a term that refers to a type of attack made against unsuspecting individuals that coerces them to divulge sensitive information.
The name comes from the word "fishing," where one casts a line or net in the water hoping to fool a fish to take the bait.
Here is an example of a phishing attempt being done over email.
This month we are greeted with an apparently innocuous postcard from the beaches of Hawaii.
The words "Would you send this postcard in the mail?" are emblazoned across the bottom.
When we flip the card over, though, we see a message from Bob to Alice which contains some curious information.
