Security Research Institute - Wanneroo Business Association

Securing your business
against cybercrime
Or surely we do not have anything
to worry about...do we?
Centre of Expertise - Security
ECU Security Research Institute
• Leading and largest Australian security
research program based at Joondalup
Campus
– Digital Forensics, Information Security, Critical
Infrastructure Security, Human Security
• We work and engage across all parts of the
community
• We are about providing a safer place for all
Australians to work, rest and play
Centre of Expertise - Security
Why am I here?
• We are conducting research into SME
cyber security readiness
• We have a survey running at
http://smesec.ecu-sri.org
• The survey will help us target training and
information for you to protect your
business from cyber criminals
Centre of Expertise - Security
Cyber criminals are easy to spot..
Centre of Expertise - Security
So do you use any of these
Centre of Expertise - Security
THE GLOBAL SCALE OF CONSUMER
CYBERCRIME 2012
• 556 MILLION VICTIMS PER YEAR
Design
Plan
• 1.5+ MILLION VICTIMS PER DAY
• 18 VICTIMS PER SECOND
Centre of Expertise - Security
Symantec – Internet Security Threat Report 2013
32%
Of Australian smartphone users have
experienced mobile cyber crime.
Design
46%
$201
Plan
Of Australians exposed overall to
cyber crime
The typical cost to a victim per
cyber incident
Centre of Expertise - Security
Norton Report: 2013 and ABS 2013
Small businesses are the engine of the
Australian economy
Cyber attacks specifically targeting SMEs doubled in 2012,
causing IT outages, data loss, and other damages
Design
80+%
Plan
of SMEs
suffer an IT security incident in the
course of a year. of businesses lost at least
$195,000 as a result of cyber attacks
30+%
Of Australian SMEs were targeted for
customer data, intellectual property and bank
account information.
$12,500
The estimated average cost of downtime for an
SME per day.
Centre of Expertise - Security
ACMA Research Snapshot May 2013
Symantec Software Inc, Cyber Security Survey,
2012
So how easy?
• Cyber security tools that breach systems
are readily downloadable
• The videos on how to use these tools are
likewise easy to find
Centre of Expertise - Security
So protecting yourself
•
•
•
•
•
•
•
Passwords
Backup
Firewall
Virus scanners
Encryption
Wireless?
Turn it OFF
Centre of Expertise - Security
Passwords
•
•
•
•
12 characters or less is WEAK
Do not use dictionary words
Do not use dates of birth
A good password is at least 12 characters
long and has combinations of letters,
numbers and punctuation!
Agpial1clahcolnp!
Or 1wltaIasootp!
Centre of Expertise - Security
Backup
• You should DO it often as needed...which
basically like your brushing your teeth is at
least once a day
• Do not leave them in the draw under your
system...take them home...
• Get a drive for each DAY of the week and
2 monthlies total cost ~ $700
Centre of Expertise - Security
Firewall
• Turn it on! On every device that has it!
• It at least will detect and respond to known
attacks and stupidity
• Turn on any logging (recording of events)
associated with the firewall
Centre of Expertise - Security
Virus Scanners
• Again low cost against the damage that
can be caused
• Update them regularly
• Every device that supports them should
have one!
Centre of Expertise - Security
Encryption
• Takes plain text and converts into encrypted
text
-----BEGIN PGP MESSAGE----Version: PGP Desktop 10.0.2 (Build 13)
Charset: utf-8
qANQR1DBwU4DcnGXooM7CFkQB/0dghq2KlQrUkALK1nP6evOGOfrNhIDu7GjG7hz5LgqeMQ6oYwPDoA1m1VLloddoa
WA44jQIkGbSunxvOh7vLmfwvCBdUZ/iXxdMGccEElZWSfWX8CdMbLW/wwShBuCN7WL+0SHNoNVUbAdXCzJzTiiV
GMrjjKT/FapOb8zFag5PUg0KrfKIxyIpMGLIkJuZ9p+BVCc3teDALU9RMidSPCbrOYVnFUGDW0Gqb2FpVsAjhS097tH
sa+IX0NnFZCI1qxKUCN1h7eJH93kaMZgPLcJXo3CRrwsEq9hI+cItGyWABqzMQ+QkktgVHM27HPR4VJAK99uFJmFi
levWGdRmnCACur3u4bMYo6Rj2s9LDtuFf72nhw0DmzoPtNTU3n/6WeH/U5Sye93wHqeWNol0UcmY2DqonF1dxLxWi
iDOUmRCWlUYyVXRJrNY29NC7QbuhLcAXiv31sVTkC7u8O67Y1BYZd+fenXDcob051G3sZg2fLyDww4Uyhv0LKtCU
rim7pZRGQ/gndtP6aheaZAQ4PgqtBlqdfNIC75HO0X5zXmHV3q4mINc0DkJH1KJeckvkN/7+GV3uArjhclyOBQxG0jRu
2adXGITT9Y1hWQjAAsXFilLSiQ/v2zWey2GlyakVmKBGYQuKG6zkDzKPlin/vZREiMoQ7K5ITjWAKVhuN+Hq0lcBYRk
lEEStl1UUe1sn1n4kghILcEHN1DzdLf6NqIJy2beHAY8nBS1HgLdbCgok1g+Y47Bo1YilqGd4Nt81bSWzlKFpDMTi1UA
RjW/Ie/IHnA2AJQmoSkU==Q82F
-----END PGP MESSAGE-----
Centre of Expertise - Security
Wireless??
• No wireless is secure
• So ? do you really need it
• To be better secured use
UTP Cat 6 cables
Centre of Expertise - Security
Turn it OFF!
• You switch off your lights in
your business, so in most
cases switch off your DSL /
Wireless router, computers
Centre of Expertise - Security
Survey so far says...
•
•
•
•
15% do not use firewalls
25% do not use virus scanners on PCs
40% use wireless/WiFi
80% people who use a mobile
phone/tablet do not use a virus scanner
Centre of Expertise - Security
Next...
• We need you to tell your friends,
associates etc go to
http://smesec.ecu-sri.org
Training FREE!
is about to begin soon
Centre of Expertise - Security
Questions
Centre of Expertise - Security