online social networks - spylogic.netspylogic.net/downloads/online_social_networks.pdf · think...
TRANSCRIPT
![Page 1: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/1.jpg)
Online Social Networks
5 threats and 5 ways to use them safelyPhoto provided by http://flickr.com/photos/luc/1804295568/ via GNUCITIZEN
![Page 2: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/2.jpg)
What are Online SocialNetworks?
Online community of Internet users Users share common interests
− Hobbies− Religion− Politics− Friends− Schools
Multiple ways for users to interact such aschat, messaging, email, video, voice chat, filesharing, blogging, discussion groups...
![Page 3: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/3.jpg)
Who uses Online SocialNetworks?
Most popular with“Generation-Y”
“Teens and Tweens” “Generation-X” and
older is the latesttrend
![Page 4: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/4.jpg)
Most Popular Social NetworkingWeb Sites
![Page 5: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/5.jpg)
Top 5Threats to Online Social Networks
![Page 6: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/6.jpg)
#1Cyberbullying, stalking, and sexual predators
Teens bashing other teens... Megan Meier suicide MySpace released a report in 2007 showing
29,000 registered sex offenders on MySpace
![Page 7: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/7.jpg)
#2 Vulnerabilities in Applications/Widgets
Widgets, third-party applications XSS (Cross Site Scripting) Samy/Quicktime Malicious banner ads/background images (Alicia
Keys’) Be careful! Some applications will override privacy
settings!
From the blog post: “Invading the Space: Alicia Keys’ MySpace and… RBN?”http://blog.trendmicro.com/invading-the-space-alicia-keys-myspace-and-rbn/
![Page 8: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/8.jpg)
#3 Spear Phishing and SPAM
Fake “friend requests” Emails that look like they are legitimate!
Screen shot courtesy of Paul Asadoorian, pauldotcom.com
![Page 9: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/9.jpg)
#4 Collection and aggregationof personal data
Most privacy policies are very vague Think about it...$35 per user when MySpace
was sold to News Corp in 2005 Sites like Plaxo aggregate all of these social
networks together
The following is an example of a privacy statement:
“[SNS Provider] also logs non-personally identifiableinformation including IP address, profile information,aggregate user data, and browser type, from users andvisitors to the site. This data is used to manage thewebsite, track usage and improve the website services.This non-personally-identifiable information may beshared with third-parties to provide more relevantservices and advertisements to members.”
- From the ENISA position paper “Security Issues andRecommendations for Online Social Networks
![Page 10: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/10.jpg)
#5 Evil Twin Attacks
Fake profiles Reputation slander Corporate espionage (LinkedIn) Weak authentication of the user (are you who
you say you are?)
Chris Pirillo by Alan Berner - The Seattle Times
![Page 11: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/11.jpg)
Top 5Ways to Safely use
Online Social Networks
![Page 12: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/12.jpg)
#1 Set appropriate privacydefaults
All Social Networking sites have wide-openprivacy defaults!
![Page 13: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/13.jpg)
#2 Be careful with third-partyapplications/widgets
Some of these applications will overrideprivacy settings
Example: “Secret Crush” Facebookapplication− Installed adware “worm”
Photos from Fortinet: http://www.fortiguardcenter.com/advisory/FGA-2007-16.html
![Page 14: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/14.jpg)
#3 Limit personal information
Don’t post your full name, SSN, address...etc... Be cautious about posting information that
could be used to identify you or locate youoffline
Careful with choosing an online alias and whatit says about you
“The more info you share, the more valuable you are”
![Page 15: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/15.jpg)
#4 Only accept friendrequests/connections from people
you know directly Most are SPAM Most are bots that want to trick you! LinkedIn
− Be aware of corporate espionage!
![Page 16: Online Social Networks - SpyLogic.netspylogic.net/downloads/online_social_networks.pdf · Think about it ...$35 per user when ... Recommendations for Online Social Networks #5 Evil](https://reader035.vdocuments.net/reader035/viewer/2022062603/5f08f3947e708231d424845d/html5/thumbnails/16.jpg)
#5 Only post information your motheris comfortable seeing!
Anyone can view these photos includingemployers, friends, and enemy's
Don't trust a private profile!
“Use common sense!”