security, you are also part of the game
DESCRIPTION
Data is a big thing now a days. Data is everywhere. Data is collected on almost as many places. And a lot of people want to access your data. But why exactly is your data important? What can people / companies do with it? How can I keep my data safe. or that of my company? How do criminals get to your data? and most importantly, what can you do to avoid the fact that they steal your data?TRANSCRIPT
![Page 1: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/1.jpg)
Open solutions, smarter people
Security
You are also part of the game
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.
![Page 2: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/2.jpg)
Open solutions, smarter people
Who is that guy?
• Bert Desmet• 23 years old• Fedora – Ambassador, mentor, packager• Loadays – Co organizer • Numius – System Engineer, Consultant • Devnox – Developer, System Engineer
![Page 3: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/3.jpg)
Open solutions, smarter people
Today's topics
• I'm a good hacker.• Why I love USB sticks.• Remember your password? • Shhhhhhht!
![Page 4: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/4.jpg)
Open solutions, smarter people
I am a good hacker.
![Page 5: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/5.jpg)
Open solutions, smarter people
No tech hacking?
![Page 6: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/6.jpg)
Open solutions, smarter people
Shoulder surfing
![Page 7: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/7.jpg)
Open solutions, smarter people
Dumpster diving
![Page 8: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/8.jpg)
Open solutions, smarter people
Social engineering
![Page 9: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/9.jpg)
Open solutions, smarter people
Taking pictures
![Page 10: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/10.jpg)
Open solutions, smarter people
Why I love USB sticks.
![Page 11: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/11.jpg)
Open solutions, smarter people
They are easy
![Page 12: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/12.jpg)
Open solutions, smarter people
And small
![Page 13: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/13.jpg)
Open solutions, smarter people
They are easily..
• Forgotten • Stolen
![Page 14: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/14.jpg)
Open solutions, smarter people
Some thoughts about it
• Encrypt your sensitive data• Never put passwords on your system• Use the intranet • Never leave your portable gear alone• Never forget your gear
![Page 15: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/15.jpg)
Open solutions, smarter people
Some statistics
• 53% of UK workers lost portable devices– >50% at a drinking venue
• Taxis and public transport
• 1 lost data record cost more than $187– 70% indirect cost
• Lost costumers
![Page 16: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/16.jpg)
Open solutions, smarter people
Remember your password?
![Page 17: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/17.jpg)
Open solutions, smarter people
How to choose a password
• Avoid using dictionary words• Use special characters and numbers• Change your password every month • Blah blah blah
![Page 18: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/18.jpg)
Open solutions, smarter people
How to choose a password
• Avoid using dictionary words• Use special characters and numbers• Change your password every month • Blah blah blah
![Page 19: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/19.jpg)
Open solutions, smarter people
Entropy
• H : Entropy• N : Possible symbols• Length of string
H=L∗log2 N
![Page 20: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/20.jpg)
Open solutions, smarter people
Example time!
• This is.obviously a.bad passw0rd:-(– L : 35– W : 94 – H : ±230
• PrXyc.N(n4k77#L!eVdAfp9– L : 23– W : 94– H : ±151
![Page 21: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/21.jpg)
Open solutions, smarter people
Time to crack a password
• [[Guesses before string is found = 2H]]• This is.obviously a.bad passw0rd:-(
– 2230 = 1.72543659 × 1069– 1000 guesses /s = 5.5 x 1058 years
• PrXyc.N(n4k77#L!eVdAfp9– 2151 = 2.85449539 × 1045– 1000 guesses /s = 9 × 1034 years
![Page 22: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/22.jpg)
Open solutions, smarter people
Password Strenght
![Page 23: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/23.jpg)
Open solutions, smarter people
Lastpass
• Fully encrypted • Generate extremely hard passwords • Choose a good master password!
![Page 24: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/24.jpg)
Open solutions, smarter people
Some tips
• Never store passwords on pc • Never use autologin
![Page 25: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/25.jpg)
Open solutions, smarter people
Shhhhhhhht!
![Page 26: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/26.jpg)
Open solutions, smarter people
I want you to shut up!
![Page 27: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/27.jpg)
Open solutions, smarter people
Security through obscurity
• Don't tell anyone • Security based on secrecy
![Page 28: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/28.jpg)
Open solutions, smarter people
Kerckhoffs' doctrine
• Security can't depend on secrecy
![Page 29: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/29.jpg)
Open solutions, smarter people
Reality
• There are always leaks – By accident – Deliberately
• Try to keep 'secrets'
![Page 30: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/30.jpg)
Open solutions, smarter people
Wait! There is more!
![Page 31: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/31.jpg)
Open solutions, smarter people
In a perfect world..
![Page 32: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/32.jpg)
Open solutions, smarter people
There is always a hole.
![Page 33: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/33.jpg)
Open solutions, smarter people
I like onions
![Page 34: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/34.jpg)
Open solutions, smarter people
Multi Level Security
• Multiple systems • Building fort Knox • You are the first line of defense
![Page 35: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/35.jpg)
Open solutions, smarter people
Extra! Extra!
![Page 36: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/36.jpg)
Open solutions, smarter people
Something you have..
![Page 37: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/37.jpg)
Open solutions, smarter people
Yubikey
![Page 38: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/38.jpg)
Open solutions, smarter people
I preach.And I practice.
![Page 39: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/39.jpg)
Open solutions, smarter people
Questions?
• Bert Desmet• Security, you are also part of the game
• Mail: [email protected]• Twitter: @bdesmet_• Website: http://blog.bdesmet.be• Website: http://www.devnox.eu • This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.
![Page 40: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/40.jpg)
Open solutions, smarter people
Sources• Chess game: http://www.flickr.com/photos/seeminglee/1479932683/
• Closed vault: http://www.flickr.com/photos/mstyne/3654056683/
• Open vault: http://www.flickr.com/photos/spotsgot/156025944/
• Onion: http://www.flickr.com/photos/inferis/107293622/
• Laptop + usb stick: http://www.flickr.com/photos/wstryder/2780310027/
• New York Public Library: http://www.flickr.com/photos/paul_lowry/2616820493/
• Statistics on loosing gear: http://www.securestix.com/bad_news.php
• Shoulder surfing: http://www.flickr.com/photos/bonzoesc/209474964/
• Dumpster: http://www.flickr.com/photos/urbanjacksonville/1803065217/
• Telephone call: http://www.flickr.com/photos/lst1984/994531885/
• Taking pictures: http://www.flickr.com/photos/glenpooh/708845839/
• Xkcd joke: http://xkcd.com/936/
• Shut up: http://www.flickr.com/photos/lorenia/934705558/
• 3way handhake: http://media.photobucket.com/image/3%20way%20handshake/Haley_Bug/Mission%20Trip%20Choir%20Tour%202006/100_0087.jpg?o=1
• Yubikey: http://www.flickr.com/photos/thofle/3206443137/
• Special thanks to: Johnny Long
![Page 41: Security, you are also part of the game](https://reader033.vdocuments.net/reader033/viewer/2022060110/555c0ad4d8b42ad77e8b48f8/html5/thumbnails/41.jpg)
Open solutions, smarter people