Data data every where!! Thomas O'Grady

Post on 15-Jan-2015

140 views 1 download

Tags:

description

Security and ethics presentation NUI Galway 2012

Transcript of Data data every where!! Thomas O'Grady

Data Data every where!!

Security and ethics Thomas O’Grady 07398051Brian Stewart 08883696

Last Year...............

Sony's PS3 network was hacked leading to one of the greatest leaks in history.......

Over 77 million customers account details where hacked.

US government also claimed involvement in a massive breach in 2011 involving Social Securitynos.

Will Anonymous be one of the many hackers that take control?

Their rise to fame could indicate so!

Could Facebook be their next target?

MalwareIs becoming a major problem..within the hospitality and financial services

sector

In 2010 SQL coding accounted for 80% of breaches

It can come in many forms....

Types includeAdware

Spyware

Hijackers

Toolbars

Dialers

In a 2010 reportOver 71 % of Hacking attacks where carried

out on remote access and desktop services.

This motive was carried out via the vendors authentication

Other attacks include Social, Misuse and Physical

In a 2010 US Data Breach Study43% of companies told victims of breach

within one month of happenings

For the first time on record, malicious attacks are their highest cause financially

Awareness programs are the best solutions, yet encryption is gaining ground.

In 2010 Breaches Increased by 7%

Data breaches cost in the region of $214 for each record.

With the most costly one being in the region of $35.3 million to resolve

That’s a lot of money, especially for smaller firms

Organisations have begun to be more proactive in minding themselves from breach attacks.

In 2010 we seen an increase in the US in organisations reacting more sufficiently under a month period together with companies investing in better IT security structure

Companies have invested heavily in fixing data breaches imposed which is appearing to pay off sufficiently.

Do we know the people who have access to our details?

Cover ups by business’s and disclosure of personal details have in industries in the US such as Technology and Education.

?

Should the FBI or have they clamped down significantly implement massive fines for breach?

Sen Leahy thinks so.....

With companies facing up to 5 years Imprisonment

What about Laws in Ireland?

Data Commissioner feels resources just aren't there!

The Current Economic climate in Ireland doesn't make things any better!

Social networking has become an area of concern for the Data Commissioner to control

Should we worry?

With a rise in breaches in the Republic by 350% in 2010 data commissioner feels it has become a problem

Croke park was also at the centre of controversary with a massive breach of its database of up to 500,000 members

Going Forward how can it be prevented?

Secure all data in the intranet especially with administrator.

Inhibit copying of Resources eg. USB, CD Burning.Have Knowledge of your Intruder or potential ones.Use a Proxy server for both internal and external

with a Linux server connecting themEnsure the server is constantly kept up to date and

maintainedThrow caution with SQL servers with excellent

passwords and encryption installed

But the question Remains?

The elephant in the room is whether breaches are going to get bigger and redevelop over time