1 / 32

Identity Theft

Privacy and Identity Theft in the 21st Century Chattahoochee Valley Community College April 2008 http://csc.colstate.edu/summers/Research/privacy-in-the-21st-century.ppt. Identity Theft. Citibank Identity Theft commercial - Darrel P. Babe Magnet- Identity Theft Commercial Thelma and Norma

porter
Télécharger la présentation

Identity Theft

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Privacy and Identity Theftin the 21st CenturyChattahoochee Valley Community CollegeApril 2008http://csc.colstate.edu/summers/Research/privacy-in-the-21st-century.ppt

  2. Identity Theft • Citibank Identity Theft commercial - Darrel P. • Babe Magnet- Identity Theft Commercial • Thelma and Norma • Citibank - Computer Geek • Citibank identity theft commercial - underpants on • Digital Armageddon • Citibank Identity Theft commercial - Darrel P. • Babe Magnet- Identity Theft Commercial • Thelma and Norma • Citibank - Computer Geek • Citibank identity theft commercial - underpants on • Digital Armageddon Columbus State University

  3. OUTLINE • Definitions • ID Theft & Privacy Issues • Future ID Theft & Privacy Issues • Regulations • Safe Guards • Q&A

  4. Privacy (Confidentiality) Limiting who can access your information.

  5. Identity Theft Using another’s identity for ones benefit (usually financial gain) • social security number • credit card account numbers • date of birth • driver’s license • passport • mother’s maiden name • addresses

  6. Social Engineering “getting people to do things that they wouldn’t ordinarily do for a stranger” – The Art of Deception, Kevin Mitnick

  7. Definitions • Spyware - computer software installed on a computer to intercept the user's activities on the computer, without the user's informed consent. • Phishing - attempt to fraudulently acquire sensitive information by masquerading as a trustworthy entity. • Botnets - collection of software robots (bots), which run autonomously and automatically on groups of remotely controlled zombie computers.

  8. Vulnerabilities • How many of you access the Internet from home? • Wireless networks are rapidly becoming pervasive. • How many of you have web-enabled cell phones? • How many of you have networked PDAs? • How many of you have wireless networks at work? at home? • How many of you use wireless networks when you are “on the road”? Columbus State University

  9. ID Theft News • March 28, 2008 (Computerworld) “Hannaford Bros. Co. disclosed this week that the intruders who stole up to 4.2 million credit and debit card numbers from the grocer's systems did so by planting malware programs on servers at each of its stores in New England, New York and Florida.” • March 24, 2008 (Computerworld) “Unencrypted medical information of about 2,500 participants in a cardiac study conducted by the National Heart, Lung and Blood Institute (NHLBI) may have been compromised by the theft of a laptop PC last month.”

  10. ID Theft News • March 2008 (Newsmax.com) “Criminals who seize control of tens of thousands of home and office computers through what are known as "botnets" are a dramatically growing threat, Shawn Henry, deputy assistant director of the FBI’s Cyber Division, tells Newsmax.” “Since last spring, the FBI has arrested 11 individuals who allegedly infected and commandeered 1 million personal computers and turned them into robots that did their bidding, Henry says. “ • April 2008 (AARP Bulletin) “But already scammers are contacting targets by phone, saying they represent the IRS, and explaining that they can direct-deposit rebates right away—if the victim coughs up a bank account number on the spot.”

  11. PayPal Phishing Site Arrives as Attachment

  12. E-mail from "Microsoft“ security@microsoft.com SUBJECT: {Virus?} Use this patch immediately ! Dear friend , use this Internet Explorer patch now! There are dangerous virus in the Internet now! More than 500.000 already infected!

  13. “You have zero privacy anyway. Get over it.” (Scott McNealy, CEO, Sun Microsystems, 1999) Columbus State University

  14. Who is Wayne Summers? • Google.com • http://csc.colstate.edu/summers/ (resume) • Math geneology • Naymz.com • Linked.com • Blogger.com • peoplefinders.com • Age, Cities, parents, spouse, and children’s names & ages

  15. peoplefinders.com • Comprehensive Background Report • Name: SUMMERS, WAYNE • Everything you need to know, all in one report. • Aliases & Maiden Names • Birth Date • Address History • Phone Numbers • Marriages & Divorces • Relatives & neighbors • Property ownership • and much more... • $39.95 • Click below to find out how to get this product for FREE.

  16. Who is Wayne Summers? • Whitepages.com • Work address • Columbus Tech • Home address • Map of neighborhood • Neighbors & home values (zillow.com)

  17. Addresses.com AnyWho.com Google InfoSpace Intelius MySpace PeopleFinders.com PublicRecordsNow.com USA People-Search US Search WhoWhere.com Yahoo! ZabaSearch ZoomInfo Other personal data websites

  18. Future ID Theft & Privacy Issues • Minority Report Scene Gap Store (16 sec) • Minority Report Mall Scene (36 sec) • April 9, 2008 (Computerworld) “RFID keeps tabs on Vegas bartenders -- and soon could track you too” • “The Smart Card Alliance isn't too keen on proposed enhanced driver licenses that the Department of Homeland Security is working on with several states bordering Canada and Mexico. The long range-reading RFID technology suggested by DHS raises privacy, security, and operational functionality issues, says the alliance.”

  19. Future ID Theft & Privacy Issues • March 28, 2008 (IDG News Service) “Spying programs for mobile phones are likely to grow in sophistication and stealth as the business of selling spying tools grows, according to a mobile analyst at the Black Hat conference on Friday…. Neo-Call is capable of secretly forwarding SMS (Short Message Service) text messages to another phone, transmitting a list of phone numbers called, and logging keystrokes. FlexiSpy has a neat, Web-based interface that shows details of call times, numbers and SMS messages, and it can even use a phone's GPS receiver to pinpoint the victim's location.” • April 9, 2008 (Washington Times) “D.C. police set to monitor 5,000 cameras.”

  20. Mediacom Online home watch

  21. “Privacy is the future. Get used to it.” (Marc Rotenberg, Director, Electronic Privacy Information Centre - EPIC) (Fortune, 2001).

  22. Regulations • Privacy Act of 1974 • “No agency shall disclose any record which is contained in a system of records by any means of communication to any person, or to another agency, except pursuant to a written request by, or with the prior written consent of, the individual to whom the record pertains... “ • Computer Matching and Privacy Protection Act of 1988 • Health Insurance Portability and Accountability Act of 1996 (HIPAA) • Family Educational Rights and Privacy Act (FERPA)

  23. Regulations • Financial Modernization Act of 1999["Gramm-Leach-Bliley Act" or GLB Act]: protect consumers’ personal financial information held by financial institutions. • Public Company Accounting Reform and Investor Protection Act of 2002 [“Sarbanes-Oxley Act “]:establishes new or enhanced standards for all U.S. public company boards, management, and public accounting firms.

  24. Safe Guards • E-mail • should be considered like a postcard • Don’t transmit personal data unless it is encrypted • Social networks (Facebook, Myspace) are open to others • Don’t post personal data that could be used for identification • Don’t post anything you would be ashamed of Columbus State University

  25. What Else Can You Do? • Do not give your personal information out over the phone or Internet. • Take all outgoing mail to a U.S. Postal Service mail box. • Use a P.O. Box for all incoming mail. • Buy a document/credit card/CD crosscut shredder.

  26. Credit Security • Use one credit card exclusively for Internet purchases. • Monitor activity on all credit cards closely. • Checking your credit history at least twice a year. • Your can buy identity theft recovery insurance.

  27. Computer Protection • Properly configure all devices • Install firewalls, antivirus, anti-spyware • Monitor logs • Removed unneeded cookies • Do not enter personal information on a website over a non-encrypted connection • Keep patches up to date Institute of Management Accountants

  28. Home Network • how many of you: • protect your wireless device with a password? • encrypt the data in your wireless device? • employ any type of security with your wireless device? • employ security with your wireless network? Columbus State University

  29. Who to contact • Equifax: 1-800-525-6285 www.equifax.com • Experian: 1-888-397-3742 www.experian.com • TransUnion: 1-800-680-7289 www.transunion.com • http://www.ftc.gov/idtheft • www.ftc.gov/credit • www.lookstoogoodtobetrue.com/ • www.identitytheft.org/ • www.privacyrights.org/index.htm

  30. Conclusions • “Security is, I would say, our top priority because for all the exciting things you will be able to do with computers.. organizing your lives, staying in touch with people, being creative.. if we don't solve these security problems, then people will hold back. Businesses will be afraid to put their critical information on it because it will be exposed.” Bill Gates Columbus State University

  31. Columbus State University

  32. Q & A Dr. Wayne SummersTSYS Department of Computer ScienceColumbus State UniversitySummers_wayne@colstate.eduhttp://csc.colstate.edu/summers

More Related