The Connections conference started with a keynote from SANS about securing the human part of your network. Lance started talking about his background in Info Security, honeypots and work with Sun Microsystems (starting originally with work in tanks in the military). “the simplest way to steal your password is to ask for it – the simplest way to infect your computer is to ask you to do it”. Technology has been very well secured – its MUCH easier to get the human users to do the work for the bad guys. The change began in August 2004 – when Service Pack 2 was release for XP with the firewall being turned on by default. This started the drop of technology based hacking and began the era of human hacking. The human OS – you have Windows, Linux and human OS’s in your network. We’ve done nothing to secure that human OS (my note: why training is so very important – it’s updating and patching the human OS in your network).
90% of malware requires human interaction (Symantec)
100% of successful APT attacks compromised the human (Mandiant)
Humans have to click a link, install a program, insert a USB stick or interact in some way to make the malware work.
Humans are bad at judging risk – we overestimate visual risks (lions and tigers, as opposed to something we can’t see) and overestimate risks when we aren’t in control (flying as opposed to driving).
“If it’s on the news, it’s probably really safe, because it almost never happens – or else it wouldn’t be news”
Social engineering – we surf and feel like we are in control (and the hack is silent and not visual at all), we underestimate the risks of getting hacked because of those two factors. You check into your hotel room, get a call from front desk to clarify a problem with your card, you give them your card number, they’ve hacked you. (real problem at Disney World resorts)
Some worms now check keyboard settings before they send out their phishy emails so that they can send out a virus email to your friends in the language that you usually use (if your keyboard is set to Spanish, they send the spanish version of the bad email to your contacts, in order to increase the likelihood that your friends will click on the link in the email).
Many trojans disguise themselves as anti-virus programs so that you not only infect yourself, but you pay $100 or so for the privilege of doing so.
Twitter and Facebook make malicious social engineering attacks easy – Twitter bots search for keywords and respond to any tweet using that keyword with a “discount” link for that particular item.
Goals of Awareness training – compliance and changing behavior. Lance concentrates on changing behavior (more powerful than mindless compliance).
The Plan: who, what and how? Who do you target for training? (employees, admin staff especially, management, IT staff (privileged access to lots of resources – make sure they don’t post router configs (for example) on public listservs, use the same password for servers that they use for their Facebook account) What do you train about? (You are the target, social engineering, email and IM, browsers, etc.). Teach people that it’s not all just about protecting the organization, it’s about protecting the employee. How to train? Use imagery, videos, newsletters – make it as fun as marketing is these days. He showed an example video that promotes security awareness (social engineering, specifically).
SANS has a video awareness library – info in handouts. Newsletters are like patches – they have to be done regularly or people forget.
Inoculation – used to measure end user awareness, used to get their attention and reinforce training. Launch a phishing email of your own (benign, of course) and see who clicked and how many were fooled. Keep doing it as your awareness campaign continues and see how the numbers go down. Start with basic email and work up to targeted emails to test users.
Presentation and newsletters that can be redistributed are available on Lance’s blog.
Categories
23 replies on “Connections — Keynote – securing the human”
Stop being the best-kept secret in your market. We put your brand on the big screen in front of your specific list of prospects on Hulu, Roku, and Live Sports. One flat rate. Total authority. No middleman fees. http://topshelfpromotion.com
Hello,
Noticed your business online and wanted to pass this along.
There’s a completely free tool that lets you get more exposure across multiple classified sites with one form.
Go here:
classifiedsubmitter.com
It’s free to use and takes less time than posting manually.
Reply if you want more ways to promote your site.
The most prepared business owners all have one thing in common. They already know their number.
Benchmarking your business borrowing power every quarter is the recommended frequency that keeps you confident and ready for unexpected cash flow challenges, emergencies, and exciting business opportunities.
Our simple 2-minute borrowing power check is used by thousands of businesses monthly to confirm their:
? Maximum funding potential ? Market rate ? Loan term options ? Payment
So you never have to guess when the need is present.
If you don’t know your number yet, it takes 2 minutes and costs nothing to find out.
Get My Number http://www.helloratesfastfunding.com
No credit impact. No obligation. No spam.
Just confidence in how your business can work for you.
Ryan
Senior Business Funding Advisor, HelloRates
Hi,
I just visited rhastings.net and wondered if you’ve ever considered an impactful video to advertise your business? Our videos can generate impressive results on both your website and across social media.
Our prices start from just $195 (USD).
Let me know if you’re interested in seeing samples of our previous work.
Regards,
Joanna
Hi there,
I’m giving away something valuable 100% free…
No gimmicks.
Hit this link to enter now before it fills:
https://suniljaindvg.systeme.io/6850adaf
~10 seconds tops.
Might be yours.
Jump in now.
If you no longer wish to receive communications from me, please use the form on my site
Turn your dead leads into live clients
Your database of previous leads gathering dust is a gold mine. We use those old lead lists and show your professional commercials directly to those homeowners on their living room TVs.
Our Wealth Filter automatically filters out neighborhoods that can’t pay, ensuring your money only targets homeowners who can actually pay.
It’s a simple flat rate with zero management fees. 100% of your spend buys showing your ads to your best prospects.
Check your area here:
topshelfpromotion.com
Convert your old quotes into TV ads
That list of old customers gathering dust is found money. We use those “dead” emails and broadcast your TV ads directly to those homeowners on their living room TVs.
Our system blocks low-income areas, making sure your budget only targets wealthy clients.
It’s a simple flat rate with no hidden middleman costs. 100% of your spend goes directly toward your inventory to your target customers.
See if your market is still available:
http://topshelfpromotion.com
Hi,
Thought this might be useful for your website.
I wanted to share a free resource that helps you get seen on more platforms across multiple classified sites with no manual posting.
If you want to get listed quickly, here’s the site:
classifiedsubmitter.com
It’s a free traffic booster and takes seconds.
If you want, I can show you more free ways to get visibility.
Hello,
Found your site and wanted to share this.
There’s a 100% free tool that lets you get more exposure across multiple classified sites with just a few clicks.
Here’s the link:
classifiedsubmitter.com
It’s totally free and takes seconds.
I can send more free traffic resources.
That list of old customers and past quotes sitting in your database is a gold mine. We take those “dead” emails and show your professional commercials directly to those homeowners on their living room TVs (and we produce those commercials for free).
Our system automatically filters out low-income areas, ensuring your budget only targets the high-ticket jobs you actually want.
It’s one flat rate with zero management fees. Every dollar you spend goes directly toward showing your ads to your best prospects.
Want to see if your service area is open? http://www.topshelfpromotion.com
Send us your business photos or phone videos and we will edit them into a high-end TV commercial for free. We then broadcast that ad to your target lead list on the most watched channels in the country. https://topshelfpromotion.com
Hi,
Noticed your business online and wanted to pass this along.
There’s a completely free tool that lets you boost your visibility across multiple classified sites with just a few clicks.
Here’s the URL:
https://classifiedsubmitter.com
It’s a free traffic booster and takes under a minute.
Happy to share more free exposure tools.
Hello,
Came across your site and figured this was worth sending.
There’s a completely free tool that lets you get more exposure across multiple classified sites with one form.
Go here:
http://www.classifiedsubmitter.com
It’s totally free and takes seconds.
Reply if you want more ways to promote your site.
Quick note,
Found your site and wanted to share this.
There’s a free tool that lets you boost your visibility across multiple classified sites with a single submission.
Here’s the link:
http://www.classifiedsubmitter.com
It’s a free traffic booster and takes less time than posting manually.
Reply if you want more ways to promote your site.
Tired of paying for leads that can’t afford to pay for your services? Our Wealth Filter automatically blocks low-income areas so your ads only reach homeowners who sign for high-ticket items. Check your area availability at the link below. http://www.topshelfpromotion.com
Hey,
Found your site and wanted to share this.
There’s a free tool that lets you promote your site across multiple classified sites with a single submission.
Check this out:
classifiedsubmitter.com
It’s free to use and takes under a minute.
I can send more free traffic resources.
Hello,
Noticed your business online and wanted to pass this along.
There’s a 100% free tool that lets you boost your visibility across multiple classified sites with just a few clicks.
Here’s the URL:
classifiedsubmitter.com
It’s a free way to get exposure and takes under a minute.
Happy to share more free exposure tools.
Stop being the best-kept secret in your market. We put your brand on the big screen in front of your specific list of prospects on Hulu, Roku, and Live Sports. One flat rate. Total authority. No middleman fees. http://topshelfpromotion.com
Dominate every screen your prospects look at. We follow your target list from their living room TV to the smartphone in their pocket. We even edit your professional commercial for free. Check your area availability here: http://topshelfpromotion.com
Hey,
AI is learning your competitors before it learns you
The businesses moving early are using AI to:
– Respond to customer questions instantly
– Capture leads automatically
– Identify serious buyers faster
– Handle repetitive support
– Replace friction on websites
Most businesses are still asking visitors to:
– “Browse pages”
– “Click menus”
– “Submit forms”
That way of handling visitors is becoming outdated fast.
The companies training AI now are building tomorrow’s customer-attention advantage.
Visitors do not want to hunt through a website. They want to ask and get answers.
And businesses that cannot respond instantly will lose to businesses that can.
See it in action:
https://theolleh.com
Warm Regards,
— Allan Clinton
The Olleh AI
When you decide not to receive future emails from us, just fill the form at bit. ly/fillunsubform with your domain address (URL).
Piazza Indipendenza 138, Cairo, CA, USA, 92598
Are you looking for more traffic and customers for your website?
Having no traffic means lost sales daily. If you don’t have visitors, you are losing business to your competitors and losing potential profits.
Stop missing out. Get the visitors you deserve now::http://utraker.com/JNbzf
To unsubscribe, please reply with subject: Unsubscribe !rhastings.net
Are you interested in getting a custom quote for bulk proxy orders?
https://fas.st/t/4Sd3661X?dtz
Hi,
I just visited rhastings.net and wondered if you’ve ever considered an impactful video to advertise your business? Our videos can generate impressive results on both your website and across social media.
Our prices start from just $195 (USD).
Let me know if you’re interested in seeing samples of our previous work.
Regards,
Joanna
Unsubscribe: https://unsubscribe.video/unsubscribe.php?d=rhastings.net