Welcome to the OCS Resources Page

This section of our website is designed to provide you with a good foundation for cyber awareness.  Sometimes the most simple precautions can be the most effective.

100 Attacking IP Addresses

Top 50 Ports Under Attack

Specific Topics:

User IDs and Passwords
Home Computer Protection
Protecting your Information
Firewalls
Malicious Code Protection
Mobile Computing Security
Wireless Security
Patching
Possible Symptoms of a Compromised Computer
Security Breaches

User IDs and Passwords

Your user ID is your identification, and it's what links you to your actions on the system. Your password authenticates your user ID. Protect your ID and password. Remember, generally, you are responsible for actions taken with your ID and password. Follow these best practices:

Home Computer Protection

Properly safeguarding your personal computer (PC) is one of the most important ways of protecting your information from corruption or loss.

Protecting your Information

During an emergency or disruption, critical information -- the information necessary to run your organization's systems, record activities or satisfy legal and/or business requirements -- may be damaged. The best way to protect information is to copy it and store it in a secure location.

Firewalls

Any machine connecting to the Internet should utilize a firewall. There are two types of firewalls. Software firewalls usually run on PCs. Hardware firewalls are separate devices designed to efficiently protect computers. They are usually used by businesses, organizations, schools and governments. All firewall protection creates a barrier between the computers and the Internet. Firewalls should be configured to filter out unauthorized or dangerous information and prevent intruders from scanning and retrieving personal or sensitive information from the computer. Periodically check your firewall manufacturer's web site for product updates and patches.

Malicious Code Protection

Malicious code can take forms such as a virus, worm or Trojan. It can hide behind an infected web page or disguise itself in a downloadable game, screen saver or email attachment.

Computer viruses are programs that spread or self-replicate. They usually require interaction from someone to be activated. The virus may arrive in an email message as an attachment or be activated by simply opening a message or visiting a malicious web site. Some viruses consume storage space or simply cause unusual screen displays. Others destroy information. If a virus infects your PC, all the information on your hard drive may be lost and/or compromised. Also, a virus in your PC may easily spread to other machines that share the information you access.

Viruses can exhibit many different symptoms. If your computer behaves erratically, employees are advised to contact their organization computer support representative. At home, disconnect the PC from the Internet and run a full virus scan.

Worms are similar to viruses because they self-replicate, however, they do not require any user interaction to be activated. Worms spread because of vulnerabilities or "holes" in software.

Trojans (also known as backdoors) are malicious code hidden in a legitimate program that, when executed, performs some unauthorized activity or function. This can range from stealing your password and credit card information to allowing someone to take control of your computer. To prevent installation of Trojans on your machine:

A denial-of-service attack is an assault upon a network or web site that floods it with so many additional requests that regular services are either slow or completely interrupted. In some instances, a group of remotely controlled, compromised desktops are combined to jointly attack a target system.

Spyware and related "adware," are software sometimes downloaded from a web page, by following a link in an email or are installed with freeware or shareware software without the user's knowledge. Spyware is used to track your Internet activity, redirect your browser to certain web sites or monitor sites you visit. Spyware may also record your passwords and personal information to send to a malicious web site.

Hoaxes are email messages that resemble chain letters, offer free money, or contain dire warnings and offers that seem to be too good to be true. If you receive a hoax via email, delete it. Sharing hoaxes slows down mail servers and may be a cover for a hidden virus or worm.

Mobile Computing Security

Computers are now accessible via a variety of means. A person can even download data from the Internet to a cell phone. While convenient and fun to use, some good practices will help protect your information.

Laptops, PDAs and Cell Phones are more easily stolen or misplaced because of their size. Remember, if your laptop is gone, your data is too. Small computer devices carry information that must be protected.

If you use a laptop, remember the following:

Treat all your portable devices in the same careful manner you use with your laptop and keep an eye on them.

Wireless Security

Wireless networks and laptops are very popular for their ease of use and portability. The Internet can be reached via radio waves without having to plug your machine into a network. It is with the same ease of connecting that malicious individuals connect to unprotected networks. Attackers conduct drive-by eavesdropping, called "war driving" to listen in on unsecured devices in homes and businesses. Take the following steps to secure any wireless equipment. Consult your equipment's manual for specific details.

Remote Access allows users to access data from outside locations using dial-up equipment and public telephone lines or cellular/wireless phones on the Internet. Because this form of access is designed for off-site use that may extend after normal business hours, extra measures are required to prevent unauthorized access.

Social Engineering is an approach to gain access to information through misrepresentation. It is the conscious manipulation of people to obtain information without their realizing that a security breach is occurring. It may take the form of impersonation via telephone or in person and through email. Some emails entice the recipient into opening an attachment that activates a virus.

Phishing is a scam in which an email message directs the email recipient to click on a link that takes them to a web site where they are prompted for personal information such as a pin number, social security number, bank account number or credit card number. Both the link and web site may closely resemble an authentic web site however, they are not legitimate. If the phishing scam is successful, personal accounts may be accessed. If you receive one of these emails:

Patching

People are constantly finding security holes (i.e. vulnerabilities) in computer software which could be used to infect your computer with a virus, spyware or worse. When vulnerabilities are discovered, the software vendor typically issues a fix (i.e. patch) to correct the problem. This fix should be applied as soon as possible because the average time for someone to try to exploit this security hole can be as little as a few days.

Possible Symptoms of a Compromised Computer

Is your machine:

Is your organization:

Home users may wish to call their ISP and/or anti-virus vendor.

Security Breaches

Security breaches can take several forms. The best defense against security breaches are conscientious and alert users. You are the most important person for early detection and prevention. Examples of breaches include:

If you discover a security breach, you should report the breach to your Information Security Officer or manager immediately.

Credits

Thank you to the New York State Cyber Security and Critical Infrastructure Coordination working group for this information.