Protecting yourself: apps, methods, practices Week 6 Frank Chen | - - PowerPoint PPT Presentation

▶
protecting yourself apps methods practices
SMART_READER_LITE
LIVE PREVIEW

Protecting yourself: apps, methods, practices Week 6 Frank Chen | - - PowerPoint PPT Presentation

Aug 14, 2022 22 likes •493 views

Yubikey, a physical key that provides 2-factor authentication CS 88S Protecting yourself: apps, methods, practices Week 6 Frank Chen | Spring 2017 Frank Chen | Spring 2017 Agenda WireShark Demo, Final Project Review last weeks

slide-1
SLIDE 1

Frank Chen | Spring 2017 Frank Chen | Spring 2017

CS 88S

Protecting yourself: apps, methods, practices

Week 6

Yubikey, a physical key that provides 2-factor authentication

slide-2
SLIDE 2

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-3
SLIDE 3

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-4
SLIDE 4

Frank Chen | Spring 2017

YouTube Phish

Source: http://bit.ly/2pIoWQW

slide-5
SLIDE 5

Frank Chen | Spring 2017

Google Docs Phish

Source: http://bit.ly/2pIoWQW

slide-6
SLIDE 6

Frank Chen | Spring 2017

Google Docs Phish

Source: http://bit.ly/2pIoWQW

slide-7
SLIDE 7

Frank Chen | Spring 2017

Wireshark Demo

slide-8
SLIDE 8

Frank Chen | Spring 2017

Final Project

Image Source: http://bit.ly/2pIoWQW

kfrankc.me/cs88s/final_project.pdf

slide-9
SLIDE 9

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-10
SLIDE 10

Frank Chen | Spring 2017

1 2 3 4 5 6 7

What happens when you type www.google.com?

slide-11
SLIDE 11

Frank Chen | Spring 2017

Symmetric Key

Source: http://bit.ly/1I2YUeS

Key used to unlock and lock the drawer

slide-12
SLIDE 12

Frank Chen | Spring 2017

Public/Private Key

Image Source: http://bit.ly/1I2YUeS

Private Key turns

  • nly clockwise

Public Key turns only counter-clockwise

slide-13
SLIDE 13

Frank Chen | Spring 2017

Virtual Private Network (VPN)

You

Internet Service Provider (ISP) Websites, Resources

VPN Tunnel

Source: http://bit.ly/2qBrNZh

slide-14
SLIDE 14

Frank Chen | Spring 2017

cybersecurity ✔ protect myself ✘ hack ✔ privacy ✘ money, personal contact, identification ✔ extra (security in IoT devices) ✘

So Far...

slide-15
SLIDE 15

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-16
SLIDE 16

Frank Chen | Spring 2017

HTTP

Def: HTTP (Hypertext Transfer Protocol) is the procedure for exchanging information on the Internet It is easy to intercept

slide-17
SLIDE 17

Frank Chen | Spring 2017

How secure is HTTP?

✘ ✘ ✘

Authentication Integrity Privacy

slide-18
SLIDE 18

Frank Chen | Spring 2017

HTTPS, abridged

Source: http://bit.ly/2qEPNyc

slide-19
SLIDE 19

Frank Chen | Spring 2017

HTTPS, abridged

Def: HTTPS is HTTP over Secure Socket Layer. HTTPS encrypts an HTTP message prior to transmission and decrypts a message upon arrival via SSL Transaction.

slide-20
SLIDE 20

Frank Chen | Spring 2017

SSL Transaction

***Note: To further understand the relationship between SSL and HTTP, you'll first need to understand the OSI model of Computer Networks, which is out of the scope of this class.

Browser

Generate Public Key using RSA Algorithm

Server

Encrypt data using Browser's public key Give Server Public Key Send back to Browser

Browser

Decrypt data using its

  • wn private key

Source: http://bit.ly/2pTzoTY

slide-21
SLIDE 21

Frank Chen | Spring 2017

SSL Transaction

Image Source: http://bit.ly/2qoE6w9

slide-22
SLIDE 22

Frank Chen | Spring 2017

How secure is HTTPS?

✔ ✔ ✔

Authentication Integrity Privacy

slide-23
SLIDE 23

Frank Chen | Spring 2017

HTTPS Everywhere

  • Browser Extension
  • Automatically redirect HTTP webpage

into HTTPS webpage if possible

  • Open Source

Source: http://bit.ly/2qcu3df

slide-24
SLIDE 24

Frank Chen | Spring 2017

Be Wary of Public Wi-Fi

slide-25
SLIDE 25

Frank Chen | Spring 2017

Be Wary of Email Links

slide-26
SLIDE 26

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-27
SLIDE 27

Frank Chen | Spring 2017

Authentication

What you know What you own Who you are

slide-28
SLIDE 28

Frank Chen | Spring 2017

Authentication

What you know What you own Who you are

slide-29
SLIDE 29

Frank Chen | Spring 2017

Which Password is more secure?

monkey-ocean-superior-pillow 3058472038475

slide-30
SLIDE 30

Frank Chen | Spring 2017

They are about the same

Source: http://bit.ly/2pmNOuB

slide-31
SLIDE 31

Frank Chen | Spring 2017

Which Password is more secure?

4 common words: 20004 ~ 243.9 combinations 13 random digits: 1013 ~ 243.2 combinations

monkey-ocean-superior-pillow 3058472038475

Source: http://bit.ly/2pmNOuB

slide-32
SLIDE 32

Frank Chen | Spring 2017

Authentication

What you know What you own Who you are

slide-33
SLIDE 33

Frank Chen | Spring 2017

Yubikey

  • Physical 2-Factor Authentication Device
  • Generates One-Time-Passwords (OTPs)
slide-34
SLIDE 34

Frank Chen | Spring 2017

Yubikey's OTP

cccjgjgkhcbb irdrfdnlnghhfgrtnnlgedjlftrbdeut cccjgjgkhcbb gefdkbbditfjrlniggevfhenublfnrev cccjgjgkhcbb cvchfkfhiiuunbtnvgihdfiktncvlhck

slide-35
SLIDE 35

Frank Chen | Spring 2017

Source: http://bit.ly/2qP6yUb

slide-36
SLIDE 36

Frank Chen | Spring 2017

Yubikey Demonstration

slide-37
SLIDE 37

Frank Chen | Spring 2017

2-Factor OTP Generators

slide-38
SLIDE 38

Frank Chen | Spring 2017

Authentication

What you know What you own Who you are

slide-39
SLIDE 39

Frank Chen | Spring 2017

Fingerprint Scanner

Source: http://apple.co/1En9Tz7

slide-40
SLIDE 40

Frank Chen | Spring 2017

Single Sign-On

Source: https://shibboleth.net/ Source:https://www.okta.com/

slide-41
SLIDE 41

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-42
SLIDE 42

Frank Chen | Spring 2017

Cloud Storage

slide-43
SLIDE 43

Frank Chen | Spring 2017

External Hard Drive

slide-44
SLIDE 44

Frank Chen | Spring 2017

Agenda

  • WireShark Demo, Final Project
  • Review last week’s material
  • HTTPS, Safe Practices Online
  • 2 Factor Authentication
  • Back up everything
  • Use a Password Manager
slide-45
SLIDE 45

Frank Chen | Spring 2017

Password Managers

slide-46
SLIDE 46

Frank Chen | Spring 2017

Sf C T

Follow at least one of the Practices listed today!

slide-47
SLIDE 47

Frank Chen | Spring 2017

Facebook's massive data center in Luleå

Next Week...