RAMSTEIN AIR BASE, Germany –
In 2012, President Barack Obama again issued a presidential proclamation declaring October as National Cyber Security Awareness Month. For each week in October there is a different theme and focus. One of the main themes of the campaign is "Stop. Think. Connect. and General Online Safety."
More information about Stop. Think. Connect. can be found on the following website:
http://stopthinkconnect.org/. In a nutshell, this website addresses some information that every internet user should pay particular attention to:
STOP. Before you use the internet, take time to understand the risks and learn how to spot potential problems.
THINK. Take a moment to be certain the path ahead is clear. Watch for warning signs, and consider how your actions online could impact your family's safety.
CONNECT. Enjoy the internet with greater confidence, knowing you've taken the right steps to safeguard yourself and your computer.
When we address the issue of "General Online Safety" we are looking at a wide scope of potential capabilities that must be squared away while online. Some of the terminologies have been around for a while and some are relatively new.
Smartphone and tablet technologies continue to replace our existing hardware platforms, and there is an increased privacy risk associated with these devices. Most smartphones and tablets have GPS capabilities built-in and the location services feature is typically turned on by default. When a picture is taken with the smartphone or tablet, the GPS data is embedded into the picture. Anyone who comes across this picture can use the GPS coordinates to determine exactly where the picture was taken. A harmless picture of kids playing in the yard could provide the exact location of where your family lives.
Social media continues to have a presence in our day-to-day environments. The challenge associated with social networking is the fact that the security features of the individual's account are constantly changing based on what the site owner is changing. Users are reminded to periodically check their security settings to ensure they are not opening themselves up for impacts to their privacy. Social networking itself is not bad; more often than not, it is the account security settings that are the culprit for unauthorized release of information. A quick Google search will yield many presentations on how to effectively lock down your social networking sites.
Phishing is a term that has been around for a while and is prevalent in today's society. Hackers and general bad guys attempt to fool an individual by getting the unsuspecting user to willingly divulge their private information. Phishing is still an effective threat vector because of the large number of individuals that fall prey to the scam.
Smishing is a new terminology that is just like phishing but is conducted over cell phones with the short message service (SMS) feature commonly used today. Smishing happens on cell phones much the same as a user receives an email in their mailbox. If they fall for the bait their cell phone could be taken over and any content residing in the device could be stolen.
One of the keys to ensuring the safety and security of the home information system is providing anupdated operating system and application patches along with antivirus signature files. The second Tuesday of every month is called "Patch Tuesday" and all Microsoft updates will be released during this timeframe. As far as applications are concerned, each company has their own release schedule or update feature. It is recommended to check your applications on a monthly basis to ensure you are running the latest and greatest patches. Antivirus applications are free for all Active Duty Military and Department of Defense Civilian personnel to use on their home computer systems. There are numerous sites that an individual can use in order to download either the McAfee or Symantec solution. These are among the sites available:
https://infosec.navy.mil/main/home?p=5-1
https://patches.csd.disa.mil/CollectionInfo.aspx?id=213
For more information contact your Unit Information Assurance Officer.