IT 6823 LM 7 Malware Dr. Lei Li IT 6823 LM7 Malware 2 Image source: https:www.nist.govdocumentcybersecurityframeworkv1-1presentationpptx NIST Framework Core Learning Outcomes Describe major types of malware Explain the characters of
"IT 6823 LM 7 – Malware Dr. Lei Li IT" is the property of its rightful owner. Permission is granted to
download and print the materials on this website for personal, non-commercial use only, and to display it
on your personal computer provided you do not modify the materials and that you retain all copyright
notices contained in the materials. By downloading content from our website, you accept the terms of this
agreement.
Learning Outcomes Describe major types of malware
Explain the characters of computer virus and ransomware
Describe how social engineering work
Explain the role of firewall in protecting the computer system
Describe different type of inside threats and hacker
Discuss the best practices against malware attacks & inside threats IT 6823 – LM7 Malware 3<br>
04
Overview Malware
Malicious intent
Grayware
Actors in malware attacks
Social engineering
Insiders, hacker
Prevent malware attacks IT 6823 – LM7 Malware 4<br>
05
Malware Any malicious program or code that is harmful to systems
Virus
Worms
Spyware/adware
Trojan
Ransomware
Rootkit
A Keylogger
Malicious cryptomining
Exploits IT 6823 – LM7 Malware 5<br>
06
Malware IT 6823 – LM7 Malware 6 Image source: https://en.wikipedia.org/wiki/Malware#Security_defects_in_software<br>
Computer Virus Requires a host program
Requires user action to transmit from one system to another
Attaches bits of its own malicious code to other files or replaces files outright with copies of itself
Don’t catch headline as in the past, but still need to take it seriously. IT 6823 – LM7 Malware 8<br>
Grayware Privacy-invasive software
Convey the commercial aspect of unwanted software contamination
Potentially unwanted program
Unwanted despite having been downloaded by the user
Adware & spyware IT 6823 – LM7 Malware 10<br>
11
Social Engineering Hack people’s mind
98% of cyber attacks rely on social engineering
Getting victim to:
Give up usernames and passwords
Install malware on their device
Send money via electronic fund transfer, money order, or gift cards
Authorize a malicious software plugin, extension, or third-party app
Act as a money mule IT 6823 – LM7 Malware 11<br>
12
Human Vulnerabilities for Social Engineering Reciprocity
Scarcity
Authority
Consistency
Liking
Consensus IT 6823 – LM7 Malware 12 Image source: https://purplesec.us/social-engineering/<br>
13
Types of Social Engineering Email phishing
Trojan
Spearing fishing
SMS text message phishing (smithing)
Scam calls
Tech support scams IT 6823 – LM7 Malware 13<br>
14
An Example Cybercriminals impersonate World Health Organization to distribute fake coronavirus e-book IT 6823 – LM7 Malware 14<br>
15
Inside Treats Malicious insider
A mole
Careless users
Most common threat IT 6823 – LM7 Malware 15<br>
Hacker Purpose of hacking
Criminal financial gain
Fame and reputation
Corporate espionage
State-sponsored hacking
Hacktivist IT 6823 – LM7 Malware 17<br>
18
Types of Hacker Black hat
Whit hat
Gray hat IT 6823 – LM7 Malware 18<br>
19
Factors make a system more vulnerable to malware Security defects in software
Insecure design or user error
Over-privileged users and code
Use of the same operating system IT 6823 – LM7 Malware 19<br>
20
Firewall Restrict outside access to your computer/network
Block traffic from certain location, applications or ports
Allowing relevant and necessary data through
Hardware firewall
Network firewalls
Software firewall
Built in most OS
Third party app IT 6823 – LM7 Malware 20<br>
21
Best Practices against Malware Attacks Continuous User Education
Use Reputable A/V Software
Ensure Your Network is Secure
Perform Regular Website Security Audits
Scanning your organization’s websites regularly for vulnerabilities
Create Regular, Verified Backups IT 6823 – LM7 Malware 21<br>
22
Protect Against an Insider Attack Protect critical assets
Enforce policies
Increase visibility
Promote culture changes IT 6823 – LM7 Malware 22<br>
23
Insider Threat Detection Solutions Insider familiar with security measures
Combine several tools
Machine learning tools for analyzing data stream and prioritizing alerts
Behavior analytics
Database activity monitoring IT 6823 – LM7 Malware 23<br>
