Skip Navigation LinksHome > Best Practice Archive > Cyber Security
Cyber Security

An excellent resource for cyber security is the United States Computer Emergency Readiness Team (US-CERT) web site. US-CERT is charged with protecting our nation's Internet infrastructure by coordinating defense against and response to cyber attacks.

With the destruction of the World Trade Center towers and the attack on the Pentagon on September 11th and the ensuing anthrax attacks, the United States has entered a new age of terrorism that targets both civilians and soldiers in a war with no rules and no clear ending. While terrorists once generally used acts of terrorism as a means to publicize their causes, the operational objectives in the more recent attacks have focused on maximizing destruction, casualties and impact.

In terms of computer infrastructure, the country has seen marked growth in the need for heightened security of critical operations. Escalating use of information technology to improve performance; increased competitive pressures from deregulation and globalization; and fiscal demands to consolidate operations have resulted in a reduction in redundancy and reserve capacity.

The threat of cyber-terrorism will continue to grow as leadership positions in extremist organizations are increasingly filled with younger, "Internet-savvy" individuals. Most worrisome is a potential coordinated attack on national critical infrastructures. While the United States has not yet experienced this sort of attack, it is not hard to imagine such a threat based on the intrusions we have seen to date. Cyber attacks know no national boundaries and can be devastating in scope and effect. International cooperation and information sharing is therefore critical in order to more effectively respond to this growing threat.

Cyber security involves protecting information by preventing, detecting, and responding to attacks. Unfortunately, even the strictest precautions cannot guarantee protection from every attack. However, there are steps you can take to minimize the chances.

The United States Computer Emergency Readiness Team (US-CERT) has stated that the first step in protecting yourself is to recognize the risks and become familiar with some of the associated terminology.

Hacker, attacker or intruder - These terms are applied to the people who seek to exploit weaknesses in software and computer systems for their own gain. Although their intentions are sometimes fairly benign and motivated solely by curiosity, their actions typically in violate the intended use of the systems they are exploiting. The results can range from mere mischief (creating a virus with no intentionally negative impact) to malicious (stealing or altering information).

Malicious code - This category includes code such as viruses, worms, and Trojan Horses. Although some people use these terms interchangeably, they have unique characteristics.

·         Viruses - This type of malicious code requires that you perform some action before it can infect your computer. This could be opening an email attachment or going to a particular web page.

·         Worms - Worms propagate without user intervention. They typically start by exploiting software vulnerability (a flaw that allows the software's intended security policy to be violated). Once the victim computer has been infected the worm will attempt to find and infect other computers. Similar to viruses, worms can propagate via email, web sites or network-based software. Automated self-propagation is what distinguishes worms from viruses.

·         Trojan Horses - A Trojan Horse program is software that claims to be one thing while doing something different behind the scenes. For example, a program that claims it will speed up your computer may actually be sending confidential information to a remote intruder.

In addition, the National Cyber Security Alliance (NCSA) has identified 8 cyber security tips:

  1. Protect your personal information.
  2. Know who you're dealing with online and know what you're getting into.
  3. Use anti-virus software, a firewall, and anti-spyware software and keep it up to date.
  4. Be sure to set up your operating system and Web browser software properly, and update them regularly.
  5. Use strong passwords or strong authentication technology to help protect your personal information.
  6. Back up your important files to a removable disk or drive.
  7. Make sure your family members and/or your employees know what to do if something goes wrong with your computer.
  8. Protect your children online.

Protect Your Workplace

Posters

The following Department of Homeland Security (DHS) posters provide guidance on physical and cyber security and how to report suspicious behavior, activity, and cyber incidents. To view or download one of the posters, simply click the image. If you would like, you can download all of the posters at the same time using the Download Complete Series link. 

Cyber Security GuidanceReport Suspicious Cyber IncidentsPhysical Security GuidanceReport Suspicious Behavior and Activity

 

 

 

 

 

Download Complete Series