Security « Informasietegnologie

Security

How to detect malware symptomsIs daar “malware” op my rekenaar?

Friday, September 26th, 2014

If your computer starts to behave strangely, you might be experiencing spyware symptoms or have other unwanted software installed on your computer.

Wikipedia defines malware as follows:

“Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems. It can appear in the form of executable code, scripts, active content, and other software.’Malware’ is a general term used to refer to a variety of forms of hostile or intrusive software.” [www.wikipedia.org]

Here are a few tips on how to detect malicious software:

I see pop-up advertisements all the time.
Some unwanted software will bombard you with pop-up ads that aren’t related to a particular website you’re visiting. These ads are often for adult or other websites you may find objectionable. If you see pop-up ads as soon as you turn on your computer or when you’re not even browsing the web, you might have spyware or other unwanted software on your computer.

My settings have changed and I can’t change them back to the way they were.
Some unwanted software can change your home page or search page settings. Even if you adjust these settings, you might find that they revert back every time you restart your computer.

My web browser contains additional components that I don’t remember downloading.
Spyware and other unwanted software can add toolbars to your web browser that you don’t want or need. Even if you remove these toolbars, they might return each time you restart your computer.

My computer seems sluggish.
Spyware and other unwanted software are not designed to be efficient. The resources these programs use to track your activities and deliver advertisements can slow down your computer and errors in the software can make your computer crash. If you notice a sudden increase in the number of times a certain program crashes, or if your computer is slower than normal at performing routine tasks, you may have spyware or other unwanted software on your machine.

If you suspect your PC has been infected with malware, contact our service desk at x4367 or log a call on the HEAT CALL LOGGING SYSTEM

[Source: http://www.microsoft.com/security/pc-security/malware-symptoms.aspx]

As jou rekenaar skielik snaaks begin optree, is dit moontlik dat dit simptome van `n loerprogram of ander ongewensde sagteware kan wees.

Wikpedia definieer “malware” as volg:

“Malware”, die verkorting van “malicious software”, is enige sagteware wat gebruik word om die werking van `n rekenaar te belemmer, sensitiewe informasie probeer insamel of om toegang tot privaatrekenaars te kry. Dit kan die vorm aanneem van uitvoerbare kode, skripte, aktiewe inhoud of ander sagteware, aanneem. “Malware” is `n algemene term om te verwys na `n verskeie vorme van sleggesinde of indringende sagteware. [www.wikipedia.org]

Hier is `n paar simptome waarvoor jy kan uitkyk:

Ek sien gereeld opwip-advertensies.
Sommige ongewensde sagteware sal jou toegooi met opwip-advertensies wat niks te doen het met die spesifieke webwerf wat jy besoek nie. Hierdie advertensies is dikwels vir volwasse of twyfelagtige webwerwe.
Indien jy dadelik opwip-advertensies sien as jy jou rekenaar aansit of wanneer jy nie op die internet is nie, het jy waarskynlik `n loerprogram of ander ongewensde sagteware op jou rekenaar.
My verstellings het verander en ek kan dit nie terugverander nie.
Sommige ongewensde sagteware kan jou blaaier tuisblad of jou soekblad se verstellings verander. Selfs al verander jy dit terug, sal dit elke keer as jy jou rekenaar aansit, weer teruggaan na die verkeerde verstellings.
My webblaaier bevat ekstra komponente wat ek nie afgelaai het nie.
Loerprogramme en ander ongewensde sagteware kan nutsbalke wat jy nie nodig het of wil hê nie, installeer in jou webblaaier. Selfs al verwyder jy dit, sal dit weer verskyn as jy jou rekenaar af- en weer aansit.
My rekenaar is traag.
Loerware is nie ontwerp om effektief te wees nie. Die hulpmiddele wat hulle gebruik om jou aktiwiteite te volg en advertensies op jou rekenaar te laat loop, kan jou rekenar stadig maak en foute in hul sagteware kan veroorsaak dat jou rekenaar uitbom. As jy `n skielike toename in die hoeveelheid kere wat `n sekere program vries of ophou werk, of as jou rekenaar stadiger is as gewoonlik, is dit moontlik dat jy loerware of ander ongewensde sagteware op jou rekenaar het.

As jy vermoed dat jou rekenaar besmet is met “malware”, kontak die IT diensttoonbank by x4367 of meld `n fout aan op die HEAT FOUTRAPPORTERINGSTELSEL

[BRON: http://www.microsoft.com/security/pc-security/malware-symptoms.aspx]

Tags: malware
Posted in Security | Comments Off on How to detect malware symptomsIs daar “malware” op my rekenaar?

Is your McAfee up to date?Is jou McAfee op datum?

Friday, September 5th, 2014

All windows desktops and laptops (assets) of the University have McAfee loaded for your security. This enterprise edition automatically updates daily to ensure maximum protection against potential threats.

McAfee enterprise is one of the best anti-virus solutions on the market according to Gartner. It is crucial not to load/install any other anti-virus software i.e. AVG, Norton, etc. Installing more than one anti-virus program could negatively influence the performance of your computer; draining computing power and/or competing against each other leaving your computer vulnerable.

If you want to determine whether your McAfee anti-virus is up to date, do the following:

In the bottom right corner of your screen next to the time you will see the icon below

If that is clicked a pop up menu will come out and have different icons on it.

The red shield with an M is the McAfee EPO agent icon, right-click the marked icon and select “About”

The “DAT Created on” date should not reflect a date older than a week from today.Alle Windows tafel- en skootrekenaars wat bates van die Universiteit is, word outomaties gelaai met McAfee vir sekuriteitsdoeleindes. Die besigheidsweergawe van dié virussagteware dateer outomaties daagliks op om te verseker dat rekenaars die maksimum beskerming teen moontlike aanvalle het.

Volgens Gartner is McAfee enterprise een van die beste anti-virus oplossings op die mark.

Dis belangrik om nie enige ander anti-virus sagteware soos AVG, Norton, ens. te installeer op jou rekenaar as jy reeds McAfee het nie. Meer as een anti-virus kan die werking van jou rekenaar belemmer en onnodige krag van die verwerker gebruik. Die verskeie programme kompeteer ook teen mekaar en stel sodoende jou rekenaar bloot.

As jy wil vasstel of jou McAfee anti-virus op datum is, kan jy die volgende stappe volg:

Onder in die regterkantste hoek van jou skerm sal jy onderstaande ikoon sien –

Wanneer jy daarop kliek sal `n volgende skerm opspring met verskeie verskillende ikone.

Die rooi skild met die M is die McAfee EPO-agent ikoon. Regskliek daarop en kies “About”

Die “DAT Created on” datum behoort nie meer as `n week gelede se datum te wys nie.

Tags: McAfee
Posted in Security | 2 Comments »

What are QR codes?Wat is QR-kodes?

Friday, August 22nd, 2014

qr-code Two weeks ago we introduced you to SnapScan, a smartphone application used for payments. SnapScan uses QR codes to host a vendor’s banking information in a secure way. But how do these unintelligible blocks work?

A QR code, or Quick Response Code is a type of matrix or two-dimensional barcode. So, in fact it’s really only a funny barcode. However, QR codes can include more information than the traditional bar code and are currently one of the most-used types of two-dimensional barcodes.

This wasn’t always the case. Before SnapScan and other payment applications started using QR, they were frequently used in consumer advertising, in magazines, on buses, business cards, etc. They could include any additional information users may need, if they were interested. Typically it would have a link to a website, where all the additional information would be contained.

The attempt to draw users away from print media to digital wasn’t so successful. People got bored and irritated by the general uselessness of these little blocks and started using them less and less. That is, until payment services increased their popularity.

A QR code consists of a collection of square dots, arranged on a square grid on a white background. It can be read by an imaging device with a camera. such as your smart phone with the right reader application installed. Scanning the codes with a mobile phone is referred to as mobile tagging.

After the image is scanned, it’s processed by using the Reed-Solomon error correction method to interpret the image. Data is then extracted from the patterns present in the image. Codes can be used for product trading, item identification, time tracking, document management and general marketing.

Denso Ware first invented a QR code in 1994 to track vehicles during manufacture and it was specifically used in the automotive industry in Japan.Today these blocks of info can be seen on train tickets in China (since 2011 already) and a company in Seattle – believe it or not – has started manufacturing headstones with QR codes. (read more about it here.)

[SOURCES: www.memeburn.com & www.wikpedia.org]

qr-code

Twee weke gelede het ons julle vertel van SnapScan, `n slimfoon-applikasie wat deesdae algemeen gebruik word vir betalings. SnapScan gebruik QR-kodes om winkeleienaars se bankinligting op `n veilige wyse te stoor. Maar hoe werk hierdie onverstaanbare blokkies?

`n QR-kode of “Quick Response Code” is `n tipe matriks of twee-dimensionele strepieskode. So eintlik is dit maar net `n snaakse strepieskode. Die enigste verskil is dat `n QR-kode meer inligting kan hou as die gewone strepieskode. Dis ook tans een van die mees-gebruikte twee-dimensionele strepieskodes.

Dit was egter nie altyd die geval nie. Voor SnapScan en ander betaal-toepassing begin het om die QR-kode te populariseer, is dit dikwels gebruik vir bemarking in tydskrifte, op busse, besigheidkaartjies, ens. Dit het enige addisionele inligting bevat waarin gebruikers sou belangstel, byvoorbeeld ook `n skakel na `n webwerf, waarop al die ekstra inligting gelaai was.

Die poging om gebruikers van die drukmedia na digitaal te lok, was nie heeltemal suksesvol nie. Mense het verveeld en geirriteerd geraak met die nuttelose blokkies en minder en minder begin gebruik. Totdat betaaldienste onlangs hul populariteit verhoog het.

`n QR-kode bestaan uit `n versameling vierkantige kolletjies op `n vierkantige gids met `n wit agtergrond. Dit kan gelees word deur `n toestel met `n kamera met die regte leestoepassing geinstalleer – soos jou slimfoon. Die skandeer van die kodes met `n mobiele foon word na verwys as “mobile tagging”.

Nadat die beeld geskandeer is, word dit verwerk deur middel van die Reed-Solomon foutkorreksie metode om die beeld te interpreteer. Data word dan onttrek uit die patrone wat in die beeld opgetel word. Kodes kan gebruik word vir produkhandel, item-identifikasie, dokumentbestuur en algemene bemarking.

Denso Ware het in 1994 aanvanklik die QR-kode ontwerp om voertuie na te spoor gedurende die vervaardigingsproses and dis spesifiek gebruik in Japan se motor industrie. Vandag is dié blokkies te sien op treinkaartjies om China (al sedert 2011) en `n maatskappy in Seattle het begin om grafstene te vervaardig met QR-kodes (ja regtig, lees meer daaroor hier)

[BRONNE: www.memeburn.com & www.wikpedia.org]

Posted in General, Security | Comments Off on What are QR codes?Wat is QR-kodes?

Keep your Apple safe from wormsHou die wurms weg van jou Apple

Friday, June 27th, 2014

With the rampant “success” of the Flashback Trojan, it’s fair to assume that more viruses, malware, and other nasties will find their way onto the Apple platform. This means it’s up to you to keep yourself educated and your system secure.

Java (not your morning fix)

All of the 700,000+ Apple computers infected with the Flashback Trojan have one thing in common: They’re all running out-of-date versions of the Java browser add-on. Since software updates on Macs are a manual process, updates to tools like Java have to be rolled out by Apple itself. The easiest way to get around this problem is simply to turn off Java from within the Safari browser, an option available under Security in the Preferences menu. You can also turn the service off on your computer as a whole. Head to Applications > Utilities, and uncheck the Java versions listed in the General tab.

Keep your Mac up-to-date

On this subject of updates, make sure your machine is running the latest versions of OSX and Safari. Apple takes pride in updating its Operating System and it’s also good practice to protect your machine by running the Software Updates regularly. Make it a rule to run the updates once a week. Make sure all the available patches and updates are installed rather than just downloading them. To check for updates click on the Apple Icon in the upper left corner of the screen and select “Software Update”.

Use strong password

Create a password that are at least eight characters in length, using both letters and numbers, and use at least on capital letter or symbol to make it more secure. Remember to user different passwords for different service.

Turn Off automatic logins

What good is a strong password if you don’t use it? Even though it’s a pain to have to re-enter all of your passwords every time you boot up your machine, log in to your account, open messenger programs, or access various websites, it really is the safest option. Otherwise, if someone accesses your machine while you not around they’ll have automatic access to all of your content. It just means a few extra keystrokes, but it will make all your data more secure.

Use a password Manager

There is a way to avoid constantly having to re-enter your passwords, and that is to use a password manager like Keychain, comes free with current versions of Mac OSX.

To use a password manager, you’ll be asked to create a unique, strong passphrase and store that in your keychain, rather than trying to remember shorter, easier but more numerous passwords. This system is also very handy when you vary your passwords, as you should!

Prepare your Firewall

Mac OS X has a built-in firewall that can be used to prevent unauthorized users or programs from accessing your machine remotely. Make sure it’s turned on, or all of your security procedures will be as useless. While there will be a brief learning curve teaching the firewall to play nice with any non-Apple programs you may want to use, it’s a small inconvenience that more than makes up for that in terms of peace of mind.

Turn off “Open safe files”

This one is a bit of a headache from long ago when certain file types were unlikely to harbour viruses or malware. Unfortunately, hackers and technology have progressed, meaning that “safe files” are a thing of the past. All sorts of malware can be tucked inside even the most unassuming files. Even the once-innocuous MP3, .jpg, PDF and .doc files are all capable of harbouring code designed to attack your Mac. To change this troublesome setting, go to Safari Preferences > General, and uncheck “Open safe files.” Remember, don’t click links in emails or open unexpected email attachments.

Stop sharing

The sharing systems, including Bluetooth and Airport, can leave your machine vulnerable (they are designed to allow remote access to your computer), so when you’re not using them, turn them off!

Download from Trusted Sources

Pirated software, cracks, and other illegal downloads are frequently used to distribute malware and viruses, infecting your machine as soon as you access the file. Make sure that you download software, applications, media, and other files directly from the source to minimize your risk of infection.

Update all the “other” things

Adobe Reader is another application that you should update and keep updated. It’s a favourite of Windows-based cyber-criminals, and the jump to Mac is anticipated sooner rather than later. The software is among the most exploited in the world, but each new version introduces security enhancements which make it better than the last.

Install good security systems

You may have heard that Macs simply do not get viruses, the recent Flashback Malware illustrates otherwise. Now, Mac-flavoured virus scanners are no longer as useless as they may have once seemed. Applications like ClamXav, Virus Barrier, and the Mac-friendly versions of Sophos and Kaspersky Anti-Virus have been designed specifically for Mac OS X. While at this stage, they tend to only find PC viruses or the occasional spam phishing email or tracking cookie. Soon Mac-specific malware will start popping up in greater profusion.

As we mentioned previously, make sure you check what you’re downloading! Mac anti-virus programs are all over the place, so only grab software from legitimate sources.

Use your common sense

Most of the worms looking to crawl into your Apple are preying on unsuspecting users and outdated software — a deadly combination at the best of times. Follow these measures and you’re less likely to end up with a rotten Apple.

[ARTICLE BY REGAN JANARI, IT APPLE TECH SUPPORT]

Met die toenemende “sukses” van die Flashback Trojan, is dit nie onwaarskynlik om aan te neem dat meer virusse, malware en ander nare kubergoggas hulle pad gaan vind na die Apple-platform nie. Dit beteken jy moet op hoogte bly en jou rekenaar veilig hou.

Java (nie jou oggendkoffie nie)

Al 700,000+ Apple rekenaars wat besmet is met die Flashback Trojan het een ding in gemeen – Hulle gebruik almal verouderde weergawes van die Java webblaaier toepassing. Aangesien die opdatering van sagteware op Macs `n handaksie is, moet opdaterings vir middele soos Java deur Apple self geimplementeer word. Die maklikste manier om hierdie probleem te omseil, is bloot om Java binne die Safari webblaaier af te skakel. Hierdie opsie is beskikbaar onder Security in die Preferences spyskaart. Jy kan die diens ook heeltemal afskakel op jou rekenaar deur onder Applications > Utilities die Java-weergawes wat gelys is onder die General knoppie te deselekteer.

Hou jou Mac op datum

Gepraat van opdaterings, maak seker dat jou rekenaar die nuutste weergawes van OSX en Safari loop. Apple roem hulself op die opdatering van sy bedryfstelsel en dis ook goeie praktyk om jou rekenaar te beskerm deur gereeld sagteware opdaterings te loop. Maak dit `n gewoonte om eenkeer `n weer opdaterings te doen en maak seker dat die beskikbare opdaterings en regstellings geinstalleer is in stede van bloot afgelaai. Om te kyk vir opgraderings, kliek op die Apple-ikoon in die boonste linkerhoek en kies Software Update.

Gebruik `n sterk wagwoord

Skep `n wagwoord wat ten minste agt karakters lank is, beide letters en syfers bevat en gebruik ten minste een hoofletter of `n simbool om dit veiliger te maak. Onthou om verskillende wagwoorde te gebruik vir verskillende dienste.

Skakel outomatiese aantekenfunksie af

`n Sterk wagwoord gaan van geen nut wees as jy dit nie gebruik nie. Selfs al is dit `n irritasie om al jou wagwoorde in te tik, elke keer as jy jou rekenaar aansit, aanteken, kletsprogramme oopmaak of by webwerwe aanteken, is dit werklik die veiligste opsie. Origens, as iemand toegang tot jou rekenaar kry terwyl jy weg is, sal hulle outomaties toegang hê tot al jou inligting. Dis net `n paar ekstra sleutelhale, maar dit sal verseker dat jou data veiliger is.

Gebruik `n wagwoordbestuurder

Daar is wel `n manier om die voortdurende intik van wagwoorde te vermy. Keychain is `n wagwoordbestuurder wat gratis verskaf word met huidige weergawes van Mac OSX.

Wanneer jy `n wagwoordbestuurder gebruik, sal jy gevra word om `n unieke, sterk wagwoord te kies en dit in jou sleutelketting te stoor. Jy het dus een sterk wagwoord in plaas van vele maklike, kort wagwoorde. Dié stelsel is ook baie handig as jy jou wagwoorde wil afwissel, wat natuurlik baie belangrik is.

Bou jou firewall

Mac OS X het `n ingeboude vuurmuur (firewall) om te keer dat ongemagtigde gebruikers of programme toegang tot jou rekenaar probeer kry. Maak seker dat dit wel aktief is, anders is al jou ander sekuriteitsprosedures nutteloos. Hoewel daar `n kort leerkurwe is om die vuurmuur te leer om oor die weg te kom met nie-Apple programme, is dit `n klein lastigheid wat opmaak in terme van gerustheid.

Skakel Open safe files af

Hierdie is `n bietjie van `n tameletjie van lank gelede toe sekere tipes lêers nie risiko vir die huisves van virusse of malware beskou is nie. Ongelukkig het kuberkrakers en tegnologie slimmer geword en “veilige” lêers is iets van die verlede. Enige tipe malware kan netjies weggesteek word in die mees onverwagse lêer. Selfs die voorheen onskadelike MP3, .jpg, PDF en .doc leêrs kan deesdae kode versteek wat jou Mac kan aanval. Om hierdie lastige verstelling te verander, gaan na Safari Preferences > General, en deselekteer Open safe files. Onthou, moenie kliek op skakels in e-posse of op onverwagse e-pos aanhangsels kliek nie.

Moenie deel nie!

Toepassings wat deel, insluitende Bluetooth en Airport wat ontwerp is om toegang tot jou rekenaar vanaf `n afstand te bewerkstellig, kan jou rekenaar blootstel aan gevare. Skakel dit af as jy dit nie gebruik nie.

Laai slegs af van betroubare bronne

Roof- en inbreeksagteware (cracks) en ander onwettige sagteware word gereeld gebruik om malware en virusse te versprei en jou rekenaar te besmet sodra jy die lêer oopmaak. Maak seker dat jy sagteware, toepassings, media en ander lêers direk van die bron en wettige webwerwe aflaai om jou risiko te verminder.

Dateer die “res” op

Adobe Reader nog `n toepassing wat jy op datum moet hou. Dis `n gunsteling vir Windows-georienteerde kuberkriminele en Macs se beurt is nie ver weg nie. Dié sagteware is van die mees uitgebuite in die wêreld, maar elke nuwe weergawe verskaf verbeterde sekuriteitsmaatreëls.

Installeer goeie sekuriteitstelsels

Jy het dalk al gehoor dat Macs eenvoudig net nie virusse kry nie, maar die onlangse Flashback Malware bewys die teendeel. Mac-gegeurde virus-skandeerders is skielik nie meer so oorbodig soos voorheen nie. Toepassings soos ClamXav, Virus Barrier en die Mac-vriendelike weergawes van Sophos en Kaspersky Anti-Virus is spesifiek ontwerp vir Mac OSX. Op die oomblik is hulle geneig om slegs PC-virusse of nou en dan `n spam phishing e-pos of opsporingskoekie te vang. Binnekort sal Mac-georienteerde malware egter met mening te voorskyn kom.

Soos ons reeds genoem het, kyk mooi wat jy aflaai en van waar! Mac anti-virus programme is maklik bekombaar, so jou rekenaar hoef nie `n slagoffer te wees nie.

Gebruik jou gesonde verstand

Die meeste wurms wat in jou Apple wil kom wegkruip, maak gebruik van onvoorbereide gebruikers en ou sagteware – `n gevaarlike kombinasie op `n goeie dag. Volg bogenoemde riglyne en jy sal jou kanse verbeter om nie `n vrot Apple te kry nie.

Tags: Apple, Flashback Trojan, Mac
Posted in Security | Comments Off on Keep your Apple safe from wormsHou die wurms weg van jou Apple

Identity and access management 101Identiteit- en toegangsbestuur 101

Wednesday, June 25th, 2014

Stellenbosch University is currently in the process of renewing its Identity and Access Management (IAM) system. The first step in the identity life cycle, namely Provisioning, has been successfully completed with the establishment of SUNid. Read more on SUNid here.

What is Identity and Access Management (IAM)?

For individuals needing access to computer systems or physical resources, IAM audits who you are and manages what you are allowed to see and what not. This process is based on business regulations, your role inside the university and your affiliation with departments.

How does Identity and Access Management (IAM) work?

The main focus of IAM is not on a single system, but on the needs and functions of people working or studying at the university. In addition the process and workflow has to reflect an end-to-end life cycle. The identity life cycle can be represented as follows:

[IMAGE COURTESY OF THE UNIVERSITY OF BRITISH COLUMBIA]

Universiteit Stellenbosch is tans besig met die hernuwing van sy Identiteit- en toegangsbestuur (IAM) en die eerste hoeksteen van die identiteit-lewensiklus, “Provisioning”, is reeds in plek met die vestiging van SUNid. Lees meer oor SUNid hier.

Wat is Identiteit- en Toegangsbestuur (IAM)?

IAM is `n stel besigheidsbeleide, prosesse en `n ondersteunende infrastruktuur om die skep, onderhoud en gebruik van digitale identiteite te bestuur. Met IAM kan die universiteit veilige toegang tot bronne verskaf; hierdie toegang effektief beheer, vinniger reageer op veranderende verhoudings en ook vertroulike inligting beskerm teen ongemagtigde gebruikers.

Vir individue wat toegang nodig het tot rekenaarstelsels of fisiese bronne, kontroleer IAM wie jy is en bestuur wat jy mag en nie mag sien nie, gebaseer op besigheidsreëls en jou rol binne die universiteit en affiliasie met departemente.

Hoe werk Identiteit- en Toegangsbestuur (IAM)?

Die fokus van IAM is op die behoeftes en funksies van persone wat by die universiteit werk of studeer, nie op `n enkele stelsel nie. Daarbenewens moet die proses en werkvloei`n einde-tot-einde identiteit-lewensiklus weerspieël.

Die identiteit-lewensiklus lyk as volg:

[IMAGE COURTESY OF THE UNIVERSITY OF BRITISH COLUMBIA]

Tags: SUNid
Posted in Security | Comments Off on Identity and access management 101Identiteit- en toegangsbestuur 101

IT links

SU Links

[:en]Recent Posts[:af]Onlangse bydraes

[:en]Categories[:af]Kategorieë

[:en]Archives[:af]Argiewe