{"id":2546,"date":"2022-10-11T18:27:49","date_gmt":"2022-10-12T01:27:49","guid":{"rendered":"https:\/\/commons.royalroads.ca\/studentlife\/?p=2546"},"modified":"2022-10-11T18:27:49","modified_gmt":"2022-10-12T01:27:49","slug":"cyber-month-week-2","status":"publish","type":"post","link":"https:\/\/commons.royalroads.ca\/studentlife\/cyber-month-week-2\/","title":{"rendered":"Cyber Month- Week 2"},"content":{"rendered":"<p>Welcome to Week 2 of Cyber Month.\u00a0 This week we\u2019ll be focused on a rapidly evolving area of cyber security: <strong>Identity and authentication<\/strong>.<\/p>\n<p>Why are we talking about <strong>identity and authentication<\/strong>?\u00a0 You\u2019ve got my username and password, right?\u00a0 What else do you need?\u00a0 Well, consider:<\/p>\n<ul>\n<li>Your <strong>digital identity<\/strong> is an online record of your personal information, be it something as simple as your email address or as <em>sensitive<\/em> as your SIN. Your identity says a lot about you, so you need to protect it.<\/li>\n<li>80% of cyber breaches are <em>identity-driven<\/em>. The criminals want access to your identity so that they can impersonate you, raid your bank accounts, tax accounts, etc.<\/li>\n<li>As we saw in our look at <strong>phishing<\/strong>, cyber criminals are most often trying to steal your <strong>username<\/strong> (identity) and <strong>password<\/strong> (authentication).<\/li>\n<li>Use of your <strong>digital identity<\/strong> is becoming more widespread.\u00a0 Just think about how many sites \/services allow you to log in with your Facebook or LinkedIn credentials.\u00a0 Just a few years ago that would have been unheard of.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Bottom line<\/strong>: you need to protect your digital identity.<\/p>\n<p>&nbsp;<\/p>\n<p>How?\u00a0 Let\u2019s start with the basics:<\/p>\n<p>&nbsp;<\/p>\n<table>\n<tbody>\n<tr>\n<td width=\"470\"><strong>Passphrases, <em>not<\/em> Passwords<\/strong><\/p>\n<ul>\n<li><strong>Passphrases<\/strong> are the standard here at RRU<\/li>\n<li>A short, easy to remember phrase instead of one word.<\/li>\n<li>Much more secure than <em>passwords<\/em>\n<ul>\n<li>Easier to remember<\/li>\n<li>Essentially impossible to crack<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Using Passphrases<\/strong><\/p>\n<ul>\n<li><strong>NEVER<\/strong> use your RRU passphrase at any other website \/ online service.<\/li>\n<li><strong>NEVER<\/strong> share your RRU passphrase with anyone. Ever\u2026<\/li>\n<li>Avoid using pet names, common keyboard patterns, family names, etc.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>We\u2019ve got a great video on the basics of using passphrases \u2013 here\u2019s the link:<\/p>\n<p><a href=\"https:\/\/www.youtube.com\/watch?v=XIySPpFHJCo\">https:\/\/www.youtube.com\/watch?v=XIySPpFHJCo<\/a> (2 min)<\/td>\n<td width=\"501\"><\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" width=\"971\"><\/td>\n<\/tr>\n<tr>\n<td width=\"470\"><\/td>\n<td width=\"501\"><strong>Credential Stuffing Attacks<\/strong><\/p>\n<p><strong>\u00a0<\/strong><\/p>\n<ul>\n<li>The reason we ask that you <strong>never<\/strong> use your RRU passphrase at another site \/ service.\n<ul>\n<li>If that site gets hacked, cybercriminals now have your RRU passphrase.<\/li>\n<\/ul>\n<\/li>\n<li>Credential stuffing attacks are responsible for some well-known data breaches, for example:\n<ul>\n<li>Canada Revenue Agency \u2013 over 11 million\u00a0 accounts exposed.<\/li>\n<li>General Motors<\/li>\n<li>TurboTax<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>\u00a0<\/strong><\/p>\n<p><strong>Protecting yourself<\/strong><\/p>\n<p>Cybersecurity journalist Kerry Tomlinson has an informative video on <strong>Credential Stuffing,<\/strong> with tips on how to protect yourself \u2013 check it out:<\/p>\n<p><a href=\"https:\/\/www.youtube.com\/watch?v=g_RVoNvx-9Y\">https:\/\/www.youtube.com\/watch?v=g_RVoNvx-9Y<\/a> (2 min)<\/p>\n<p>&nbsp;<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" width=\"971\"><\/td>\n<\/tr>\n<tr>\n<td width=\"470\"><strong>Is my passphrase secure?<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>Good question!\u00a0 Yes, it\u2019s very possible that the passphrase you come up with has been compromised in a data breach.\u00a0 So, how do you check it?<\/p>\n<p>&nbsp;<\/p>\n<p><strong><a href=\"https:\/\/Haveibeenpwned.com\">https:\/\/Haveibeenpwned.com<\/a><\/strong><\/p>\n<p><strong>\u00a0<\/strong><\/p>\n<p><strong>HIBP<\/strong> searches for compromised user data being sold on the internet and catalogues it in searchable databases.\u00a0 You can:<\/p>\n<ul>\n<li><strong>Search<\/strong> an email address or passphrase to see if either were involved in a data breach; and<\/li>\n<li><strong>Set up alerts<\/strong> to be notified if your email address is ever detected in a data breach.<\/li>\n<\/ul>\n<\/td>\n<td width=\"501\"><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p>Next time, we look at <strong>Multi-factor Authentication (aka \u201cMFA\u201d)<\/strong>, new to us here at RRU, and how the cyber criminals will try to bypass <strong>MFA<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<p>As with all of our cybersecurity awareness materials, you are welcome to share this email with family and friends.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>REMEMBER: STOP! THINK! CONNECT.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to Week 2 of Cyber Month.\u00a0 This week we\u2019ll be focused on a rapidly evolving area of cyber security: Identity and authentication. Why are we talking about identity and authentication?\u00a0 You\u2019ve got my username and password, right?\u00a0 What else&#8230; <a class=\"more-link\" href=\"https:\/\/commons.royalroads.ca\/studentlife\/cyber-month-week-2\/\">Continue Reading &rarr;<\/a><\/p>\n","protected":false},"author":550,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[6],"tags":[],"class_list":["post-2546","post","type-post","status-publish","format-standard","hentry","category-resources"],"_links":{"self":[{"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/posts\/2546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/users\/550"}],"replies":[{"embeddable":true,"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/comments?post=2546"}],"version-history":[{"count":1,"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/posts\/2546\/revisions"}],"predecessor-version":[{"id":2547,"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/posts\/2546\/revisions\/2547"}],"wp:attachment":[{"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/media?parent=2546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/categories?post=2546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/commons.royalroads.ca\/studentlife\/wp-json\/wp\/v2\/tags?post=2546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}