7/20/09

Rochester Institute of Technology Offers First Ever Online Graduate Education Courses in Cyber Safety

rit online safety courses

The Rochester Institute of Technology is offering the first ever cyber safety education courses as part of their Master's program this Fall. Developed through The Cyber Safety and Ethics Initiative, the courses include:

The online classes are designed especially for K-12 educators, as well as IT professionals employed in any business sector concerned about youth Internet safety, information security, responsible decision-making, network environments, and the community.

Courses may be taken for variable credit (zero to four) depending on higher education and continuing education (professional development) needs.  This means that students who do not wish to earn college credit can effectively audit all or part of the classes to reduce RIT tuition.

Because the courses will be offered online, students located anywhere in the world can participate without having to attend classes at the RIT campus in Rochester.

For more information:

bcybersafe.org

RITs Center for Multidisciplinary Studies

-----

Stumble Upon Toolbar

7/14/09

Cynthia Moreno| Colinga MySpace Rant Published in Local Newspaper

cynthia moreno

Backlash Forces Family to Close their Business.

After visiting her hometown of Colinga, Cynthia Moreno posted an unofficial complaint to the city on her MySpace page. Her old high school principal found the rant, and sent it to the editor of the local newspaper. It was printed in the “Letters” section.

The “letter” whipped up a storm of anger in the town. Her family received death threats. Someone shot a gun outside their house. They had to close their family business (after 20 years).

The Morenos sued the principal for invasion of privacy. They lost.

“In an April 2 decision, a California appellate court sustained the trial judge's decision that the Morenos failed to state a claim for invasion of privacy. Statements published on MySpace, the court concluded, are public – not private. To claim invasion of privacy, the Morenos needed to allege that something private was disclosed, and Cynthia’s posting did not qualify as private once it was published on MySpace.

In addition, the court found that you have no expectation of privacy in materials you publish to a social networking site simply because you identify yourself by first name only, at least as long as pictures or other information present allow a viewer to identify you.

Significantly, the court's opinion does not address what, if any, privacy settings were on Moreno's MySpace page. What if it were only accessible to friends she had approved, and one of those friends copied it and passed it along? What if it were protected with a password? The court does not say.” [Linda Holmes, The Law in Real Life]

While the court told the family they could sue for emotional distress, the decision underlines the importance of discussing with children and teens how privacy works on Internet (nothing is private).

See this video for more on reputation management.

[hat-tip: Neighborhood Crime Map]

------

photo: sunside

Stumble Upon Toolbar

Rick Lawhorn: Parental controls have a long way to go before parents should decide to relax their guard.

parental controls rick lawhorn Department of HomeLife Security: Chief Security DAD on Parental Controls

By Rick Lawhorn CISSP, CISA, CHP, CHSS

Not All Parental Controls Are Made Equal

I have been noticing that websites and home electronic devices are becoming more and more kid-aware than in the past.  This is good news, but not something to rest upon quite yet.

There is still no consistent interface or method for the numerous devices in our home and across the internet.  Many of the parental control methods are still cumbersome and lack some form of security. This makes the entry point to turning on parental controls with DVD players, CDs and TV very difficult in terms of remembering numerous codes and relying on the media content to be classified correctly. 

We shouldn’t be using a single code for all of our devices for security reasons. But on the other hand, if the TV, VCR, DVD and the PVR each have different codes it becomes quite confusing to maintain and remember.  Now add to this that each time we have to approve and unlock a movie, our kids are almost always in the room with us.  If the device shows the code on the screen or we are not careful to mask our keystrokes, guess who probably has the code now?  Probably the ones we are trying to protect.

On the internet, the issues are compounded and amplified tremendously with Web 2.0.. When internet users (not companies) are responsible for tagging the media appropriately, we end up with personal ratings, if any,  that may not align with industry standards. Companies are required to implement rating but our peers in the internet community are not. 

Parental controls are only as good as the content is properly classified and rated. Some media (computer or PDA) that can be delivered to us in multiple ways may not have the option of parental controls. For example, if a video was sent by email or downloaded from a shared folder on the internet, the file might be opened using a tool outside of knowledge. So there is a definite increase in risk to kids as normal consumer electronics become increasingly internet aware and provide multiple avenues of data access.

I believe this touches each one of us in a different way.  Some will struggle through the issues but many others will abandon the capability altogether. Its simply a matter of complexity and effectiveness.

So what can parents do that will help out this situation? 

First, I believe we need to teach our kids what it means to self-monitor.  I am not suggesting that you rely on their capability, but use this as a way to show them trust and to teach them the power of communication. It may mean teaching them certain channels on TV that are approved.  It could also be helpful to stack their DVDs or CDs separate from others and train them on where to pick them up.

Second, we have to come to the realization that security and protection are never 100%.  Try as we might, we can never achieve this unless we unplug everything in our house and never go outside.  With this in mind, we have to prepare how we expect to handle a situation that arises. Call it your incident response and make sure that the family knows that they can tell you and what your actions will be.

Third, we should continue to learn about the many ways media enters our home.  Each time technology comes into our perimeter, we need to learn what it can do and what it can't do. It is the only way to stay on top of things and to determine significant gaps in our parental controls.

Lastly, we need to continue to press the industry for a universal approach to parental controls.  By providing common program interfaces or specialized accessory that can help tie together all the different system today, parents who wish to implement these controls may find it easier to manage and more effective in blocking inappropriate media. 

The industry has made great strides in providing a mechanism for parental controls across many consumer electronics and internet services.  We need to continue to charge forward and make things easier and more effective for the parents. By further reducing the complexity and multiple interfaces by different vendors, we can really begin to focus on the function vs. the form.

--Rick Lawhorn CISSP, CISA, CHP, CHSS.

-------------------------

photo

Stumble Upon Toolbar

7/9/09

HotSpots: Summer Time is Wireless Time

wireless security

Take Precautions When Traveling and Using Free Internet

We’d like to thank Kristen Boucher from Kaspersky Lab for sending these suggestions for Internet security and hotspot-use this summer. Enjoy:

Taking the family on vacation? Bringing along the laptop to look for things to do and places to go?

It makes sense, but be careful. In the United States 25% of adults use their laptops where a hotspot service is offered. According to a recent article by Kaspersky Lab anti-malware researcher Christian Funk, Summertime is Wireless Time, the hotspot business is projected to increase to $3.46 billion in 2009, and cybercriminals have started to take advantage of unsuspecting wireless users.

Trusting unfamiliar wireless networks could mean that you are trusting your information to fake networks created by cybercriminals who are lurking on the other side ready to steal your information.

A man-in-the-middle-attack happens when cybercriminals make users believe they are viewing a legitimate secure environment (i.e. a bank account website) when in actuality the cybercriminal is intercepting any information being entered.

Suggestions for steering clear of these attacks:

1.      Encrypt sensitive data. There are special and free programs that allow you to create encrypted files that can only be opened with a password. If you lose your laptop, encrypted sensitive data will remain private.

2.      Implement an Internet security solution. Such solutions provide network protection modules like a firewall and HIPS (Host Intrusion Prevention System). These functions are a protective barrier between malicious content and your computer. They keep the bad stuff out.   

3.      Always install updates on your machine. Make sure you have the latest version of your operating system and third-party application software.

4.      Be mindful of your activities. Unfamiliar networks should always be looked at with skepticism. Never provide personal account information if you are unsure of the source.

--Katie Boucher, Communications Coordinator, Kaspersky Lab Americas

Stumble Upon Toolbar

7/8/09

PointSmart.ClickSafe Releases Best Practice Recommendations for Online Safety

Unprecedented Diverse Group of Stakeholders Concerned with Child Online Safety and Digital Literacy Announces Best Practice Recommendations

iKeepSafe is a proud member of the PointSmart.ClickSafe Task Force which announced its Best Practice Recommendations this morning at the capitol. Participating in the announcement were U.S. Rep. Debbie Wasserman Shultz (D-FL) and U.S. Rep. John Shimkus (D-IL), and several task force members who discussed the process and outcome of the report.

For the full report: PointSmart.ClickSafe.

bestpractice468x60

Report Also Calls for More Online Safety Coordination at National Level along with Resource Development


Washington, DC – A diverse coalition of technology companies, child advocacy and
parents’ groups, educators, and health researchers today announced a comprehensive set of recommendations that companies in the Internet industry can adopt as best practices to help keep children safe and smart when online. The effort marks the first time such an inclusive task force, representing companies and organizations such Verizon, Comcast, Cox, Google, Yahoo!, AOL, Symantec, Common Sense Media, the Internet Keep Safe Coalition (iKeepSafe), PTA, Family Online Safety Institute (FOSI), and the Children’s Partnership, has come together to develop recommendations for industry best practices along with suggestions for policymakers to bring better coordination to online safety efforts and education efforts.

Contained in the report PointSmart.ClickSafe: Task Force Recommendations for Best
Practices for Online Safety and Literacy, found online at www.pointsmartreport.org, the group’s recommendations span all sectors of the Internet industry and are intended to be applied selectively based on a company’s role and the types of services it offers. Embracing a childcentered perspective, the PointSmart.ClickSafe. recommendations address three categories of children’s online experience – before they go online, during online activities, and when problems arise – and suggest best practices for each stage. The recommendations recognize that a singular focus on safety is insufficient and that children also need to learn digital and media literacy skills to help them think more critically about their online activities and content they consume and create.

The best practice recommendations suggest that:

  • Before children go online, basic information and education about the digital landscape should be in place and available to all children, parents, educators and caregivers so they can understand risks and appropriate behavior while online, and what options they have for proper use of the service.
  • During a child’s online activity, technology and information should be available that can define and control a child’s digital activities and help parents establish the structure that best meets their family needs.
  • When problems arise online, companies should have robust procedures, systems and resources to handle complaints, report necessary trouble spots and cooperate with appropriate enforcement agencies if applicable.

The task force report also recognizes that while the issue of online safety spans many stakeholder groups and jurisdictions, most Internet safety efforts have been fragmented and there is often a significant lack of coordination and resources. To address this gap, the report calls for more coordination at the national level supplemented with adequate resource development.

Specifically, the report asks policymakers to consider:

  • Expanding online safety efforts to emphasize digital media literacy and education programs that empower parents and teachers to prepare kids to navigate the world of online and digital media.
  • Designation by the President or Congress of a lead federal agency that would work collaboratively and comprehensively with all major stakeholders in marshaling resources for the improvement of online safety and Internet literacy and coordinate the activities under diverse federal programs.
  • Consideration by education policymakers to adopt a set of national goals for online safety, including if possible minimum standards for a curriculum on digital literacy.
  • Ensuring that all digital literacy and online safety programs are funded through competitive grants open to qualified applicants, with periodic review and assessment built into the grant process, so that the results from the best programs can be replicated
    in other communities.
  • Supporting digital literacy and online safety efforts by providing funding for: Research on the learning potential of digital media; New modes of assessment and evidentiary standards; Professional development for teachers; Curriculum development for students; Public awareness campaigns for parents and families; and Research designed to identify, highlight, and promote best practices and further solutions to improve digital literacy and fortify online safety.

The PointSmart.ClickSafe. Task Force, and its new report, is the outgrowth of a major summit convened by iKeepSafe, Common Sense Media, Cable in the Classroom, and the National Cable & Telecommunications Association in Washington, DC in June 2008 to discuss best practices for keeping children safe online.

                                                            ***

Statements from Members of the PointSmart.ClickSafe. Task Force


John Ryan, Chief Public Safety Officer, AOL:

“AOL has a long history of providing children and families with a safer online experience. We are pleased to be part of such a diverse taskforce and to support the recommendations for industry online safety best practices. As a company, we are committed to creating tools for parents to help protect children online.”

Laurie Lipper, Founder and Co-President, The Children’s Partnership:

“The Children’s Partnership welcomes the recommendations in this report, which represent a positive step in providing online safety information and tools for children and their parents. We are pleased that these recommendations apply to the many diverse sectors of the Internet industry and believe that the child-centered approach will help industry organize and highlight important information and useful applications for families. We especially appreciate the recommendation to make these benefits available in plain language and, when possible, in multiple languages so that the great diversity of America’s families can effectively guide their children online.”

Jay Opperman, Senior Director of Security & Privacy, Comcast:

“As the nation’s leading residential Internet Service Provider, Comcast takes our responsibility to provide a safe and secure online experience very seriously and we are pleased to contribute to the PointSmart.ClickSafe Best Practices Report to help keep children safe online.”

Jim Steyer, CEO and Founder, Common Sense Media:

“All of us – educators, policymakers, internet and media companies, and of course, parents – have to step up our efforts and work together. We all share responsibility for helping kids make safe and smart internet decisions through digital media literacy and education. There is more work ahead, but the fact that all of the key constituents came together to highlight this serious issue and present these best practices is a very encouraging sign that we can, and will, keep our kids safe online.”

Necole Merritt, Vice President of Corporate Communications, Cox Communications:

“Internet and wireless safety awareness and education efforts are a central focus of Cox Communications’ corporate social responsibility efforts through our Take Charge! program established in 2004. We applaud the efforts of the PointSmart.Click Safe task force for advancing the study of the critical issues of online safety and Internet literacy, and most importantly, for clearly defining best practices which can be applied across industries to ensure an even safer Internet in the future.”

Stephen Balkam, CEO, Family Online Safety Institute:

“The Family Online Safety Institute (FOSI) strongly supports the recommendations from the NCTA Task Force and its emphasis on research, education and evaluation of existing online safety methods. Kids today are increasingly tech savvy. It is vital that we help them develop digital media literacy skills and guide them how to use technology in a safe and responsible way. At FOSI, we are working with various stakeholders to build a culture of responsibility online and this report will add impetus for a cohesive and collaborative approach to not only keep kids safe, but also to encourage personal resiliency and responsibility for their online actions.”

Pablo Chavez, Managing Public Policy Counsel, Google:

“We believe that the PointSmart.ClickSafe. task force is an important example of how industry and consumer groups can work together to keep kids safe, and we are happy to be a contributor to the Recommendations for Best Practices for Online Safety and Literacy. Protecting children online is a shared responsibility, and we look forward to working with the task force to continue to explore and share innovative best practices to ensure a safe online experience for all of our users.”

Marsali Hancock, President, iKeepSafe:

“I was honored to be part of the Blue Ribbon Task Force that brought together so many key stakeholders including public health--all looking for industry best practices that will improve the online experience for youth. This was real work: industry stakeholders actively participated and debated. We all considered every option that was brought to the table, looking for new tools and expectations that promote cyber-citizenship. iKeepSafe is pleased to take these valuable findings on to the NTIA working group as a springboard for future discussion. Moving forward we encourage industry to simplify and expand the process of reporting abuse to allow for intervention, prevention and bystander awareness initiatives. We're encouraged by new industry trends that allow more options for users around identity, privacy and reputation management.”

Kyle McSlarrow, President & CEO, National Cable & Telecommunications Association:

“NCTA is proud to have been part of this outstanding group of companies, educators, advocacy groups and online safety pioneers that all share the same goal of improving our Internet safety and education efforts. This report and the best practice recommendations are the culmination of thoughtful discussion and constructive suggestions from all members of the task force. We will continue to do our part to help cable companies provide a safe and positive online environment for all.”

Charles J. “Chuck” Saylors, President, National PTA:

“National PTA is pleased to support the PointSmart.ClickSafe. report and best practice recommendations. National PTA, the nation’s largest volunteer child advocacy association, has a strong legacy of working to address issues concerning children’s education, health and well being. PTA works to improve media and Internet safety by providing relevant resources and tools to parents to manage media and to be safe and thoughtful users of media and technology.

PTA has participated in the task force over the last year and is pleased to see the internet industry taking voluntary action to address the critical issue of children’s online safety. When implemented by internet industry companies, these best practices will be an important contribution to minimizing risks and creating a safe and secure online environment for children.”

Adam Thierer, Senior Fellow, The Progress & Freedom Foundation:

“It was a great honor to serve on this working group alongside so many respected child safety experts and advocates. The working group has produced a stellar report, finding that there is no single ‘silver-bullet’ solution to child safety concerns. Instead, we need a holistic approach based on education, empowerment, and sensible industry self-regulation. The best practices outlined in this report will set a new benchmark for online operators going forward to ensure that they have policies in place to keep kids and parents educated and informed about how to stay safe online.”

Catherine Teitelbaum, Director, Child Safety & Product Policy, Yahoo!:

“Yahoo! has been helping to ensure children's online safety and literacy for many years, and we applaud the PointSmart. ClickSafe. initiative for establishing best practices that we believe will help make a difference for children the world over. This year-long effort has brought many stakeholders to the table with the singular goal of helping make the internet a safer place for children, and Yahoo! is thrilled to play its part in helping to make that a reality.”

------

Stumble Upon Toolbar

7/7/09

Rick Lawhorn: Safety & Security Basics for Parents.

home internet safety

Summertime Means More Time with Connected Technology

by Rick Lawhorn

Would you allow a complete unknown to enter your home and watch or entertain your kids?

In the physical world, most of us do everything we can to be certain that our babysitter checks out okay. It’s ironic that virtually our vigilance can sometimes be much more relaxed.

Each time our kids are sent to technology to serve as the entertainer or babysitter, we are allowing an unknown and potentially uncontrollable element to enter our kids’ lives. If we do not have some way to contain the flow of media at home, we are inviting opportunities of uncontrollable content or contact with our most precious gifts.

We do everything we can to prevent physical harm, but virtual harm left unchecked can leave scars in what kids can see and experience.

Technology In the Home

Our role as parents demands that we treat the virtual world just like the physical world we live in today. In the physical world, we have laws and boundaries established that make our oversight a little easier. We are able to train our children what dangerous situations could look like and how to respond to them.

In the virtual world, this task is not so simple. To understand what we are up against, we have to educate ourselves on the basics of security and apply those learnings to new and existing technology in our house. This is easy to state (and I see it posted all the time) but to put this into action we can use is always a little thin. To help get parents out of that deficiency, here are some facts and actions you may find useful:

FACT: Technology is not limited to just computers and the internet.

Technology is any device in the house that contains video, audio and data from the outside world. It is not limited to just the internet, so think in terms of television, cell phones, DVD players, etc. All the media that comes from the outside world has the opportunity to provide content that you do not want your kid to see or hear at their stage of life.

For example, many of us have movie channels on our television sets. If we have not placed parental controls on the access, our kids can wander into certain TV areas that they should not visit. How do you control where they go or what they access in this scenario? In many cases it can rely heavily on trust, which brings us to our next point.

ACTION: Learn what the technology can do from our kids (yes, from our kids) and then determine what things can be controlled. Give your kids the new technology and ask them to tell you how it works, even if you already know the details. For media, ask them how they distinguish between acceptable and unacceptable content. It is crucial to understand your kids’ thought processes for education and awareness.

FACT: Security is never 100%, ever.

In many cases it can only be 10% instruction and rules, 50% controls and options to prevent or filter inappropriate media, and 50% trust.

The problem is that trust is not limited to just your kid. Trust has to include the outside world as well. It does not matter if it is the trust with internet providers to block what they say they block, or the advertisers on TV to only show pg-rated content.

We can have faith that everyone is operating within the laws or guidelines, but we can't assume accidents won’t happen. As smart parents, we know this and have to plan on things happening that may not be your kid's fault.

Communication and education is the key at this point.

ACTION: Clearly tell your kid what to do if something unexpected happens. Always tell them that they can come to you without fear. Personally understand that they will test and experiment, but the importance is to make sure all incidents are told to you first. Stay in the communication loop. Let them know that if something happens and you find out by monitoring or reviewing, they may be blamed for it. You can consider this “safe” training for the real world.

FACT: Security is about education and communication.

Similar to the physical world, you have to pass on your knowledge to your kids about the virtual world. Tell them about viruses, hackers, online stalkers...everything you are aware of and how to deal with it. Again, the objective is to remain in the communication loop. In the physical world, you teach your child what to do if a stranger (or a known bully) approaches. Teach them how to deal with a virtual issue and give them plenty of examples.

In addition, make them aware of the ability to monitor and track their activity. They have to know that you are watching what goes on, just like you do when you are at home. Of course, I am not suggesting a police state at home, but make them aware that you expect them to be forthright and come to you with issues or access they stumbled upon. We should promise an open door policy so they feel comfortable to approach us if they accidentally violate our instructions.

ACTION: Teach them what you know about threats they could experience and how you expect them to deal with them. You may not have the answer or a way to deal with the issue, but at least you will know.

ACTION: Talk to them about your open door policy. Instill in them a sense of trust while informing them of the consequences in getting caught if they decide not to tell you upfront.

ACTION: Never waste an incident. Use each and every issue as means to teach your kids about the pitfalls and potential future outcomes. Show them how to avoid those same issues in the future. Teach them to police themselves, no matter how small the area you assign.

FACT: Safety is a measure of your perceptions in security at a certain time/place

Your perception of control and security and your kid’s perception will always be different. You may think that you have everything under control while your kid only defines safety in the physical realm. Kids can have a hard time believing that virtual actions can lead to physical harm. They may believe that they are anonymous and no one can track their activity. Kids may view taunting and harassment as joking around or playing jokes will not lead to any harm. You may think that these gaps can actually increase your security at home, especially if you believe you are anonymous. The reality is that security is never 100%, physically and electronically. Our job as parents is to make sure we communicate and level set our perception with our kid's perception once in a while.

As an example, long ago when I was a kid, I remember thinking that I would live forever and death was a very remote thing that happened when you were old. I was gently reminded by experiences and asking questions that death is something that can happen at any time. That same methodology needs to be applied to kids today about the virtual world.

ACTION: Talk with your kids about how and why they feel safe at home and online. Ask them if they feel that safety is important to them online. Let them know what you are doing and why you think they are protected. Try to be open and honest about what you are monitoring or filtering since being sneaky can reduce their trust in you. Be open and share what things each of you have seen or done online and how you can help each other out. I know this can sound a little over the top, but it personally works for me all the time. I find that if I play the D.A.D (Dumb As Dirt) card on the latest technology, my child will completely saturate me with what she has been able to do or what a friend has done...almost to the point of bragging. It is a great way to learn what other parents are doing (or not doing) while the child is focused on teaching her clueless dad.

We must be able to bend and flex with the times, implementing new strategies and actions as the situation demands.

We need to open our minds to conducting personal "what if" scenarios each time a new form of technology enters our world. Of course, this does not have to be to the nth degree, but should at least focus on what is new vs. the existing capabilities.

We should realize that at some point, we will depend on this technology to become a temporary babysitter for our kids while we are trying to get a few things done around the house. If we can begin to apply the concepts above and communicate our expectations clearly and routinely, we can certainly help increase our kid's level of security, trust and awareness of the pitfalls in using technology around the house.

We need to understand, and accept, that security is never 100% in both the physical and virtual world. Our goal as parents is to strive for complete security but understand that realistically we can only attempt to locate the gaps and provide a way for our kids to learn and adapt.

-----

Do you have a question for Rick Lawhorn about technology security in your home?
Email him at iKeepSafeNews[at]yahoo[dot]com

Rick Lawhorn CISSP, CISA, CHP, CHSS has over 18 years of experience in information technology which includes an extensive security, compliance, privacy and legal background. Rick has served as the CISO for GE Financial Assurance and Genworth Financial and has held information technology leadership roles within the Hunton &Williams law firm and the National White Collar Crime Center. He has been published in numerous international and domestic security magazines and currently serves on several advisory boards for new, innovative security products.

------

photo

Stumble Upon Toolbar

7/6/09

Rick Lawhorn: Department of HomeLife Security, Chief Security D.A.D

Rick Lawhorn cissp cisa chp chss

CISA, CISSP With 18 Years of Experience Offers Security Advice for Parents

Rick Lawhorn CISSP, CISA is the Vice President, Security and Operations for FileLife, Inc. He has served as the Chief Information Security Officer (CISO) for two Fortune 100 companies and served in information technology leadership and security roles within multiple law firms and the National White Collar Crime Center. He has over 18 years of information technology and security experience and has been published in numerous domestic and international security magazines (including TechTarget, CSO, CIO, and (IN)SECURE). Currently, he’s serving on several advisory boards for emerging security products, and also serving as a security expert for a New York based law firm focusing on consumer privacy rights.

We are excited to announce Rick Lawhorn has also agreed to be iKeepSafe’s own Department of HomeLife Security Chief Security D.A.D.

He will be posting regularly, and also taking security questions from parents. If you have a question please post it in the comments section, or email us at:

ikeepsafenews[at]yahoo[dot]com

-----------

Stumble Upon Toolbar