Brian Honan, IRISSCERT Social media networks provide individuals and businesses with exciting opportunities to communicate and collaborate with others throughout the world. But with these opportunities come a number of security challenges and risks. This talk will outline how social media networks can pose various threats to businesses, from information leakage, reputational damage, to social engineering profiling, and vectors for enabling compromise of corporate systems. Social media networks also enable the rapid dissemination of news which in the event of an information security breach could either save or destroy an organisations reputation. Understanding and dealing with these challenges will enable companies to like and favourite social media networks in a secure way. Brian Honan is an independent security consultant based in Dublin, Ireland, and is the founder and head of IRISSCERT, Ireland's first CERT. He is a Special Advisor to Europol's Cybercrime Centre (EC3), an adjunct lecturer on Information Security in University College Dublin. He is the author of the book "ISO 27001 in a Windows Environment" and co-author of "The Cloud Security Rules", and regularly speaks at major industry conferences. In 2013 Brian was awarded SC Magazine's Information Security Person of the year for his contribution to the computer security industry.

1. Social Media
&
Security @brianhonan

2. Who Am I?

3. @brianhonan

4. What
is
Social Media?

5. Websites and applications that
enable users to create and share
content or to participate in social
networking.
- Oxford English Dictionary

6. Forms of electronic communication
(as Web sites for social networking
and microblogging) through which
users create online communities to
share information, ideas, personal
messages, and other content (as
videos) .
- Mirriam-Webster Dictionary

7. “A group of Internet-based
applications that build on the
ideological and technological
foundations of Web 2.0, and that
allow the creation and exchange of
user-generated content."
- Wikipedia

11. Courtesy of Instantcheckmate.com

13. Government Official Sacked

14. Forgot Boss was Facebook Friend

18. Posting They Are Not at Home
Yes, 53%
No, 47%
Courtesy of Legal & General Group PLC

19. Yes, 60%
No, 40%
Post About Nights Out
Courtesy of Legal & General Group PLC

20. Shared Images of Expensive Items
Yes, 24%
No, 76%
Courtesy of Legal & General Group PLC

21. Courtesy of Instantcheckmate.com

22. Courtesy of Instantcheckmate.com

23. Social Media Scams

24. Competition Winners ??

25. Click on This Link …

26. Twitter Threats

27. Koobface
Courtesy TrendMicro

28. Zeus?

29. Do You Trust That App?

30. CourtesyofBitrebels.com

31. Courtesy of Instantcheckmate.com

32. Courtesy of Instantcheckmate.com

33. Courtesy of Instantcheckmate.com

34. Anthony Stancl

35. Secure Passwords?

36. Common Passwords

37. Password Reset

40. My Name is Marie

42. How Did I Steal Her ID?

43. Corporate Issues

44. Password Reuse
81%
61%
19%
39%
0% 20% 40% 60% 80% 100%
IT Pros
General
Courtesy Darkreading.com & welivesecurity.com

45. Social Media Treasure Trove

49. The Gift That Keeps on Giving

50. Social Engineering
Emily Williams & Robin Page
http://www.thesecurityblogger.com/?p=1903

53. Misinformation

54. Manipulation?

55. How To Defend

56. Establish Policies

57. Awareness

58. Be Careful
What You
Share

59. Update Privacy Settings

62. Twitterfall

65. Handling Security Breaches

66. Bad News

69.  Use All Channels.
 Use Social Media to Direct
People to More Information
 Update Regularly (Timezones,
etc.)
 Keep Webpage Updated
 Have Staff Trained
 Trust Employees
 Get Senior Representative to
Talk Early and Often
 Engage With Others
Use Social Media in IR

70. Monitor & Respond

71. Brian.honan@bhconsulting.ie
@brianhonan