Stop and Check - Unit 1 - Plus 3

Stop and check

HW5e Pre-int Stop and Check 2A

How is personal data collected? There are several ways that an unauthorised person can try and collect your data. These include: •phishing •smishing •vishing •pharming. Phishing Phishing is when a person sends a legitimate looking email to a user. The email contains a link to a website that also looks legitimate. The user is encouraged to click the link and to input personal data into a form on the website. The email could also simply ask the user to reply to the email with their personal data. The user is tricked into giving their personal data to a source that they believe is legitimate. However, both the email and the linked website are from a fake unauthorised source. The personal data that is input is then collected by an unauthorised person. This person can then use this data for criminal acts, for example, to commit fraud or steal the person's identity. Intimidation has become a common feature of phishing emails, threatening the user that they must click the link and rectify a situation immediately, or there will be a further issue. The aim of a phishing attack is to steal the user's personal data. Figure 5.1: Phishing. A real-life example of phishing PayPal have been the subject of several different phishing emails. Users receive an email that looks as though it has been sent from PayPal, as it has the PayPal branding. The email normally warns of an issue such as unexpected activity on their account, or that some kind of verification of their account is required. The user is then asked to click a link to log into their account and resolve the issue. The link takes them to a webpage that looks like the PayPal login page. If the user inputs their login details into this page, they will not be taken to their account. It is often at this stage that the user may realise that the email and webpage are fake. However, they have already given the unauthorised person their PayPal login details. Figure 5.2: An example of a phishing email claiming to be from PayPal. How to recognise phishing There are several guidelines to be aware of regarding emails to avoid being subjected to phishing. These include: •Don't even open an email that is not from a sender that you recognise or a trusted source. •Legitimate companies will never ask you for your personal data using email. Be immediately suspicious of any email that requests your personal data. •Legitimate companies will normally address you by your name. Be suspicious of any email that addresses you as ‘Dear Member' or ‘Dear Customer'. •Legitimate companies will send an email that uses their domain name. If you hover your mouse over the sender's name, it will show the email address that the email is sent from. If this does not look legitimate, for example, does not contain the correct domain name, then it is probably fake. For example, if the sender's email is user@paypal1.com rather than user@paypal.com, this is from an incorrect domain name. •Legitimate companies are protective of their professional reputation and thoroughly check any communications. They will make sure that all information given is grammatically and correctly spelt. Be suspicious of any email that contains bad grammar or spelling mistakes. •A link in an email from a legitimate company will also normally contain the domain name of the company. You can sometimes hover over the link, or right click and inspect the link, to see the address of the URL that is attached. If the URL does not contain the domain name, or also contains typical errors such as spelling mistakes, then be suspicious of this. PRACTICAL ACTIVITY 5.02 Ask a friend or a member of your family if they have ever received an email that they believed was a phishing email. Ask them how they identified it was phishing. Ask them if they know all of the given guidelines for identifying phishing emails. Smishing Smishing (or SMS phishing) is a variant of phishing that uses SMS text messages to lure the user into providing their personal details. The user is sent an SMS text message that either contains a link to a website, in the same way that phishing does, or it will ask the user to call a telephone number to resolve an urgent issue. The same advice can be followed for smishing as given for phishing. The user must question at all times any links that are sent from an unknown or suspicious user. It is advisable that if a user believes the message may be legitimate, to type in the domain name for the legitimate company website into their web browser, rather than following the link in the message. Users should block any numbers that they believe are suspicious to prevent any further risk of smishing from that number. Figure 5.3: Smishing. Vishing Vishing (or voice phishing) has the same aim as phishing, to obtain a user's personal details. The user receives a telephone call that could either be an automated system or could be a real person. An automated voice could speak to the user and advise them that an issue has occurred, such as there has been suspicious activity regarding their bank account. The user may then be asked to call another number, or just to simply press a digit and be directed to another automated system. This system will ask them to provide their bank account details to resolve the issue. The bank account details have then been obtained by the unauthorised user and can be used to commit a crime against the user. The automated system could be replaced by a real person who will try to do the same thing. They will try to convince the user that there has been an issue with an account they have and to provide the log-in details or PIN for the account to verify who they are so the issue can be resolved. The precaution to take for vishing is that no company will ever call you and ask you to provide any log-in details or PIN details over the telephone. They may ask you to provide other personal information, and if you are in doubt that the person on the other end of the phone is legitimate, it is always advisable to put the phone down and call the company back on a legitimate number that you may already know or can obtain. Figure 5.4: Vishing. Pharming Pharming is when an unauthorised user installs malicious code on a person's hard drive or server. The malicious code is designed to redirect a user to a fake website when they type in the address of a legitimate one. The fake website is designed to look like the legitimate one, to trick the user and make sure they are not aware that their request has been redirected. The user will then enter their personal details into the fake website, believing it is the legitimate one, and the unauthorised person will now have their personal data. A common technique used in pharming is called domain name server (DNS) cache poisoning. This technique exploits vulnerabilities in the DNS and diverts the internet traffic intended for a legitimate server toward a fake one instead. The unauthorised user needs to find a way to install the malicious code on the computer. They often hide the malicious code in an email attachment or link. When the user opens the email attachment or clicks the link, the malicious code is downloaded also. Figure 5.5: Pharming. The aim of a pharming attack is also to steal a user's personal data. A real-life example of pharming In 2007 50 different companies all over the world were subject to a pharming attack, these included PayPal, eBay, Barclays bank and American Express. Over a three-day period, hackers managed to infect over 1000 PCs a day with a malicious pharming code. When users who had been infected visited the websites of the different companies, they were redirected to a legitimate-looking version of the site that was designed to steal their personal data. The original email, containing the malicious code, was set up to look like a shocking news story. Users were encouraged to click a link in the email to find out more information. The code was downloaded when the user clicked the link. This was quite a sophisticated attack that required legitimate looking websites to be set up for a large number of companies. It is not known how much money the hackers were able to retrieve as a result. How to prevent pharming All of the guidelines to avoid being subjected to phishing are also relevant for recognising pharming. There are also several other precautions that can be taken to check for pharming attacks. These include: •Have a firewall installed and operational. A firewall monitors incoming and outgoing traffic from your computer. It checks this traffic against set criteria and will flag and stop any traffic that does not meet the criteria. A firewall could detect and block suspicious traffic, such as a malicious code trying to enter your system. •Have an anti-virus program installed that is designed to detect malicious pharming code. You need to scan your computer on a regular basis to check for any malicious code. It is advisable to set up an automatic scan on a daily basis at a time when your computer will normally be switched on. •Be aware when using public Wi-Fi connections. A hacker could look to directly access your computer and install the malicious code if you are connected to a public Wi-Fi connection. It is often advisable to use a VPN when using public Wi-Fi. This will help shield your internet activity and personal details from a hacker, making it more difficult for them to access your computer. Smishing can also be used as a form of pharming. A user is sent a link, that when they click is designed to download malware onto their mobile device. Therefore, it is advisable to have security software installed on your mobile and also scan it regularly to detect any presence of malware.

Important Preparations Before an Earthquake Strikes • Follow the structural design and engineering practices when constructing a house or building. • Evaluate the structural soundness of the buildings and houses: strengthen if necessary. • Be aware of the earthquake evacuation plans for all of the buildings you occupy regularly. • Strap or bolt heavy furniture and cabinets to the wall to keep them in place. • Breakable items, harmful chemical, and flammable materials should be stored properly in the lowermost secure shelves • Prepare and know where fire extinguishers, first aid kits, alarms, and communication facilities are located and learn how to use them beforehand. • Pick safe places in each room of your home, workplace, and school and practice doing drop, cover, and hold.Essential Things to Do While an Earthquake is Happening • Stay calm. • Duck under a sturdy desk or table and hold onto it. Protect your head with your arms. • If there is no sturdy furniture, sit on the floor in a corner next to an interior wall and cover your head and neck with your arms. • Move away from glass windows, sliding doors, shelves, cabinets, and other heavy objects. • Grab anything handy to shield your head and face from falling debris and splinting glass. • Stay indoors until the shaking stops. If you must leave the building. use the stairs rather than elevators. • Stay away from trees, power lines, posts, and concrete structures and proceed cautiously to an open area. • Move away from steep. slopes, which may be affected by landslides. • Move quickly to higher grounds since tsunamis might follow • Pull over to a clear location and stop. Avoid bridges, overpasses, and power lines, if possible. • Be updated about disaster. prevention instructions from battery operated radios.Essential Safety Measures After an Earthquake • Check yourself and others for injuries. • Do not panic. • Expect and prepare for aftershocks. These aftershocks may be weaker but they may sometimes cause more damage than the major earthquake. • Look for emergency supply kits. They should include food, water, medication, clothing, and other things you may need. • If you need to evacuate, leave a message stating where you are going • Do not enter damaged buildings since they might have weakened foundations, increasing their susceptibility for collapse. There can also be a lot of falling debris. • Do not use elevators • Check water and electrical lines for damages. Turn the main switch off to avoid any incidences of electric shock • Look for and extinguish fires to reduce their chances of spreading. • Avoid fallen power lines. • Tune in to radio broadcasts and be updated on disaster prevention instructions.

Act as a teacher and using the following create a quiz: " Management refers to the manner in which a situation is handled. In order to manage an event, the manager must plan what must be done, organise to get the resources needed for the work that needs to be done, lead his/her people and then check and control the outcome of the event. Planning -The manager looks at the future and then decides how to approach it. Different plans must always be considered and the best one chosen. The second / alternative plan is called a contingency plan, i.e. a plan B if plan A does not work. Critical question during planning ○ Why must the plan be executed? ○ What activities are required? ○ Where must the planned activities take place? ○ When will the activities commence? ○ Who will participate in these activities? ○ How is the plan to be executed? Planning is a management tool. This means the plan must help the business to achieve its goals. The plan is not the goal, but an indication of HOW the goal will be achieved. It is therefore important that management must not stop after planning, but make sure plans are implemented. Plans are aimed at achieving objectives. However, it should always be flexible because if there are changes in the business environment (e.g. changes regarding competitors, suppliers, demands of target market etc), the original plan may no longer be suitable. Plans should be accurate. It is important to consider all factors and alternatives before the plan is finalized. Planning must be realistic. This means it should be possible to achieve the outcome of the plan. KISS Principal - Keep it (the plan) short and simple. Organisation as a component of management is all about resources, which means the entrepreneur has to combine the other three factors of production (raw material, labour and capital) in such a way that the objectives of the business are met. Leading is the third step of business management. Plans will be carried out in order to achieve objectives (i.e. work will be done) through effective leadership and guidance. A good leader will never just be task orientated, but will always keep in mind that he is leading people and that people should be treated with dignity and respect. Controlling is ensuring that everything goes according to plan. The actual results are compared with the standards set during the planning stage. Control is important because it gives feedback to management on the performance in the business.

How to Stop Avalanches ToB A major concern of ski resorts is avalanche control. Most avalanches occur outside the boundaries of the regular groomed ski runs. But each year, skiers and trekkers on snowshoes go into these remote areas where most avalanches occur. There are two primary ways to prevent avalanches-by blasting the snow with explosives, or by erecting snow fences. Explosives Explosives are primarily used to prevent avalanches, especially at ski resorts where other methods are often impractical. Maintenance staff from the ski resort travel to potential avalanche areas and areas with steep slopes. First, they measure the depth of the snow and its quality. They want to check for hard, loose, wet or icy snow layers. If an area is considered dangerous, small explosives are fired into the side of the steep terrain. The explosion loosens the top layer of snow, which tumbles harmlessly down the mountainside. But using explosives is costly and dangerous. Some researchers are currently experimenting with the cheaper and safer method of using ultrasonic sound waves that shock the snow into falling, averting an avalanche and saving lives. Snow Fences It is very common to put up snow nets or snow fences. These nylon nets or wooden and steel fences are placed at the top of slopes. They prevent the buildup of snow on the downwind side, thereby lessening the chance of a slab avalanche. Beacons and Radio Devices Fortunately, there are companies that specialize in making rescue beacons. These are small electronic devices that send out a radio signal to search and rescue crews. Most people who venture into the backcountry carry some sort of beacon or GPS device. They can help locate a buried victim up to 80 meters away. However, these beacons and GPS devices only send out a signal if the victim turns it on. Often, the victim is too injured to think clearly and press the 'on button.' If search and rescue crews do not quickly reach the victims, the skiers will not be discovered in time. Surviving an Avalanche If you are ever caught in an avalanche, the chances are slim that you will survive. If you are not killed instantly, you only have a short time (15~35 minutes) before your oxygen runs out. Take off your ski, boots and poles. Use a swimming motion to claw your way to the surface. Often people do not know which way is up or down. The effect of this is disorientation. It is not uncommon for avalanche victims to dig in the wrong direction. With proper precautions, both skiers and ski resorts can avoid the tragedy of an avalanche.

How to Stop Avalanchesnow with explosives, or by erecting snow fences. Explosives Explosives are primarily used to prevent avalanches, especially at ski resorts where other methods are often impractical. Maintenance staff from the ski resort travel to potential avalanche areas and areas with steep slopes. First, they measure the depth of the snow and its quality. They want to check for hard, loose, wet or icy snow layers. If an area is considered dangerous, small explosives are fired into the side of the steep terrain. The explosion loosens the top layer of snow, which tumbles harmlessly down the mountainside. But using explosives is costly and dangerous. Some researchers are currently experimenting with the cheaper and safer method of using ultrasonic sound waves that shock the snow into falling, averting an avalanche and saving lives. Snow Fences It is very common to put up snow nets or snow fences. These nylon nets or wooden and steel fences are placed at the top of slopes. They prevent the buildup of snow on the downwind side, thereby lessening the chance of a slab avalanche. Beacons and Radio Devices Fortunately, there are companies that specialize in making rescue beacons. These are small electronic devices that send out a radio signal to search and rescue crews. Most people who venture into the backcountry carry some sort of beacon or GPS device. They can help locate a buried victim up to 80 meters away. However, these beacons and GPS devices only send out a signal if the victim turns it on. Often, the victim is too injured to think clearly and press the 'on button.' If search and rescue crews do not quickly reach the victims, the skiers will not be discovered in time. Surviving an Avalanche If you are ever caught in an avalanche, the chances are slim that you will survive. If you are not killed instantly, you only have a short time (15~35 minutes) before your oxygen runs out. Take off your ski, boots and poles. Use a swimming motion to claw your way to the surface. Often people do not know which way is up or down. The effect of this is disorientation. It is not uncommon for avalanche victims to dig in the wrong direction. With proper precautions, both skiers and ski resorts can avoid the tragedy of an avalanche.

Related quizzes

Related quizzes