10232003 Maricopa Association of Governments Telecommunications Advisory Group

10/23/2003 Maricopa Association of Governments Telecommunications Advisory Group FBI Phoenix Computer Crime Squad SA Tom Liffiton

Cyber Front Status Report FBI Phoenix Computer Crime Squad

FBI Phoenix – Computer Crime Squad

social engineering FBI Phoenix – Computer Crime Squad

tech vulnerabilities FBI Phoenix – Computer Crime Squad

Network Security Issues FBI strategy Computer Crime Squad

FBI Priorities Post 9/11/2001 counterterrorism counterintelligence computer crime investigations prevention FBI Phoenix – Computer Crime Squad

Investigation Computer Intrusion Program unauthorized access malicious code denial of service FBI Phoenix – Computer Crime Squad

Investigation Computer Intrusion Program Active investigations Developing intelligence Sharing intelligence FBI Phoenix – Computer Crime Squad

Prevention Infra. Gard Program Infra. Gard Chapters Outreach Presentations Information Sharing FBI Phoenix – Computer Crime Squad

CSI/FBI 1996 – 2003 COMPUTER CRIME AND SECURITY SURVEY FBI Phoenix – Computer Crime Squad

Unauthorized use of computer systems within the last 12 months? Percentage of Respondents YES CSI/FBI 2001 Computer Crime and Security Survey Source: Computer Security Institute NO DON’T KNOW 2001: 532 Respondents/99. 6% 2000: 585 Respondents/91% 1999: 512 Respondents/98% 1998: 515 Respondents/99% 1997: 391 Respondents/69% 1996: 410 Respondents/96%

2002 www. gocsi. org FBI Phoenix – Computer Crime Squad

56 FBI offices 79 chapters 9400+ members information sharing FBI Phoenix – Computer Crime Squad

contact SA Tom Liffiton 602. 279. 5511 x 3105 602. 650. 3105 tliffiton@fbi. gov www. infragard. net FBI Phoenix – Computer Crime Squad

FBI Phoenix – Computer Crime Squad www. nipc. gov

• Security Policy • Security Organization ISO 17799 STANDARDS • Asset classification and control • Personnel Security • Physical and environmental security • Communications and operations management • Access Control • Systems Development and maintenance • Business Continuity Management • Compliance (HIPAA) (Gramm-Leach-Bliley)

www. csrc. gov/publications

Infra. Gard 2003 Implementing the National Strategy Congress and Conference Washington, DC 23 -25, 2003 June

www. ciddac. org

wireless vulnerabilities pbx vulnerabilities incident response local presentations intrusion detection computer forensics encrypted storage disaster recovery FBI Phoenix – Computer Crime Squad

have a relationship with law enforcement adopt info assurance best practices develop incident response plan to do to do educate users on security participate in Infra. GArd maintain audit logs think evidence practice due diligence FBI Phoenix – Computer Crime Squad

contact SA Tom Liffiton 602. 279. 5511 x 3105 602. 650. 3105 tliffiton@fbi. gov www. infragard. net FBI Phoenix – Computer Crime Squad