Protect your device from unauthorized access! Introducing case studies and countermeasures

With the spread of the Internet, methods for gaining unauthorized access to computers are becoming more and more popular.Unauthorized accessIf you do so, your personal or organization's information stored on your computer may be used without permission, or your services may be suspended.Significant damage to credit and financesIt may also cause. In this article,Specific examples of damage caused by unauthorized access and countermeasures against unauthorized accessI'd like to introduce_______

What is unauthorized access?

What is unauthorized access?"Acts of unauthorized access to devices and acts that encourage unauthorized access"I'm talking about.

Those who gain unauthorized access exist in the computer's OS, applications, and software.Exploiting vulnerabilitiesand infiltrate the other party's computer. They can then cause damage such as stealing important information or stopping services without permission.

As society becomes increasingly networked, damage caused by unauthorized access is increasing. In 2000, in order to crack down on such unauthorized access,“Act on Prohibition of Unauthorized Access (abbreviation: Act Prohibiting Unauthorized Access)”has been enforced. Those who violate the Unauthorized Computer Access Prohibition Act are subject to imprisonment for up to 3 years or a fine of up to 1 million yen (Article 11).

Examples of unauthorized access

In the previous chapter, we explained that unauthorized access involves illegally accessing a computer and causing damage to the other party's computer. So what are the specific cases? In this chapter, we will focus on cases with a large number of damages.

Unauthorized remittance through internet banking

As a result of unauthorized access, the password associated with Internet banking is obtained, and the person impersonates the person in question and sends money to an external party.

When entering information, please be careful when entering information when opening the website of a financial institution, etc.Are there any changes to the login screen specifications (question content and input items)?is. If there are no changes, it does not mean that you are not infected, but it is definitely a big clue.

Unauthorized purchases on the Internet

Fraudulent purchases in online shopping are when someone logs into a shopping site account using stolen personal information and purchases something while impersonating the user.

Unauthorized manipulation of online games and community sites

This is also damage caused by account hijacking.impersonate yourself, use billing services on games or community sites, or send messages to other users.

Unauthorized manipulation of information such as eavesdropping on emails

There have also been cases where email accounts have been hijacked and information that can lead to other unauthorized accesses has been stolen from the email content and sent to external parties.

Unauthorized manipulation of internet auctions

There have also been reports of users having their Internet auction passwords stolen, changing their passwords to prevent them from entering, and then bidding on high-value items.

Sending information by pretending to be an acquaintance

Unauthorized access not only does malicious things within the computer that has been accessed, but also attempts to spread the unauthorized access to other computers. For example, there have been cases of people impersonating themselves and sending fraudulent URLs via email or social media.

Stopping servers and services

By gaining unauthorized access and sending a large amount of data to the network,Excessive load on the server, disrupting service provisionThe number of such cases has increased in recent years. Servers and services go down, resulting in damage to businesses and organizations.

Website defacement

If a website is tampered with due to unauthorized access, links and file references on the homepage may be rewritten or unrelated images may be pasted.

This not only increases the damage caused by unauthorized access, but also greatly damages the credibility of infected individuals and companies.

A springboard for attacks on other systems

The act of opening a "back door" or a program to make it easier for outsiders to invade a computer"back door"Is called. By embedding this backdoor, an attacker can enter the system at any time. From there, they cause damage by infiltrating the organization or attacking external parties connected to the organization. Unauthorized access can unknowingly become a stepping stone for attacks, spreading damage to all parties involved.

Causes and countermeasures for unauthorized access

As we have seen, unauthorized access can cause a number of damages by using stolen personal or organizational information. To prevent such unauthorized access,It is important to understand the cause and take countermeasures.is. In this chapter, we will look at the causes of unauthorized access and countermeasures.

Unauthorized access via wireless LAN

Depending on the wireless LAN and computer settings,Other users using the same access point can access your personal deviceThere may be cases. Using wireless LAN in an environment where information security measures are not taken,Increased risk of unauthorized accessIt is.

If security settings are not made during use, unauthorized access may spread to the connected computers. Please refer to the instruction manual of your wireless LAN device for instructions on how to set the security status.

Software vulnerabilities

If the OS (operating system), security software, and various applications installed on your computer are out of date, there is a possibility that the system could be compromised by unauthorized access and allow intrusion.

After considering the impact on the system you manage, etc.We recommend that you try to respond to software updates as soon as possible.

Underutilization of security software

Don't be overconfident that if you use security software, you will be completely safe, but if you don't use it, you will be vulnerable to many cyber-attacks including unauthorized access.defenseless stateYou could say that.

Install a firewall or intrusion prevention systemThis also allows you to restrict access to unauthorized information sources.

Too many services in the computer

Have you ever noticed that while using your computer, you have added more apps and software without realizing it, or that there are services and software on a shared network that you don't use?If you leave a service that you don't use often, it can be accessed illegally from a weakened system.Sometimes.

Manage unused services by uninstalling them, turning off sharing settings, etc.

Information is shared on the local network

If you are in this state, your computer is more likely to be targeted by malicious users.

If you use Windows, to make your computer invisible on the Microsoft Windows Network,Local area connection settingsLet's change it. Similarly for MacNetwork configurationLet's check.

The setting method may differ depending on the OS version, so please check Microsoft's website, Apple Support, or the contact point of your OS vendor for more information.

Password diversion

A major example of damage caused by unauthorized access was the use of spoofing in Internet banking and online shopping. One of the reasons why the damage caused by such impersonation is likely to spread is that users reuse passwords.

If you use the same password for multiple services, the damage can easily spread all at once, so please differentiate as much as possible. Other measures you can take to protect your password include:"Do not leave it on your computer" "Do not share it with others" "Do not leave it on paper"And so on.

Back up your data on a regular basis

If the unauthorized access progresses to a serious extent, you may be forced to initialize your computer. When you initialize your computer, all data stored in it will be erased, soBack up items that are highly important or frequently used.I feel relieved.

lastly

How was it? The Internet is available to everyone and connects the world,Unauthorized access can occur anytime and from anywhere.If not only personal information but also important organizational information is leaked, it will have a major impact on the organization's operations and image. First, each individual has a high awareness of information security.It is important to have a system in place to prevent unauthorized access.is.

[Reference site]

・Damage caused by unauthorized access and countermeasures│Ministry of Internal Affairs and Communications・Tampering of homepages and files│Ministry of Internal Affairs and Communications・This is all you need to do! “Three Promises for Wireless LAN Information Security” | Act on Government Public Relations Online and Prohibition of Unauthorized Access | e-Gov