This is a just a short post to make available the security awareness slides that I was using at the RSA Conference in San Francisco last week. Several people asked me for copies to use in their own awareness efforts and I am more than happy to oblige. I believe these slides can be effective in changing the way people perceive the threat of malicious software.
My operating hypothesis is that the sooner everyone--from CEOs to employees, kids to grandparents--understands that malicious software--viruses, Trojans, worms, or whatever--are the work of a rogue industry, not a roguish teenager, the sooner we can convince individuals and organizations to effectively implement the necessary counter-measures.
The slides go by the name of Malware Incorporated, the fictitious-but-all-too-real criminal enterprise that embodies this new trend. The mission statement of Malware, Inc. is strikingly simple and honest: Turning your data into our dreams.
A copy of the slides can be downloaded in Acrobat .pdf format. Please note that I have broken out the screenshots of crimeware into separate slides so they are all visible (this adds a few pages to the .pdf but seems like the best way to handle build slides). Also note that I am indebted to Brian Krebs for some of the shots as well as Dr. Mark Vriesenga of BAE Systems. If you would prefer the actual PowerPoint file, I have placed the .ppt inside a 5.6 MB zipped folder.
If you find the slides useful, please let me know. In the meantime I plan to record them as a video with narration, but I promise not to use my Peter Falk accent.
