Цифровая грамотность и безопасность в сети

Summary

The lecture by Sergey Kuzmenko, head of the information security department at the National Center for Digital Expertise, delves into the concept of digital literacy and the fundamentals of online safety. Kuzmenko discusses the alarming increase in cybercrimes, highlighting that approximately 70% of data breaches are inadvertently facilitated by users themselves through phishing and social engineering. He explains the mechanisms behind these scams, the misuse of personal data by fraudsters, and the importance of understanding privacy policies to safeguard against data leaks. The talk also covers the threats posed by public Wi-Fi networks, the dangers of spyware and ransomware, and offers practical advice on creating strong passwords and exercising caution online to enhance digital literacy and security.

Takeaways

• 😀 The speaker, Sergey Kuzmenko, introduces himself as the head of the information security department at the National Center for Digital Expertise.
• 🔒 RosKachestvo, the organization he represents, conducts independent research to identify the best products and services and inform citizens about them.
• 🏆 RosKachestvo operates the National Quality Mark, which is awarded to the best products in each category based on research results.
• 🚨 The speaker highlights the importance of digital literacy and online safety, noting that cybercrime has significantly increased over the past years.
• 🎯 He emphasizes that approximately 70% of personal data breaches occur due to individuals voluntarily sharing information, often through phishing and social engineering.
• 🤔 Social engineering is described as manipulating people's fears and perceptions to extract payment or personal information, often through deceptive calls or messages.
• 📲 Phishing is identified as a common method where criminals send messages designed to trick recipients into taking actions like clicking links or downloading files, leading to data compromise.
• 📜 The script discusses the role of privacy policies in explaining how companies collect, store, and share personal data, and the importance of understanding these policies.
• 🛡️ The speaker warns about the risks associated with public Wi-Fi networks, explaining how attackers can set up fake networks or intercept traffic on public networks.
• 💡 A special project by RosKachestvo analyzed privacy policies and found that some companies share user data with hundreds of third-party intermediaries, potentially leading to data ending up in the hands of scammers.
• 🔑 The importance of strong, unique passwords for different accounts is stressed, along with the recommendation to use two-factor authentication for added security.

Q & A

What is the main topic of the lecture?

The main topic of the lecture is digital literacy and the basic principles of cybersecurity.

Who is conducting the lecture?

The lecture is conducted by Kuzmenko Sergey, the head of the information security direction at the Center for Digital Expertise of Roskachestvo.

What is Roskachestvo and what does it do?

Roskachestvo is an organization that conducts independent research on products and services, identifies the best ones, and informs citizens about them. It is also the operator of the National Quality Mark, a symbol awarded to the best products in each category based on research results.

How many studies has Roskachestvo conducted and what were the outcomes?

Roskachestvo has conducted 242 studies, examining over 10,000 products. Among them, 263 products received the National Quality Mark, recognizing them as the best in their categories. However, 574 products were found with violations.

What is the Center for Digital Expertise and when was it established?

The Center for Digital Expertise was established in 2017 based on Roskachestvo. It considers applications and programs as everyday consumer goods that can be purchased, just like milk and butter.

How many applications and consumer recommendations has the Center for Digital Expertise checked so far?

The Center has checked over 2,000 applications and provided over 200 consumer recommendations.

What is the average time spent online per year according to analytical agencies in 2022?

According to the data from analytical agencies, the average time spent online per year in 2022 is 114 days.

How many cybercrimes were registered by the Ministry of Internal Affairs in the year the lecture was given?

In the year the lecture was given, 518,000 cybercrimes were registered, which is almost double compared to the previous year.

What are the two basic mechanisms behind most online scams mentioned in the lecture?

The two basic mechanisms behind most online scams are phishing and social engineering.

What is the role of personal data in the context of online scams as discussed in the lecture?

Personal data plays a significant role in online scams. Approximately 70% of data that scammers get is voluntarily provided by individuals through actions such as visiting fake websites or during phone conversations.

How do scammers obtain personal data from companies?

Scammers obtain personal data from companies by purchasing it through legal means. Companies may share, sell, or transfer personal data to intermediaries, which can then be passed on or resold, eventually reaching scammers.

What are the potential harms that can come from compromised personal data?

Compromised personal data can lead to identity theft, financial fraud, extortion, and reputational damage. Scammers can also use personal data to target individuals' parents or steal their gaming accounts.

What is the significance of the lecture's discussion on public Wi-Fi networks?

The lecture discusses the risks associated with public Wi-Fi networks, such as man-in-the-middle attacks, where scammers can intercept and analyze traffic, potentially gaining access to users' session keys and personal information.

What advice does the lecture provide on how to protect oneself from online threats?

The lecture advises being cautious about the networks one connects to, especially when two networks with the same name are present. It also emphasizes the importance of not rushing, being skeptical of all information received, and double-checking all data received through various channels.

What is the importance of checking the security certificate when visiting a website?

Checking the security certificate is important to verify that the site is secure and that the certificate was issued to a trusted entity. It helps to ensure that the site is legitimate and not an attempt to mimic a known and trusted site for phishing or other malicious purposes.

How can users protect themselves from falling for lottery and prize scams?

Users can protect themselves by being skeptical of offers that seem too good to be true, such as free lottery spins with guaranteed wins. They should also avoid sharing personal information or making payments in response to such offers.

What is the significance of using strong and unique passwords for different accounts?

Using strong and unique passwords for different accounts helps to prevent unauthorized access and reduce the risk of account compromise in the event of a data breach on one of the sites.

How does two-factor authentication enhance digital security?

Two-factor authentication adds an extra layer of security by requiring a second form of verification, typically a code sent to a mobile device, in addition to the password. This makes it more difficult for unauthorized users to gain access to an account.

What is the role of the National Quality Mark in Roskachestvo's activities?

The National Quality Mark is a symbol awarded to the best products in each category based on Roskachestvo's research results. It serves as a recognition of quality and helps consumers identify top products in the market.