Data Privacy & Security Service
Issue 11
WHAT DO CYBER PROFESSIONALS TEACH CHILDREN ABOUT SECURITY
Authored by Amy Burnis, Senior Manager of Marketing Communications at CyberArk, the global leader in privi- leged account security January 9, 2018 | Security and Risk | Amy Burnis ; original post: https://www.cyberark.com/blog/cyber-professionals-teach-children- security/ Winter break is over, and children have returned to school with new phones, laptops and other devices. I witnessed the excitement of a pair of fifth graders receiving laptops for Christmas. I can’t recall what I wanted at that age—probably games or a bike—but surely a lap- top wasn’t on my list. I watched one sister help the other to set up her laptop. Her father set up hers first, and after he left the room, she decided she knew enough to help her sister. She paused the wizard once to ask me if they should accept the software update. These eleven-year-olds cre- ated their own login credentials, entered their home network password and quickly finished the set up process. I asked what they planned to do with their laptops. School work was the first answer, watching videos on YouTube followed, and then I zoned out because I was distracted by a moment of fear, considering all of the bad that comes with the good of having access to the Internet. My follow up questions focused on what they learned in school about cybersecurity. The answer—not that much, even in their upscale neighborhood elementary school. They have basic awareness with terms such as “attackers,” and they know not to share passwords, but the learning curve is steep. Parents have to take and maintain a leading role in cybersecurity education, and they also should establish guidelines and rules that can be followed / monitored. At the very least, like everything else in life, they need to provide enough infor- mation to help children make good, informed choices. Obviously, there are many articles available to help parents inform children , but let’s face it, many adults don’t even understand or fol- low best practices. I couldn’t help but wonder, do parents who work in the cybersecurity industry do a better job of teaching children about cybersecurity best practices? I asked a few of my colleagues about what they teach and what information they believe to be the most important. I was pleasantly sur- prised to learn that many of them volunteer as guest speakers on the subject at local schools. From these conversation three themes stand out: Privacy : The lives of children are documented in an unprecedented way considering the high volume of photos, selfies and other information that is shared online from a young age—often by parents who are thrilled to share every milestone. Explaining the con- cept and value of privacy is an important lesson. Children frequently use devices to share pictures, experiences, thoughts and more, so they have to learn there are lasting consequences – their digital profile builds over time with every action. Screenshots are just one way to extend the reach and shelf life of a message or image. Encourage them to think of examples of what they shouldn’t share including inappropriate pictures and potentially offensive posts. Remind them everything is public. After all, there aren’t secrets online. It’s easy to make a mistake that might be irreversible and hurt many. Power : One of my colleagues recently had a session with high school students. They talked about the concept of security and the consequences of being unsecure. He used some examples to help students think like an attacker in order to better understand the importance of defense. Students today have access to powerful tools that are freely available online and can do a lot of damage if
used inappropriately. For example, there are encryption packages available for download, there are open source offensive tools in GitHub, and there are services that provide extreme compute, storage and analytics resources. Such resources can support brilliant and cool pro- jects, but these tools could also be used “offensively” to spread ransomware and other mal- wares or to attack websites using DDOS attacks. Perhaps here, children can draw lessons from their favorite superhero and decide to use power appropriately and ideally for good intentions. (continued next page)
READ ALL ABOUT IT!
Ric ONE DPSS was featured in the winter NYSIR News BOCES Edition! Access the article using this link:
http://nysir.org/nysir-news/
3
Made with FlippingBook - Online Brochure Maker