A presentation from Networkshop48, by Simon Cooper, security operations manager, Jisc.

1. Potential vulnerabilities to
e-learning - Mimecast
Phillip Hay, Threat intelligence analyst - Mimecast

2. Phillip Hay
Threat Intelligence Analyst - Mimecast

4. Scale of Detected Attacks in Last Month
Detected Attacks on Higher Education
657.71 Detections
6.88 per user
Peak - Saturday 4TH (50623)
Detected Attacks on Government Public Admin
609.44K Detections
4.02 per user
Peak – Thursday 9 Apr (22667)

5. Detected Attacks on Higher Education
Detected Attacks in the last 12 Months
3.95M Detections
41.32 per user
Dec 19
COVID-19

6. Full Time Education at Home
• A change in “traditional ways” of learning for the foreseeable future.
• A new style of school community began as students registered online and in school forums
• New set of opportunities for criminals
What we see:
• Education sector accounts for 2.8% of observed attacks Mar - Apr 2020 ( 87% Spam)
• Increased Phishing Attacks – Data Over Sharing
• Threat Actor Reconnaissance
• Opportunist Attacks
Considerations:
• What access to technology is required?
• What software and features are required?
• Privacy and terms of agreement?
• Who will ensure security and technical support?
• Only use approved software and systems
• How will you communicate with students?

7. Recommendations for e-Learning
• Maintain online etiquette following school or college policies.
• If possible, avoid using social media platforms.
• Staff and students should understand the importance of a strong password
• Only use approved school software with school administered accounts.
• Double-check URLs and Links – If suspicious, do not click!
• Students may be exposed to email for the first time, ensure they know how to use it safely.
• Personal accounts should not be used - Potential compromise and abuse.
• Ensure students and staff understand what being safe online means, talk about it.

8. • Cyber-attacks are highly likely to continue targeting companies,
governments and individuals with:
• Increasingly sophisticated tactics and techniques
• Using progressively more complex social engineering
techniques
• The most vulnerable members of our society will remain
particularly susceptible to attack
• Increased number of people working and schooling from home
increases the attack surface.
• Increased amount of electronic communications, spam and
phishing attempts
Future Concerns

9. Questions?

10. Thank you
Phillip Hay
Threat intelligence analyst -
Mimecast
customerservices@jisc.ac.uk
jisc.ac.uk