top of page
Writer's pictureTim Harmon

#InfoSecProInTheWild: Cisco Champion on Holiday in Europe, Part 1


Panoramic View of Rome from Rome Cavalieri, Waldorf Astoria Hotel Room
Figure 1: Panoramic View of Rome from Rome Cavalieri, Waldorf Astoria Hotel Room

Recently, I went on a trip to the United Kingdom (U.K.) and the European Union (E.U.) and wanted to share some tips and tricks for the “first-timers.” This isn’t a traditional “travel” blog since I am in cyber security (InfoSec). Traveling to Europe from the U.S. can take a toll on you. If you are extremely tired from jet lag, you can accidentally lower your guard when it comes to keeping things safe and secure. When I am exhausted, I found that relying on a few simple tech tricks help to stay safe. This blog will discuss some of the security differences between the U.S. and E.U. I will cover Wi-Fi security, laptop and mobile security, physical security and tips on how to be secure while in Europe.


RFID Wallets:


There is a risk of international tourists being targeted for pickpocketing. Therefore, you should be aware of your surroundings as pickpockets will try to grab your wallet or run into you with a device that takes your credit card information using Radio-Frequency Identification (RFID). There are RFID-protected wallets that you can use while in Europe that will help your information to be safe and secure or a less expensive way is to just wrap aluminum foil around your credit card(s). Rick Steves explains in one of his travel blogs that you should carry only the credit cards you expect to use and one backup. He also stated to watch out for ATM skimmers when getting money from an ATM in Europe.


Figure 2: RFID Blocking Travel Accessories
Figure 2: RFID Blocking Travel Accessories

Using Wi-Fi:


The “free” Wi-Fi in airports, other high traffic areas and hotels my not be secure. Hackers have the ability to set up rogue wireless access points (WAPs), by physical access to the wired network, for the purpose of making users think they are connecting via the official access points (APs) but it is actually via the hacker’s AP. This gives the hacker the ability to catch a user’s credentials for any confidential space (bank, social media, company network, etc.) and they can then login to those systems acting like a legitimate user.


When you connect to a Wi-Fi network, there will be an option to automatically connect to that network. I highly recommended you do not enable this option as it could automatically connect you to a rogue AP that is posing as a legitimate connection. I also recommend you use a virtual private network (VPN) if you need to connect to your company’s network to do some work or connect to your financial institution for any banking needs.


Figure 3: Royal Wedding Welcome Banner at Windsor Castle, U.K
Figure 3: Royal Wedding Welcome Banner at Windsor Castle, U.K

Be aware of major events:


When you are in Europe, ensure that you aware of major events that might impact your stay. U.K. officials go to great lengths to have the best security possible during royal events. There is always a possibility of terrorist attacks and officials can only do so much. Therefore, security in London has been more of a priority due to terrorist attacks and U.K. officials are more present than ever before. I recommend that you be aware of your surroundings and if you see anything suspicious, you should report it to the authorities immediately. Always check the State Department’s website before traveling so you know if there are any travel warnings for the destination(s) you are going to and make sure you always keep your information safe.


The picture above is Windsor Castle Visitor Entrance welcoming visitors to the royal wedding with banners and the picture below shows the security officers doing their job and me taking a selfie.


Figure 4: Windsor Castle Security Guards and Bollards (left), Selfie (right)
Figure 4: Windsor Castle Security Guards and Bollards (left), Selfie (right)

Europe uses a stricter approach to security than the U.S., as seen throughout Europe with law enforcement and military. From my experience in London, Rome and Paris, the U.K. and Italy definitely feel safer as it is friendlier and more secure. Europe uses some of the same types of physical security that the U.S. uses. For example, in the picture above, you can see they use bollards. These are put in place to keep cars from going where they are not supposed to. These bollards are remote-controlled so the security officers can lower and raise them in order for authorized cars to pass through. You should always heed the physical security aspects put into place as they will help you stay safe and not get you into any trouble.


Security in Rome:


Rome is gorgeous and it is called the Eternal City because of the history it has. The main tourist attractions, the Colosseum, Vatican and popular museums are very impressive and a potential place for pickpockets. Be aware of your valuables as pickpocketers do not work alone. One thing you will notice while in Rome that you do not see in the U.S. is that there is a strong military presence and one of their main priorities is physical security. There is a significant amount of military around Rome during festivals. At the Vatican, Pope Francis always has police surrounding him in order to protect one of the most powerful men in the world and you should follow the instructions the Vatican police give out as it will help keep you and the Pope safe.


There were television news reports of tourists in Rome getting their cell phones taken from them by thieves while being on the phone. The video showed a man on his phone and several locals surrounding him, distracting him while he was on his phone, and then one man snatches the phone right out of his hand. Luckily, I did not have that problem while in Rome. I recommend that you use your phone in an area where there is less of a chance to be distracted. The best solution is to have your back up against the wall of a building so that no one can be behind you and always look around while using your phone to ensure you are not distracted.


Figure 6: Colosseum and Vatican
Figure 6: Colosseum and Vatican

Laptop/Tablet/Mobile Security:


If you are traveling with a laptop/tablet for work or school, you will need to make sure it is as secure as possible. Before leaving for your trip to Europe, make sure your laptop/tablet/smartphone is up-to-date with the most current version of its Operating System and anti-virus/anti-malware product(s). Vulnerabilities are usually in devices that are not up-to-date with patches and hackers are easily able to exploit these. When you are not in your hotel room during the day and do not have your laptop/tablet with you, make sure you secure it. You should also take pictures of all of your valuables so that if something does end up either lost or stolen, you can file a report and have proof that you had that particular item.


General Data Protection Regulation (GDPR) for E.U.:


I received several notifications while surfing the Internet and connecting onto the different Wi-Fi networks regarding the European Union (EU)’s General Data Protection Regulation (GDPR). GDPR is a regulation on data protection and privacy for every individual in the EU and there are consequences for any company not in compliance with this law. It went into effect on May 25, 2018 and affects every company in or doing business in the EU. This regulation will ensure that “people will have more control over their personal data and businesses will benefit from a level playing field.” Users will have the right to be informed by businesses when there has been a harmful data breach and the right to move his/her data to a different platform. Users have the right to access their data that a business has on him/her and the right to erasure of all of his/her data, called “right to be forgotten.” Please carefully read the GDPR notifications you need to accept before doing business with that company to ensure you understand what the company is required to do with your data.


The picture below signifies that my trip to Rome has come to an end and my trip to Paris begins. This is the conclusion of part 1.


Figure 7: Rome (The Forum, Trevi Fountain and an embassy with soldiers), Paris (Chateau de Versailles, Park at Versailles)
Figure 7: Rome (The Forum, Trevi Fountain and an embassy with soldiers), Paris (Chateau de Versailles, Park at Versailles)

Shoutout to fellow InfoSec Pros:


My good friend, Kjetil Teigen Hansen (a fellow InfoSec professional), is located in Norway and he could be a good resource for security tips you may need while in Europe. He joked about me contacting Chelin Sampson, an epic InfoSec professional, who is located in South Africa while I was in Europe via social media but I was too busy. Chelin can give you security tips for travel in Africa. You can connect with these two awesome gentlemen on LinkedIn. For everyone who is interested in learning about the CCNA Cyber Ops certification by Cisco, check out the Cisco Cyber Ops Study Group on Facebook.


Kjetil Hansen (InfoSec Professional)
Kjetil Hansen (InfoSec Professional)

Chelin Sampson (InfoSec Professional)
Chelin Sampson (InfoSec Professional)

In Part 2, I will discuss the different security issues that I saw while I was in Paris. I hope you have learned how to stay safe and secure in Europe and can use some of these tips on your trip.

64 views0 comments

Recent Posts

See All

Comments


bottom of page