Parent$Coffee$Presents:$ The$Security$Geek s$guide$to$your$personal$ Security$

Transcription

1 Parent$Coffee$Presents:$ The$Security$Geek s$guide$to$your$personal$ Security$

2 Look$inside$the$mind$of$a$hacker$ h=ps://

3 Introducing$our$speaker$

4 Understanding$risk$

5 Measuring$Threats$ How$worried$you$ Should$be$ Threat$Actor$ Threat$Capability$ Impact$ Threat$Event$ Frequency$ What$you$can$ Do$about$it$ Ability$to$ Detect$ Control$Strength$ Ability$to$ Recover$

6 What$threats$ma=er$at$home?$ How$worried$you$ Should$be$ Threat$Actor$ Threat$Capability$ Impact$ Threat$Event$ Frequency$

7 What$threats$ma=er$at$home?$ How$worried$you$ Should$be$ Threat$Actor$ Threat$Capability$ Impact$ Threat$Event$ Frequency$

8 What$threats$ma=er$at$home?$ See$h=p://geer.Unho.net/geer.uncc.9x13.txt$for$the$most$thoughXul$analysis$

9 An$Example$ Source:$FBI$infographic$

10 What$can$you$do?$

11 What$can$you$do?$ Top Ten Security Tips for Windows 7 at Home 1. Type Windows Firewall into your start menu and turn on Windows Firewall by choosing use recommended settings. 2. Download and install Microsoft Security Essentials here:. 3. Type Action Center into your start menu, open the Action Center to make sure it is turned on and up-to-date. 4. Type Windows Update into the start menu and turn on automatic updates. with the latest version, no matter which one you use, and keep security settings at high. Use a standard user account. That way, if other people (or hackers) gain access to your computer while you re logged on, they can t tamper with the computer s security settings. 7. to encrypt your data: Click Start > Control Panel > System and Security > BitLocker Drive Encryption. Click Turn on BitLocker and follow the instructions. Make sure you print your recovery key and keep it in a safe place. 8. which automatically blocks many common attacks. Follow the simple instructions here:. 9. on any Google, Yahoo, Dropbox, Facebook and Microsoft accounts you have. Enroll in a cloud backup service like. Top Ten Security Tips for Windows 8 at Home 1. Verify that Windows Firewall is on. From the right-hand charms menu, search for Windows Firewall. Open Windows Firewall. In the left-hand menu choose Turn Windows Firewall On or Off and make sure it is turned on. 2. Verify that Windows Defender is turned on for antivirus and antimalware. From the right-hand charms menu, search for Windows Defender and under the settings tab, make sure Turn on real time protection is checked. 3. Update Windows automatically. From the right-hand charms menu, search for Windows Update and ensure you re set up to receive automatic updates. 4. Turn on Windows Smartscreen to help prevent phishing attacks. From the right-hand charms menu, choose change smart screen settings. Under What do you want to do with unrecognized apps? select Get Administrator approval before running an unrecognized app from the internet. 5. Keep your Web browser updated with the latest version, no matter which one you use, and keep security settings at high. 6. Don t use an administrator account for everyday computing. Use a standard user account. That way, if other people (or hackers) gain access to your computer while you re logged on, they can t tamper with the computer s security settings. 7. Turn on BitLocker Encryption to encrypt your data. From the righthand charms menu, search for BitLocker Drive Encryption. Open it and click Turn on BitLocker and follow the instructions. Make sure you print your recovery key and keep it in a safe place. 8. Enable OpenDNS, which automatically blocks many common attacks. Follow the simple instructions here: 9. Enable two-factor authentication on any Google, Yahoo, Dropbox, Facebook and Microsoft accounts you have. 10. Enroll in a cloud backup service like Microsoft Skydrive. Top Ten Security Tips for Mac at Home 1. Go to System Preferences > Security & Privacy > Firewall tab, and turn on. 2. Go to System Preferences > App Store and select Automatically Check for Updates and 3. to make sure all the software you install is from a known developer: System Preferences > Security & Privacy > General and choose 4. Go to System Preferences > Security & Privacy > FileVault tab and make sure it is turned on. 5. by requiring a password immediately after your computer goes to sleep or screensaver begins: System Preferences > Security & Privacy > General and select Require password immediately after sleep or 6. so that strangers can t see your accounts at a login screen: Go to System Preferences > Users & Groups > Login Options. Set automatic login to off, and under Display login window as, select 7. use a standard user account. That way, if other people (or hackers) gain access to your computer while you re logged on, they can t tamper with the computer s security settings. 8. which automatically blocks many common attacks. Choose your version of OS and follow the simple instructions here: 9. on any Google, Yahoo, Dropbox, Facebook and Microsoft accounts you have. Use Apple Time Machine to backup to an external drive or use icloud. win7_security_tips_update.indd 1 11/7/ :39:01 AM win8_security_tips_update.indd 1 11/7/ :38:20 AM mac_security_tips_update.indd 1 11/7/ :39:37 AM

12 What$can$you$do?$ Think$before$you$click$ Use$OpenDNS$ Use$a$password$manager$ Automate$Security$ Patching$ Don t$be$root$ Backup$your$files$ Setup$2FA$for$ Important$accounts$ Use$updated$ AnU]malware$ Encrypt$your$ Computers$ Use$your$OS$ Firewall$

13 Level$Up$ Segment$your$network$ Harden$your$browser$ Lockdown$your$OS$ If you want to dig deeper: csi.websense.com Security classification and malware checking sitereview.bluecoat.com Checks enterprise site classification Checks website reputation Online malware scanner Multiple tools to lookup information about a site What$did$I$miss?$

14 ProtecUng$your$children$online$ Understand$the$threats:$ 1. Strangers,$(o`en$adults)$who$try$to$ contact$children$online$ 2. Friends,$who$leverage$online$ communiues$to$move$bullying$and$ other$harassment$to$new$levels$ 3. Themselves,$for$making$statements$ that$have$consequences$in$the$ future$ What you can do: 1. Set clear rules 2. Education about the risks 3. Use a dedicated computer 4. Control mobile devices 5. Monitor social networking 6. Technology is not perfect, but use it where it makes sense OS Parental Controls OpenDNS or BlueCoat K9 Child-friendly services Source: