Securing Your Home Securing Your Home ComputerComputer

Jay Ferron

ADMT, CISM, CISSP, MCDBA, MCSE, MCT, NSA-IAM

QuestionsQuestions

How many of you have more than one How many of you have more than one computer at home?computer at home?

How do you connect to the Internet (DSL, How do you connect to the Internet (DSL, cable, dialup)?cable, dialup)?

Do you have children at home and if so, Do you have children at home and if so, what ages?what ages?

Have you ever been hit by a virus?Have you ever been hit by a virus?

What are you using to read your email?What are you using to read your email?

AgendaAgenda

BackupsBackupsAnti-virus protectionAnti-virus protectionEmail and spamEmail and spamPatch management (for software)Patch management (for software)Cable modem, routers and firewallsCable modem, routers and firewallsFilteringFilteringSocial engineeringSocial engineeringQuestionsQuestions

To Backup or Not to Backup?To Backup or Not to Backup? That Shouldn’t Even Be a Question! That Shouldn’t Even Be a Question!

Do you backup your computer?Do you backup your computer?

Do you backup your data?Do you backup your data?

How often?How often?

Two Good Reasons to Backup: Two Good Reasons to Backup: Protect data from hardware and software Protect data from hardware and software

failuresfailures Protect from outside threats – viruses etc…Protect from outside threats – viruses etc…

Anti-virusAnti-virus

Anti-virus software protects you from bad things Anti-virus software protects you from bad things like viruses, worms and trojans.like viruses, worms and trojans.

What software are you using? (Some computers What software are you using? (Some computers come with anti-virus software)come with anti-virus software) Norton Anti-Virus Norton Anti-Virus McAfee Anti-Virus McAfee Anti-Virus PandaPanda (free sometimes) (free sometimes) www.free-av.comwww.free-av.com (free) (free) Computer Associates with FirewallComputer Associates with Firewall (free) (free)

Is Your Anti-Virus Software Is Your Anti-Virus Software Configured Properly?Configured Properly?

Anti-Virus softwareAnti-Virus software

Update your software at least once a dayUpdate your software at least once a day Update your subscription as requiredUpdate your subscription as required

Does your virus protection software:Does your virus protection software:

Check your email?Check your email? Both incoming and outgoing?Both incoming and outgoing?

EMAIL / SpamEMAIL / Spam

You’ve got mail!You’ve got mail!

Are you safe or are you a target?Are you safe or are you a target?

Let’s explore some security issues….Let’s explore some security issues….

EmailEmail Do not read email with an attachment Do not read email with an attachment unless you know it’s comingunless you know it’s coming

If not sure, call and ask the senderIf not sure, call and ask the sender

Use an anti-virus program to check both Use an anti-virus program to check both incoming and outgoing emailincoming and outgoing email

Watch out for HTML emails Watch out for HTML emails

Do not use auto preview pane (next slide)Do not use auto preview pane (next slide)

SpamSpam

Do not reply back – “remove me from your list”Do not reply back – “remove me from your list”

Check what software you have on your Check what software you have on your computer – is it adding you to a spammer’s computer – is it adding you to a spammer’s email list with your permission?email list with your permission?

Create an email address you will use for spamCreate an email address you will use for spam

Spam Removal SoftwareSpam Removal Software

Spam Killer - McAfeeSpam Killer - McAfee

Mail Washer – mailwasher.net (free)Mail Washer – mailwasher.net (free)

Outlook 2003Outlook 2003

AOL and other ISPs offer spam blockers AOL and other ISPs offer spam blockers as a serviceas a service

What to Patch and WhyWhat to Patch and Why

Update (patch) software that has bugs in itUpdate (patch) software that has bugs in it

Operating systems (Windows)Operating systems (Windows) Browsers (Internet Explorer, Netscape)Browsers (Internet Explorer, Netscape) Applications (Word, Excel, etc.)Applications (Word, Excel, etc.)

Windows Update ServiceWindows Update Service

WindowsUpdateWindowsUpdate

Windows: Critical Security Updates, Windows: Critical Security Updates, Security Rollups, Service PacksSecurity Rollups, Service Packs

UpdatesUpdates

Desktops and Laptops with Desktops and Laptops with the the Automatic Update ClientAutomatic Update Client

This works for the operating system and browser only – to update Office you must go the Office update service

Cable Modems, Routers and Cable Modems, Routers and FirewallsFirewalls

They:They:Protect your home from the bad guysProtect your home from the bad guysKeep your information privateKeep your information privateMake you less of a target Make you less of a target

By:By:Making them work harder to get your infoMaking them work harder to get your infoStopping viruses like BlasterStopping viruses like BlasterHiding your computer from the worldHiding your computer from the world

Routers and FirewallsRouters and Firewalls

Change the default password on your router

Wireless users should:

Enable WEP on router and wireless workstation

Use MAC address filtering

Firewall ProtectionFirewall Protection

1.1. Implement a hardware firewall (checks incoming traffic at the network before it Implement a hardware firewall (checks incoming traffic at the network before it gets to your computer) Default – Blocks on Incominggets to your computer) Default – Blocks on Incoming

2.2. Personal software firewall on your computer blocks outgoing (lets you know what Personal software firewall on your computer blocks outgoing (lets you know what is leaving your computer)is leaving your computer)

3.3. XP firewall only protects from external traffic not from your computerXP firewall only protects from external traffic not from your computer

FirewallHome

NetworkHome

Network

InternetInternet

Software Firewalls for Home UseSoftware Firewalls for Home Use

McAfee FirewallMcAfee Firewall

Symantec’s Norton Personal FirewallSymantec’s Norton Personal Firewall

Zone AlarmZone Alarm (Free) (Free)

Computer Associates with Firewall (free) Computer Associates with Firewall (free)

Blocking Pop-up - Use the Blocking Pop-up - Use the Google Toolbar Google Toolbar (Free)(Free)

What is My Child Doing ?What is My Child Doing ?

Control Where Your Child GoesControl Where Your Child Goes

Net NannyNet Nanny

Cyber SitterCyber Sitter

Cyber PatrolCyber Patrol

Problems With Software Programs Problems With Software Programs You InstallYou Install

Read the license Read the license Understand what it doesUnderstand what it does Check for spywareCheck for spyware

Question programs like:Question programs like: ImeshImesh GatorGator KazzaKazza MorphisMorphis

SpywareSpyware

Spyware is software that reports where Spyware is software that reports where you go and what you do on your computeryou go and what you do on your computer

Software to test for and remove spywareSoftware to test for and remove spyware Spy CopSpy Cop Ad-Aware – Lavasoft – (Free)Ad-Aware – Lavasoft – (Free)

Weak PasswordsWeak Passwords

Your computer password is the Your computer password is the foundation of your computer securityfoundation of your computer security

No Password = No Security No Password = No Security

Old Passwords & Same Password = Little SecurityOld Passwords & Same Password = Little Security

Social EngineeringSocial Engineering

Does not require technical knowledgeDoes not require technical knowledge

Easier and fasterEasier and faster

Human nature is to helpHuman nature is to help

Don’t forget phone callsDon’t forget phone calls

SPYWARESPYWARE

Things to Remember About Social Things to Remember About Social EngineeringEngineering

Do not give out information over the phoneDo not give out information over the phone

Never give your password to anyoneNever give your password to anyone

The ‘good guys’ have their own password The ‘good guys’ have their own password with system privileges that will allow them with system privileges that will allow them to work on your accountto work on your account

Sample E-mailSample E-mail Below is a sample of a fraudulent e- Below is a sample of a fraudulent e-mail that's been sent to Citibank customers. It purports mail that's been sent to Citibank customers. It purports to be from Citibank, but it is not. Its intent is to get you to be from Citibank, but it is not. Its intent is to get you to enter sensitive information about your account and to enter sensitive information about your account and to then use this information to commit fraud.to then use this information to commit fraud.

Think about the cost of:Think about the cost of:BackupBackupAnti-virusAnti-virusRouter/FirewallRouter/FirewallBlocking/tracking programs like Net NannyBlocking/tracking programs like Net Nanny

VersusVersus

The cost of doing nothing!The cost of doing nothing!

4 Things To Do4 Things To Do

Get a Hardware and Software FirewallGet a Hardware and Software Firewall

Get Anti-Virus Software – Update DailyGet Anti-Virus Software – Update Daily

Patch ALL Your SoftwarePatch ALL Your Software

Think Before You Open EmailThink Before You Open Email

QuestionsQuestions