03 Secure The Computer.pptx

7/23/2019 03 Secure The Computer.pptx

1/53

Copyright 2014 CyberSecurityMalaysia

Secure theComputer


2/53

2

Nowadays, everyone has computers,digital data, online identity andaccount credentials Not everyone isserious about security

!ut malicious hac"ers are constantlyloo"ing #or wea"nesses o# their preyin order to success#ully e$ecute theirmalicious activities on the internet

%n this session, we&ll e$amine ourcommon mista"es and how hac"erse$ploit that mista"es

Let us think likes HACKERS!

Introduction


3/53

'

Goals

Hackers Perspective(ac"ers are constantly )nding#or the wea"ness o# eachcomponents to ensure the

success o# malicious attac"

sers PerspectiveMost users are more #ocusedon how to use computer to dotheir daily tas"s but not somuch about their security

Copyright 2014 CyberSecurity Malaysia


4/53

4

"#ectives

*indows +ogon assword -ntivirus So#tware .perating System -pplication atches /pdate %nternet -ccess Networ"ing evices

$ternal evices .nline Sur)ng



5/53

$% &indo's Lo(on

&indo's Lo(on +ogon Screen Screen Saver

/serManagement



6/53

3

Lo(on Screen



7/53

Pass'ord Protected Screen Saver



8/53

5

Access Control

&ork)Related In*ormation company in#ormation

6structure, process,

systems7 corporate email business applications

access business servers access business documents customer in#ormation vendor in#ormation

Personal)Related

In*ormation personal in#ormation personal emails online ban"ing social networ"ing personal documents

personal photos your dirty little secrets


9/53

Copyright 2011 CyberSecurity Malaysia 8

So*t'are Ke+lo((er

9he :eylogger allows you to secretly trac"all activities #rom all computer users andautomatically receive logs to a desire e;mail


10/5310

ser ,ana(ement


11/53

11

-% Pass'ord

Pass'ord assword

Strength

Managing-ccounts

Managingassword



12/53


Pass'ord Stren(th

https.//'''0microso*t0com/securit+/pc)


13/53

1'

,ana(in( Accounts234 SE

SA,E

serna

mePass'ord



14/53

Avoid creatin( pass'ords that use.

2ictionar+ 'ords in an+ lan(ua(e0

&ords spelled "ack'ards5 common misspellin(s5 anda""reviations0

Se6uences or repeated characters0$amples= 12'435,222222, abcde#g, or ad>acent letters on your "eyboard6?werty7

Personal in*ormation0@our name, birthday, driverAs license,

passport number, or similar in#ormation 14

,ana(in( Pass'ord



15/53

1

2an(erous Pass'ord


16/53

13

7% Antivirus So*t'are

AntivirusSo*t'are -ntivirus

Categories .nline Scanner Signature

/pdates



17/53

1

Antivirus Cate(ories

Bree dition -ntivirusCommercial -ntivirus

.nline Scanner



18/53


Antivirus Comparatives

http.//'''0av)comparatives0or(/


19/53


nline Scanner


20/53


&indo's Securit+ Center

s Start 8 Control Panel 8 Securit+ 8 Check this computers securit


21/53

21

Si(nature pdates

irus

e)nition

Computer



22/53

22

9% peratin( S+stem

peratin(S+stem Service ac"

alidate *in D.Ece

Microso#tSupport



23/53

2'

Service Pack

http.//'indo's0microso*t0com/en)

S/'indo's/do'nloads/service)packsCopyright 2014 CyberSecurity Malaysia


24/53

24

:alidate &indo's and ;ce

http.//'''0microso*t0com/(enuine/validate/



25/53

2

,icroso*t


26/53

23

,icroso*t Product Li*ec+cle

http.//support0microso*t0com/(p/li*eselect



27/53

2

>% Application

Application aid -pplication Crac"ed

-pplication Malicious

-pplication



28/53

25

Paid Application



29/53

28

Cracked Application



30/53

'0

Ro(ue Antivirus



31/53

'1

Potentiall+ n'anted Pro(ram



32/53

'2

?% Patches pdates

Patches pdates Service ac" *indows

/pdates 9hird arty

/pdates



33/53

Copyright 2011 CyberSecurity Malaysia ''

,icroso*t 2o'nload Center

http.//'''0microso*t0com/do'nload/en/de*ault0as 1


34/53

'4

&indo's pdates


35/53

Copyright 2011 CyberSecurity Malaysia '

4hird Part+ pdates

http.//secunia0com/vulnera"ilit+@scanni


36/53


37/53

'

&ired 3et'ork

RE,4E C2EEBEC4I3

:IRS ,AL&ARE

&ED APP A44ACKS



38/53

Copyright 2011 CyberSecurity Malaysia '5

&ireless 3et'ork


39/53

'8

% 3et'orkin( 2evices

3et'orkin(2evices Microso#t

:eyboard *ebcam



40/53

40

&ireless ,icroso*t Ke+"oard

https.//'''0dreamla"0net/=les/articles/-@,hF@ke+"oard@insecurities0pd*

9he team o# reamlab 9echnologies has hac"ed two wireless"eyboards #rom Microso#t reamlab warns that it is possible toFsniGH the "eyboard stro"es ; possible to capture and decrypt"eystro"es ; user names, passwords, ban" details or con)dentialcorrespondence can be very easily copied



41/53

41

&e"cam

&e"cam



42/53

42

% E1ternal 2evices

E1ternal 2evices 9humb rive $ternal (

CI



43/53

4'

AutoPla+



44/53

44

$% nline Sur=n(

nline Sur=n( !rowser Malicious

website hishing website



45/53


&e" Dro'ser


46/53


Dro'ser Pre*erences



47/53


Clear Dro'sin( 2ata


48/53

45

,alicious &e"site


49/53


Phishin( Attacks


50/53

0

Check the Suspicious &e"site



51/53

1

Summar+

*indows +ogon assword

-ntivirusSo#tware

.perating

System -pplication

atches /pdate %nternet -ccess Networ"ing

evices $ternal

evices

Act

Now!



52/53

2

Action 4ime!

If you think technology can solve your security problems,then you don't understand the problems and you don'tunderstand the technology

- Bruce chneier

Netboo" +aptop es"top



53/53

03 Secure The Computer.pptx

Documents