PC/Tablet/Smartphone Security &
Password Managers
●
What you should do to keep your PC secure.
Does the type of PC you use matter?
●
What to do to keep your smartphone secure –
does the brand matter, why?
●
Tablet security – do we need to do anything to
keep our tablets secure?
●
What are password managers, are they secure
and what are their advantages?
PC Security – Recent nasty examples
● Cryptolocker and Cryptowall – ransomware, very difficult to defeat, expensive
if you are infected. Tips to avoid or remove ransomware can be found here - http://www.makeuseof.com/tag/fbi-ransomware-hits-android-avoid-getting-rem ove/
● Shellshock – potentially infects Apple and many variations of Linux including
Android. This means mobile devices as well as PCs. If you have a Mac the fix is in the these updates - Lion v10.7.5, Mountain Lion v10.8.5, and Mavericks v10.9.5.
● Safe computing practices will keep you safe from the majority of these. Don't
“CLICK” until you are confident you are going to a safe website or opening something safe.
● Your friends and other people in your contact list might have been corrupted
and the malware might try to corrupt you as well. Even experienced users can be fooled.
PC Security
● There are many sources to help you know what to do including your ASA computer club.
● The Internet is one of your best sources. Your bank website is another. Here is one example - http://www.scotiabank.com/ca/en/0,,352,00.html
● Your PC manufacturer is another good source of information. There may have been a trial version of security software installed on your PC when you bought it.
● PC technical publications, magazines.
● Independent anti-virus/malware testing organizations. ● PBS – NOVA
PC Security - Toolbars
● Browser toolbars are another topic. Not as dangerous but can slow things down and are generally not necessary.
PC Security - Toolbars
●
Many toolbars are installed when you are downloading or
updating software.
●
Some are installed when you link to other websites. Java
updates prompt you to install the Ask toolbar – you don't
need it.
●
Some free anti-malware programs will remove these kinds
of toolbars. Malwarebytes is a good one that has helped
several ASA members. Get it here -
PC Security
● Independent malware testing organizations
– http://www.av-test.org/en/
– http://www.pcantivirusreviews.com/ – http://www.av-comparatives.org/
● There are more – search the Internet.
● If you favourite is not tested by one organization try another.
● If your product is consistently in the top tier from multiple testing
organizations it is likely a good choice.
● Be aware that if you want the best free product you need to look
PC Security
● AV-Comparitives.org
● Tests mobile, Windows, Mac, business, including parental
controls, firewalls.
● Extensive testing of all types including false alarm, performance
and malware removal.
● If the vendor did not submit their product for testing it is not in the
results but that doesn't mean it is necessarily an inferior product.
● Let's look at their latest results and understand the testing
methodology and how to interpret
● http://chart.av-comparatives.org/chart1.php?chart=chart2&ye ar=2014&month=8&sort=0&zoom=2
PC Security
● Interpreting the AV-Comparitives most recent “Real-World protection
testing chart.
● The dotted line represents the level of protection provided by the
standard Microsoft security products – Microsoft Security Essentials for Windows 7, Windows Defender for Windows 8.
● The yellow line at the bottom of the chart represent false positives –
problems that were not problems but falsely identified as such.
● Red is bad – problems that were not detected.
● Yellow in the bars are user dependent issues – a warning was shown to
the user but they had the choice to proceed or not vs automatically blocked by the anti-virus software.
If I have a Mac I am I OK without
anti-virus software?
● You are much safer than if you use Windows. Not because
Windows is less secure but because the “bad” guys get more bang for their buck if they target Windows users. It is a much larger user base.
● In 2012 over 700,000 Mac users were infected with one virus.
● If you want some protection look at the products analyzed here - http://www.av-test.org/en/news/news-single-view/mac-os-x-in-th e-crosshairs-18-malware-scanners-put-to-the-test/
● Only four products detected 100% of the tested issues. Many
caused performance problems. If you are going to install a
Tablet and smartphone protection
●
Many different kinds of “security” software for mobile
devices. There are many good practices for these devices
as there are for PCs. Learn them.
●
Software to erase all date from your device if it is stolen.
●Software to locate it if you lose it.
●
Software to monitor all activity for parents or business.
●Software to secure your photos and anything else you
want to be protected from hacking or loss of phone/tablet.
●Software to protect the device from malware.
Tablet and smartphone protection
● Is iOS safer then Android? What can I do to be safe?
● Both Apple and Android can be exploited. The Apple store claims they
do better testing of apps submitted to the Apple store.
● Do not install apps from third parties. Only install from the Apple store or
Google Play if you can.
● Ensure there is a password on your device.
● Consider a product that will find and/or erase your device if you lose or
misplace it.
● Use the same testing organizations as noted for PCs.
● AV-Test and Av-Comparatives both provide extensive information. ● Beware of removal media devices – thumb drives.
Passwords
●
Every new site you go to often wants you to register and pick
a password. How to more easily keep track of them.
●
Sometimes you avoid getting information from a website
because you don't want any more accounts or passwords.
●
A password manager can make password management
easy and it can work on all your devices. Yes that means
mobile and PC including Windows, Mac or Linux.
●
Cost effective and we believe they increase security because
you can chose much more complex passwords because you
don't need to remember them (except for one).
Passwords
● Simple passwords can be “hacked” either with public information or through “brute
force” attacks.
● Good password management tools:
– Roboform Everywhere – LastPass – Dashlane – Passback Pro – Sticky Password – Passwork Genie
– Keeper Backup Unlimited – 1Password
Password Manager - RoboForm
●
RoboForm works on Android, Windows, Mac, Linux.
●
Syncs between all your devices.
●
Allows you to save form information often needed.
●
You remember one “master” password – the tool remembers
the rest.
●
Automates signing on to password protected sites including
financial.
●
There are many other password tools, search the Internet for
Summary
● Your best protection against malware is you!
● Do not open email from somebody you don't know unless you are
confident it is OK.
● If there is not a subject line be very cautious.
● Never open an attachment from anybody you don't know.
● Even if an email comes to you from somebody you know and trust
be cautious if the subject line is blank or doesn't make sense.
● Make sure you look at all windows that open when you are
downloading anything.
