The GOAL of the topic is to help you become at least familiar with security issues and to
enable you to address some issues at least with some level of effectiveness -- NO, you will not
become the security director of the CIA or Pentagon, but you will not be naive, uninformed, nor
careless with your computer information either.

Security: The need to keep what you have. That’s why we put locks on our homes, cars, and
safe deposit boxes. It’s also why we protect our systems from intruders, Trojans and virus’.

Privacy: The need to not wear our shorts in public, nor to disclose information to those that might misuse it, as in Identify Theft.

If you run a business from your computer, shop or pay your bills online, then Security and Privacy matter to you.
The bottom line is to not allow access to critical files. The following outline will address several subjects with
the aim of providing tools and techniques to improve the Security and Privacy of your computer:


As a beginning, google define: paranoia
Is used by mental health specialists to describe suspiciousness or mistrust that is either
highly exaggerated or not warranted at all.

Simple suspiciousness is not paranoia – not if it is based on past experience or expectations
learned from the experience of others. .

When the roots of the Internet were being formed,
File Transport Protocol(FTP) and Simple Mail Transport Protocol(SMTP, the sending side of email)
were very naive and operated upon "I trust you and you trust me". As a result, the user names and
passwords were sent to the remote system in "clear text" (ie: unencrypted). In addition, the origin
of each email was taken from the user inputs, not from a trusted or verified source. Consequently,
even today, outbound email From:names can easily be falsified. The problem is so pervasive that
the only real solution is a total redesign of the email system.

Ever heard of Spam, Phishing or Identity Theft? "Simple suspiciousness is not paranoia!"

So here's the outline for Security Basics and some recommended Security Tools)

Layers of Security

1. Control Access
   1a. Physical Security
   1b. Local Login Security
   1c. Print/File Sharing
   1d. Network Access
   1e. Routing Tables
   
2. Control what can be changed
   2a. LUA vs Admin account
   2b. NTFS
   2c. GPO Policies
   2d. The Encryption File System(EFS)
   
3. Control Internet Usage
   3a. Browser actions
   3b. Email Spoofs/phishing
   3c. Instant Messaging & Peer-to-Peer(p2p)
   
4. USB Device Issues
   
5. Trimming Windows Processes
   
6. Security is a Layering Proposition
   
7. Mac OS X Specifics ...

__________________
J. O. Beard; you + tech-101.com => synergism. Secure your system now

With only a Modem connection, EVERYTHING from the Internet has access to your PC

Adding a Router provides NAT and SPI protection to divert anything you didn't request

Adding the Firewall allows you to further refine what is seen by your programs
(note: p2p and file sharing w/o a firewall is another loop hole into your systems)

Once the data stream is presented to any of your programs, you're in a defensive
posture.

1) your A/V scanner is your last level of protection for Email

2) a Link Scanner and Spywareblaster are your last level for your Browser(s)

3) and Real Time Scanning of every program you launch is all that's left to protect you



the Layered Security system is also shown in the attached PDF.

Attached Files

Layered-Security.pdf (114.3 KB, 4 views)

__________________
J. O. Beard; you + tech-101.com => synergism. Secure your system now