A Practical Guide to Computer Security

1
A Practical Guide toComputer Security

• How to help protect your computer from basic
  threats.
• Chris Uhl, ITS
• October 31, 2006

2
Why Security?

• Better Reliability of your Computer
• More Uptime
• Reduces risk of data loss
• Reduces risk of hardware loss

3
Four Steps for Better Security

• Regular Operating System Updates
• Using the right Operating System

• Firewall
• Operating System
• At home router

• Sophos Anti-Virus

• Physical Security
• Lockdown Kit for laptops
• Encryption
• Tracking Software

4
Operating System Updates

• As vulnerabilities are discovered, fixes are
  developed and distributed.
• Sasser worm (Windows)
• Problems that are fixed range from benign to
  critical
• The time from vulnerability announcement to
  active exploit is shortening

5
Operating System Updates

• http//windowsupdate.com
• Work well with Windows 2000, XP and Vista.
• Real danger in using
• Windows NT
• Windows 95/98/ME
• Windows 2000 ok, but aging.
• Takes longer to protect and to fix problems

6
Operating System Updates

• Windows Automatic Update
• Downloads updates automatically from Microsoft or
  a local mirror of Windows updates.
• Found in Control Panel.
• This is the setting on new or unmanaged
  workstations.

7
Operating System Updates

• Windows Automatic Update Prompt
• This appears with new Windows machines after it
  has downloaded updates for the first time,

8
Operating System Updates

• Windows Automatic Update Prompt
• Common Prompt to show updates are pending a
  reboot
• Restart your computer right away

9
Operating System Updates

• By default, Windows will download updates and
  install them every day at 0300

10
Operating System Updates

• Macintosh OS X Updates

11
Operating System Updates

• MacintoshOS X Updates

12
Sophos Anti-Virus

• Site Licensed for use on-campus
• Site Licensed for use by students and employees
  off-campus
• Visit http//sophos.usask.ca for instructions to
  install.
• Both Macintosh OS X and Windows.

13
Sophos Anti-Virus

• Interpreting Taskbar Icon
• Blue means active and updated
• Grey means inactive
• A small red x indicates a failed update.
• Normal from time to time usually goes away
• If persistent red X, contact Support Personnel

14
Firewall

• A computer firewall is a way to stop certain
  types of communication from reaching your
  computer.

15
Firewall

• Windows
• Check for padlock

16
Firewall

• Configuring
• On-Campus Group Policy Automatic Exceptions
• Adding Your Own Program or Port Exceptions

17
Firewall

• MacintoshFirewall

18
Firewall

• At-Home Settings for a Wireless Router
• Disable SSID broadcast
• Doesnt advertise your access point.
• Use WPA, do not use WEP
• Use MAC Filter
• Prevents others from using your network, even if
  they have your WPA password.

19
Physical Security

• Laptop Security
• Lock laptop while at home, on-campus and on the
  road.
• If stolen, data on laptop is gone.
• Sold at Campus Computer Store, and at virtually
  all computer stores.
• Prices from 30 to 60

20
Physical Security

• ComputTrace
• http//www.absolute.com
• http//www.lojackforlaptops.com/
• Tracks Computer Hardware during normal use and
  after theft.
• Speak with Scott Findlay at Computer Store for
  more information.

21
Physical Security

• Encrypted Files
• Encryption requires a good understanding of the
  program you are using.
• If a mistake is made, all the data you encrypt
  may be gone.
• Keep your important or sensitive files on a USB
  memory key.
• Keep it with you.
• Consider a USB Hard Drive for storage of large
  amounts of files.

22
Physical Security

• Laptop Surge Suppressors
• APC PNOTE
• About 20at ComputerStore
• Stops surges
• Cleans Power

23
Physical Security

• On-Campus Desktop Surge Suppressor
• APC PER 7 or PRO 8

24
Physical Security

• Lock Windows to prevent casual snooping

25
Physical Security

• MacintoshPassword
• 10.3 10.4

26
Connecting to Campus

• Use VPN
• Access servers like Jade or Cabinet
• Make it appear as though you are on-campus
• Remote Desktop
• Securely connects you to your Windows XP or Vista
  desktop on-campus.
• Keeps your files on-campus.

27
General Notes

• Log off at the end of the day
• Updates will reboot your computer
• Do not turn your computer off at night
• Lock your computer when you leave
• Using a lockdown kit for laptops
• Screensaver lock for desktops
• Do not lock your computer for extended periods of
  time if you are local admin
• Consider using strong passwords

28
Points to remember

• Check Control Panel or System Preferences for how
  your computer is configured for updates.
• Both Windows and Apple computers download updates
  automatically.
• Know where your laptop is
• Lock it down when you cant see it, even in your
  hotel room

29
Questions?