Resources
Supplementary class materials
“Hackers, Viruses, and Phish: Avoiding Potholes on the Yellow Brick Cyberhighway”
This web page provides additional information and resources for attendees of the presentation. The lists here are not intended as exhaustive, nor should they be construed as endorsements, but they should help you get started.
As we discussed during the session, "security is a process, not a product." Information security is a tough subject these days, with the average PC the target of organized crime. Windows systems tend to be more vulnerable than systems running MacOS or Linux — but no system is invulnerable to attack. Following the precautions discussed will mitigate the risks, and the software tools on this page will likely be helpful.
Password Management
- These programs keep all your user IDs and passwords in a single place, and simplify logging in to web site accounts. All use strong encryption to protect your infomration; as long as your password can't be guessed, your data is safe. (But don't forget or disclose the password to access all the information being protected!)
- Password Safe — free open source software for Windows
- KeePass -- free open source software for Windows, MacOS, Linux, and mobile devices
- LastPass — free version available, for Windows, MacOS, Linux, and mobile devices
- RoboForm — base version is free, runs on Windows, mobile devices, Firefox and Chrome
- Password Savvy — make harder-to-hack passwords that you can remember
- Why You Should Use a Password Manager and How to Get Started
Anti-virus Software
- Here are a few of the free anti-virus programs that run under Windows. Most of the vendors sell premium versions with more features. Look carefully at the web sites, as the free versions are not always obvious!
- AVG
- Avast!
- Avira
- Microsoft Security Essentials
- Malwarebytes
- Don't forget to look at free security software offered by many ISPs for their customers
Firewall Software
- Here are a few of the free firewall programs that run under Windows. Most of the vendors sell premium versions with more features. Look carefully at the web sites, as the free versions are not always obvious!
- ZoneAlarm
- Comodo
- GFI/Sunbelt Persaonal Firewall — (download the full version for 30-day trial, will revert to free version if you don't pay to upgrade)
- Windows Firewall — built into Windows. Not as many features, but maybe good enough?
- Hardware router — if you have a router between your Internet connection (cable/DSL/FIOS modem) and your computer(s), it probably provides some firewall features.
- Don't forget to look at free security software offered by many ISPs for their customers
- ShieldsUP! — use this free service to see how well your firewall is protecting you.
- Free vs. Fee: Free and Paid Antivirus Programs Compared — a review in the January 2011 issue of PC World
Backup Software
- Here are a few of the free backup programs that run under Windows, along with online services. Many of the vendors sell premium versions with more features. Look carefully at the web sites, as the free versions are not always obvious!
- Mozy — on-line backup (up to 2 gigabytes free)
- Carbonite — on-line backup (free trial)
- Backblaze — on-line backup (free trial)
- Toucan — lightweight backup and file synchronization
- GFI Backup
- Paragon Backup & Recovery
- Outlook Personal Folders Backup — this free Outlook add-in from Microsoft creates backup copies of your .PST files (where Outlook stores your e-mail messages and contacts) at regular internvals.
- Why Offsite Backup Is a "Must"
Domain Name Services
- Especially when connecting to an untrusted network, you may wish to specify your own Domain Name Servers to be certain you're connecting to the hosts you think you're connecting to. There are other potential benefits too, such as Web content filtering and greater reliabilty.
- OpenDNS
- Google Public DNS
Other Software
- Here are free programs in a variety of categories.
- TrueCrypt — data encryption software
- Eraser — secure data removal
- Best Free Security Software for PC — has lists covering several categories, in case you want to dig deeper
- Hotspot Shield — creates a virtual private network (VPN), for secure network access when on the road
- CyberGhost VPN — another tool+service for creating a VPN. (I've not tested this one.)
- Comparison of Free VPNs
- Gizmo's Freeware Security Wizard — helps you select the best free security software for your PC based on the version of Windows that you use, your technical computer skills, and your general level of security risk.
- Mozilla plugin check
- HowSecureIsMyPassword? — find out!
- Passcreator — create a strong password
- Foxit Reader — an alternative to Adobe Reader for viewing and printing PDF files
- Ubuntu — for safer banking, consider running this Linux distribution. You don't even need to install it on your computer — just boot from the live CD, and when you're done, you still have your original computer setup.
- Prey — track your phone or laptop in case it gets lost or stolen
- POPFile — a free open-source spam filtering program. With a little bit of training, it provides highly accurate classification of your incoming e-mail messages. (I've been using it for several years with great results.) Note that the installation and setup procedures are slightly geeky, so be sure to read and follow the instructions carefully.
- PortableApps — load up a USB flash drive with versions of Opera, Firefox, and Chrome (plus lots of other productivity software) that you can run, without installing, on any Windows computer.
Newsletters
- These e-mail newsletters are free, and are written for relatively non-technical users.
- SANS Ouch! — good security awareness advice
- Microsoft Security for Home Computer Users Newsletter
- Windows Secrets — good free advice, covering security and other technical topics. (I subscribe to the paid edition for expanded coverage.)
- The Privacy Forum — join this mailing list if you care about the issues of privacy (or the lack thereof) in our information society
- ACM Forum on Risks to the Public in Computers and Related Systems -- admittedly a little geeky, this mailing list provides fascinating discussion; many of the postings touch on security and privacy issues.
Miscellaneous
- US-CERT tips — tips & resources from the US Computer Emergency Readiness Team (not too technical)
- 20 Things I Learned About Browsers & the Web — picture book from Google with nice explanations of cookies, web privacy issues, etc.
- How to Preview Shortened URLs (TinyURL, bit.ly, is.gd, and more) — the potential threat lies in the fact that you don't know where a shortened URL might take you
- "Schifreen's Fifteens" security checklists
- Data Privacy Day 2011: a roundup of add-ons, tools and tips to protect yourself online
- Best Practices for Keeping Your Home Network Secure — practical advice from the National Security Agency
- A Guide to Facebook Security
- The Complete Guide To Protecting Your Privacy Online
- How to Protect Your Online Privacy
- Security Risks of QR Codes and Near Field Communication — if you use a smart phone, there are new risks to worry about!
- How to Encrypt Your Email
- Some Things Should Remain Private: What Not To Share On Facebook
- Twelve Things You Need to Know About Internet Privacy