Presentation is loading. Please wait.

Presentation is loading. Please wait.

Windows Security A practical approach. Basics Passwords Passwords Strong password should:Strong password should: Be long Be long Contain: Contain: LettersLetters.

Published byDoreen Perkins Modified over 9 years ago

Similar presentations

Presentation on theme: "Windows Security A practical approach. Basics Passwords Passwords Strong password should:Strong password should: Be long Be long Contain: Contain: LettersLetters."— Presentation transcript:

1 Windows Security A practical approach

2 Basics Passwords Passwords Strong password should:Strong password should: Be long Be long Contain: Contain: LettersLetters PunctuationPunctuation SymbolsSymbols NumbersNumbers Password Checker Password Checker http://www.microsoft.com/security/online- privacy/password-checker.aspxhttp://www.microsoft.com/security/online- privacy/password-checker.aspx

3 Password Password is known ONLY to user Password is known ONLY to user Storing/Managing Passwords Storing/Managing Passwords Password algorithmsPassword algorithms Password files Password files

4 File System NTFS Security Advantages NTFS Security Advantages Access Control ListAccess Control List Granular structureGranular structure Supports server authenticationSupports server authentication Ability to encrypt files and directoriesAbility to encrypt files and directories Encrypted File System (EFS) Encrypted File System (EFS)

5 PERMISSIONS For files, directories, networked devices APPLICABLE ON: - Users - Computers - Networked devices - Groups of: -Users -Computers -Networked devices INHERITANCE NTFS Access Control

6 Surfing the Internet Browsers Browsers FFFF IEIE Others (Opera, Chrome, etc)Others (Opera, Chrome, etc) Browser Add-ons Browser Add-ons NoScriptNoScript FlashBlockFlashBlock

7 Environmental Threats COMPONENT OBJECT MODELS Object Linking and Embedding (OLE) Object Linking and Embedding (OLE) Remote Procedure Call (RPC) Remote Procedure Call (RPC) ActiveX ActiveX JAVA APPLETS

8 External threats Browser related Browser related Hijacks (BHO)Hijacks (BHO) Drive-by downloads Drive-by downloads WMF (2005), ActiveX, DCOM WMF (2005), ActiveX, DCOM Scams Scams Confidence trickingConfidence tricking Phishing Phishing Fake EmailsFake Emails ID Theft ID Theft Data harvestingData harvesting Social Engineering Social Engineering Psychological manipulationPsychological manipulation Targeted Malware Targeted Malware Silent_bankerSilent_banker

9 Human Error Emails Emails Downloads Downloads P2PP2P Underground sourcesUnderground sources System patches out of date System patches out of date Clicking without reading/fully understanding (‘Nexters’) Clicking without reading/fully understanding (‘Nexters’)

10 Privacy Indexing services Indexing services Google DesktopGoogle Desktop Social websites Social websites FacebookFacebook ID Threats ID Threats Facebook Applications Facebook Applications Source of infectionSource of infection Data miningData mining Search engines Search engines GoogleGoogle Scrapped google engine (Scroogle) Scrapped google engine (Scroogle) IxquickIxquick DuckDuckGoDuckDuckGo

11 Operating System Security Software Anti Virus Anti Virus Microsoft Security Essentials (MSE)Microsoft Security Essentials (MSE) Anti Spy/Malware Anti Spy/Malware Windows DefenderWindows Defender Tracking Software Tracking Software AdeonaAdeona Firewall Firewall Windows FirewallWindows Firewall Sygate Personal FirewallSygate Personal Firewall

12 Common Sense Strong Password Strong Password Latest updates Latest updates Unprivileged user account Unprivileged user account Read EVERYTHING on screen Read EVERYTHING on screen Never disclose any login details Never disclose any login details Never believe in something for nothing Never believe in something for nothing Be Aware Be Aware Better safe than sorry Better safe than sorry

13 Safe System Internet Browsing Internet Browsing Tightened settings for BrowsersTightened settings for Browsers Do not log in as AdministratorDo not log in as Administrator Build up adequate layer of defence through application layerBuild up adequate layer of defence through application layer Real-Time anti-vir/spy/mal/ad wareReal-Time anti-vir/spy/mal/ad ware Electronic Mail Electronic Mail Set up for plain text onlySet up for plain text only Be careful what you subscribe toBe careful what you subscribe to (mailing list harvesting) Spam filtersSpam filters Email address obfuscatingEmail address obfuscating Structuring multiple email addresses for different purposesStructuring multiple email addresses for different purposes System layer System layer Hidden files (double extensions)Hidden files (double extensions) Start-upStart-up Active software protectionActive software protection

14 THE END Thank you

Download ppt "Windows Security A practical approach. Basics Passwords Passwords Strong password should:Strong password should: Be long Be long Contain: Contain: LettersLetters."

Similar presentations

Providing protection from potential security threats that exist for any internet-connected computer is termed e- security. It is important to be able to.

Providing protection from potential security threats that exist for any internet-connected computer is termed e- security. It is important to be able to.
Keep Your PC Safe (Windows 7, Vista or XP) Nora Lucke 02/05/2012 Documents - security.

Keep Your PC Safe (Windows 7, Vista or XP) Nora Lucke 02/05/2012 Documents - security.
Tips and tools to keep you and your information safe on-line. We will go over a lot of information today, so it is important to pay attention and follow.

Tips and tools to keep you and your information safe on-line. We will go over a lot of information today, so it is important to pay attention and follow.
Tips and tools to keep you and your information safe on-line. We will go over a lot of information today, so it is important to pay attention and follow.

Tips and tools to keep you and your information safe on-line. We will go over a lot of information today, so it is important to pay attention and follow.
Internet Safety Gleneagles Computer Club February 16, 2015 by Deborah Benson.

Internet Safety Gleneagles Computer Club February 16, 2015 by Deborah Benson.
Breaking Trust On The Internet

Breaking Trust On The Internet
Cyber check Do you work safely and responsibly online? Do you know about the risks to your cyber security? What are your online responsibilities ? How.

Cyber check Do you work safely and responsibly online? Do you know about the risks to your cyber security? What are your online responsibilities ? How.
Online Banking Fraud Prevention Recommendations and Best Practices This document provides you with fraud prevention best practices that every employee.

Online Banking Fraud Prevention Recommendations and Best Practices This document provides you with fraud prevention best practices that every employee.
How to avoid Viruses and Malware on your Computer Use a firewall Using a firewall is like locking the front door to your house—it helps keep intruders.

How to avoid Viruses and Malware on your Computer Use a firewall Using a firewall is like locking the front door to your house—it helps keep intruders.
Defense-in-Depth Against Malicious Software Jeff Alexander IT Pro Evangelist Microsoft Australia

Defense-in-Depth Against Malicious Software Jeff Alexander IT Pro Evangelist Microsoft Australia
IDENTITY THEFT ARE YOU SAFE?. HOW DOES THIS HAPPEN TO ME? Internet “Security “ When using a public computer, never access any vital accounts like banking.

IDENTITY THEFT ARE YOU SAFE?. HOW DOES THIS HAPPEN TO ME? Internet “Security “ When using a public computer, never access any vital accounts like banking.
Use computer and internet safely Dave Dai 2008. Computer security Malware Virus: a program that copies itself and infect a computer without permission.

Use computer and internet safely Dave Dai Computer security Malware Virus: a program that copies itself and infect a computer without permission.
Title: The Internet LO: Security risks. Security risks Types of risks: 1.Phishing 2.Pharming 3.Spamming 4.Spyware 5.Cookies 6.Virus.

Title: The Internet LO: Security risks. Security risks Types of risks: 1.Phishing 2.Pharming 3.Spamming 4.Spyware 5.Cookies 6.Virus.
Security Liaisons Information Presentation. Introduction  What’s the big deal with computer security? Don’t we have an IT security department to take.

Security Liaisons Information Presentation. Introduction  What’s the big deal with computer security? Don’t we have an IT security department to take.
Threats to I.T Internet security By Cameron Mundy.

Threats to I.T Internet security By Cameron Mundy.
Internet safety By Lydia Snowden.

Internet safety By Lydia Snowden.
Security for Seniors SeniorNet Help Desk 631.629.5426

Security for Seniors SeniorNet Help Desk
CHC DI Group. What We Will Cover Securing your devices and computers. Passwords. Emails. Safe browsing for shopping and online banks. Social media.

CHC DI Group. What We Will Cover Securing your devices and computers. Passwords. s. Safe browsing for shopping and online banks. Social media.
Protecting Your Computer & Your Information

Protecting Your Computer & Your Information
Detrick Robinson & Amris Treadwell.  Computer viruses- are pieces of programs that are purposely made up to infect your computer.  Examples: › Internet.

Detrick Robinson & Amris Treadwell.  Computer viruses- are pieces of programs that are purposely made up to infect your computer.  Examples: › Internet.

Similar presentations

Ads by Google