Let's talk about security!
Welcome to 2018, the year of GDPR. Let's discuss some good home security habits. In today's blog, we will cover a simple tactic that will keep you and your family safe, secure and relatively inexpensive.
How many people have a personal firewall? I am not referring to the Windows defender or whatever software variant you might have preinstalled on your Operating System of choice. The easiest way to thwart some security issues is to have a physical firewall with accompanying services offered by a reputable company.
Such services are offered by WatchGuard, SonicWall, or other companies that design a small, low-cost system to be installed on a personal network. These devices are simple to configure and practically plug and play.
On that firewall, you need 3 services activated:
-Web block/IP blocking
-IP whitelisting/IP blacklisting
-The blocking of inbound and outbound traffic
Web blocking services typically check with several opensource or private lists of cataloged websites that are labeled as known good or known bad. This prevents the access of shady or unknown sources and prevents pop-ups from opening or downloading unwanted software. This lowers the chance of malware or ransomware from accessing your computer and network. Note, you can still download the malicious software yourself.
IP whitelisting and blacklisting allows you to block websites based on a category or individual site. With a combination of the two, you can choose to only allow specific site access, i.e., social media, entertainment, or specify the sites such as Instagram, FaceBook, YouTube, etc. You can also block in the same method such as adult websites, mature content, or other flags like the free flash game websites that are prone to viruses. The main difference you need to know is blacklisting allows any site to be accessed other than the specified list, or whitelisting which blocks every website other than your permitted sites in the same manner.
Finally, monitoring inbound and outbound traffic ensures that if something is downloaded, or another device on your network is accessed, that it can not call out to the control server. If a Botnet infects your machine, either a router, computer, Internet of Thing, or another internet connected device, the program is designed to call back to a command and control server. If you're monitoring the outbound traffic, the firewall will recognize the untrusted address and block the program from reaching out to its controller. This is similar to the function of ransomware which we can cover in another article.
The first place cybersecurity starts are with you. This still requires safe search habits and practicing general security habits. This is a good start to protecting a small business or home. There are many other things you can do to help increase security, but that is for another post!
//Caramon
Caramon Stanley is an Enterprise ICT and Cyber TSCM Security Consultant that works globally within the EU, UK, and USA. Nikolai Baldwin is a programmer currently serving a two year Mormon mission in Norway. The two started this blog out of a passion for programming and hardware hacking. They document their time visiting hackathons and hackerspaces around the world. They also like to post personal interests regarding technology and opinions.
Monday, June 18, 2018
Labels:
blacklist,
botnet,
Cybersecurity,
firewall,
home,
home network,
home networking,
IP blocking,
network,
networking,
ransomware,
security,
small business,
Sonicwall,
WatchGuard,
whitelist
Tuesday, January 16, 2018
#!/bin/bash
New year, new site, new blog. When Nikolai and I started this blog, we wanted to document our coding and hackathons. Well, he made the decision to leave on a two year LDS mission in Norway, and I have moved to Sweden as a cyber security consultant. That being said, I will try and restart the blog. I will move it to a better server, where I get more creative control over the HTML, CSS, and JavaScript. I would also like to post more code, and explain it.
The other half of this blog will serve to keep Nikolai updated on the current tech and sort of allow for some small reviews. I know no one reads this blog regularly, so I sort of get to write anything I want. But maybe it will help some passerby one day.
All this being said, I am unsure if I will post every week. Maybe every two weeks. It depends on what I have time or. Whatever I decide, I will first change the hosting to allow a better design in a more pleasing format. I like the photo of my first drone build, but it needs better placement. This will allow for a cleaner page and for a new post on how I created the new site.
Sorry for the lack of posts. I will hopefully be at a European Hackathon soon. Hopefully more pictures. Hopefully a new blog.
#Caramon
Subscribe to:
Posts (Atom)