Upgrading Your Home Network Security

Size: px

Start display at page:

Download "Upgrading Your Home Network Security"

Bertram Chase
5 years ago
Views:

1 Upgrading Your Home Network Security For Free! Dr. Glen Sagers Illinois State University

2 Outline Passwords & Passphrases Two-factor authentication Updates Viruses and Malware WiFi security Internet of Things

3 Passwords & Passphrases What is a password? What is a passphrase?

5 Threat Model What are you defending against? Determined attacker with resources? Mass password leak? Physical theft? Casual attacker (Children or co-workers?)

6 Rules Never reuse a password you care about. If leaked, even a great password is blown Beware the "secret question. Often common questions, we post answers on Facebook! Use two-factor authentication, if available See what s been compromised

7 Making Strong Passphrases Passphrases are better, because longer Several words together But not a well-known phrase Use number, CaSe, or symbols But not at the end (90%) Something like: Kissable98-remedy0-repair-eardrop Frostingrepeal&brethrenOveN

8 Making Strong Passwords If a site doesn t support a passphrase: First letter of words in sentence, mangle My first car was a 1984 VW Jetta bought in 95 = MfcwA1984VWJbi 95 (17) The Princess Bride is the best movie ever, with a great cast = TPBitbme,wagCAST (16) This could be the world s most secure memorable password, until I put it on a slide! = Tcbthwmsmp,u1pioas! (19)

9 Password Managers Securely generates, stores & fills passwords Password Safe 1Password KeePass LastPass Write it down

10 Authentication Methods Authentication based on: Something the user has: ID card, phone Something the user knows: PIN, password/phrase Something the user is: Biometrics fingerprint readers, iris scanners

11 Two Factor Authentication Must be based on two different methods ATM uses card + PIN High-security locks use biometrics + pass Can implement on websites User has a normal, reusable password Is sent or generates a 1-time password See

12 Updates Install updates as soon as available Turn on automatic updates Operating System Apps Update your wireless router Usually from router login page, or an update tab

13 Malware Malicious Software Viruses, Trojans, Spyware, Ransomware All want to steal info or damage software Use an antivirus program Windows Defender built-in, good enough All are about 50% effective Nothing wrong with paid versions; but Free is often enough for home users

14 WiFi Don t: Use WEP or WPA security Use WPS (WiFi Protected Setup) Do: Use WPA2 security with a good passphrase (20+ letters) Set a good admin password to log in to router

15 Internet of Things Most IoT devices like WiFi cameras have little or no security Read reviews and search for security issues with a device before buying CHANGE THE DEFAULT PASSWORD Turn off cloud-management features if not needed. What are you giving away in information and privacy?

16 Homework! Go home and: 1. Set up a password manager, start saving, importing, and changing passwords, and enable two-factor authentication 2. Turn on automatic updates on PC & mobile 3. Install anti-malware software 4. Upgrade router & set better passphrases Feel free to contact tech support!

17 PDF handout:

18 Password Managers

19 Other Resources Generators html TED talk (17 min) WiFi

BEST PRACTICES FOR PERSONAL Security

BEST PRACTICES FOR PERSONAL Security BEST PRACTICES FOR PERSONAL Email Security Sometimes it feels that the world of email and internet communication is fraught with dangers: malware, viruses, cyber attacks and so on. There are some simple