Printable View
[gloworange]ULTIMATE SECURITY [/gloworange]
Hi I'm a newbie (and I'm not afriad to admit it)
I want my box to be uber secure. I'm a little paranoid. currently I'm running Zone Alarm Pro, Pest Patrol (which scans for spyware/adware, keyloggers, and malicious cookies), And Norton Antivirus on windows xp with xp firewall turned off for fear of conflicts with ZA. Am I missing something?
Thanks.
Well, if you're looking for "ultimate security" there is lots that you can do. Software-based firewalls (aka Zonealarm) are inherently insecure because the assumption is that the OS that they reside on is insecure. If you want real security, you need to go with something that is either hardware-based or runs at the kernel level. You could put this machine behind a Linux machine doing stateful inspection (although you would have to take the proper precautions when setting this up so that you're not running unecessary services, etc). You could also check out the NSA's guidelines for securing Microsoft Windows XP here. There is lots more that you can do, but these two, combined with what you're currently doing will far surpass the protections that your average home user has implemented, and should assure a reasonable level of security.
Quote:
Originally posted here by sasser
[gloworange]ULTIMATE SECURITY [/gloworange]
Hi I'm a newbie (and I'm not afriad to admit it)
I want my box to be uber secure. I'm a little paranoid. currently I'm running Zone Alarm Pro, Pest Patrol (which scans for spyware/adware, keyloggers, and malicious cookies), And Norton Antivirus on windows xp with xp firewall turned off for fear of conflicts with ZA. Am I missing something?
Thanks.
I know about linux and have even tried, and liked redhat linux, but at my level ( I like to think i am an intermediate), and the things I want do like games, photos, TV/PVR aren't geared towards linux. so I'm limited on my OS choices, at least on this particular box, I'm aware of the security flaws that xp has too. In short what I'm trying to do is secure what I have and what i'm working with. I guess to clarify I am trying to find out if I am missing a software program(s) to HELP keep out the black hats. As for behind a linux machine, honestly thats beyond my level as of now. I've have two extra computers that could be used for something like that..but unfortunatly thats where I fall short... in do time and through a little research. thanks for your reply
Zone Alarm Pro = Good to haveQuote:
Originally posted here by sasser
[gloworange]ULTIMATE SECURITY [/gloworange]
Hi I'm a newbie (and I'm not afriad to admit it)
I want my box to be uber secure. I'm a little paranoid. currently I'm running Zone Alarm Pro, Pest Patrol (which scans for spyware/adware, keyloggers, and malicious cookies), And Norton Antivirus on windows xp with xp firewall turned off for fear of conflicts with ZA. Am I missing something?
Thanks.
Pest Patrol = Good to have(takes care of the ANNOYING adware)
Norton = Good for virus detection and anti-viris engagement
Looks like you have everything pretty secure for not using Linux. I would not worry about it too much. But still be coscious. When you let your gaurd down once. All the bad things hit........
This is going to sound trite, but honestly, the best security is your continuing education concerning computers. The steps you have taken so far are a good start, but relying on software to protect you is folly, IMO. Update, patch, etc., and just like you have probably seen before, start reading; then you can ask more specific questions that people will be able to give specific answers to.Quote:
Originally posted here by sasser
I guess to clarify I am trying to find out if I am missing a software program(s) to HELP keep out the black hats.
If you are actually interested in securing your box to the "ubereth" degree, then you need to understand what those apps you mentioned are doing for you.
Quote:
Originally posted here by KeyserSoze
If you are actually interested in securing your box to the "ubereth" degree, then you need to understand what those apps you mentioned are doing for you.
Very true...thanks
Two Words... for COMPLETE Computer Security..... Power Off
Just Kidding..
Cheers
KeyserSoze, hehe... lol at specifics all he asked was if he was missing something. But wait sorry, after seeing phantomj104's post you know what, never mind. **** this...
And by the way I bet your missing some good file/sys policies & auditing. Does a world of good when you get malware on your box then all of a sudden it's method of startup is prevented or you are alerted towards all changes made on your box. Once firewalls fails you and a buffer overflow is performed, the attacker gains what ever priviledges of what ever program he or she manages to exploit. This of course varies and yet it still doesn't mean that things aren't watched over. Why make it all the more easly done?
Linux this and that... mostly what I have seen are peaple running servers off linux. And when that happends things are usually about as secure as an ugly fat girl at a school dance. A OS alone will not keep you safe so why are peaple bringing it up...
You want to know ulitmate security here is a checklist:
If you are running windows:
learn how to use everything in that Administrative tools folder in control panel
Learn how to read your logs
Learn how to edit the registry, completely, without killing your box
Learn how to run an antivirus program and keep it up to date
Learn how to run a spyware program and keep it up to date
Learn how to run a good firewall, and be able to write rules for it based on your current situation.
Learn how to set up some secure services (SSH, VPN over SSL tunnel, Apache, etc)
Keep up to date on exploits
Apply patches
Learn commen sene
If you are running Linux:
Learn the crap out of iptables and be able to write your own rules
Learn how to set up a secure apache server with cgi apps and php
learn how to set up a SSH server
Learn how to set up a sendmail server
Learn how ot set up a linux router
Learn how to set up a DNS server
learn how to set permissions
learn how to use netcat
learn how to use snort
learn how to use nmap
learn how to use nessus
learn to edit each and every system file
learn how to read logs
Keep up to date on exploits
patch your system
use commen sense
If you can say you have done every one of these things, then you should be pretty adept at security. However, it doesn't stop there. To be REAL good at security...well I tell you what, finish this checklist and I will give you more to learn.
i agree lol ,only way to totally sucure your computer is to unplug the line to your modem ,or continue you ssearch for knowledge ,also as alternetives are sygate,avg ,adaware...i have ran sygate for 2 years nothing has happened to my computer yet i highly recommend sygate personal firewall proQuote:
Originally posted here by phantomj104
Two Words... for COMPLETE Computer Security..... Power Off
Just Kidding..
Cheers
?!?? securing windows OS??? kinda hard to do well just one thing to share to you learn the linux OS coz first of all linux OS or Unix OS has a greater security than windows...if your using a box that runs window OS and trying it tosecure it you'll be needing a hell lot of this and that etc... but if you use linux /unix you'll just configured it properly and use some free downloadable program that can help you a real programmer OS , learn to use linux you'll find the difference..
You should disable any unnecessary services-
http://www.sanx.org/tipShow.asp?articleRef=65
And you might want to take a look at these tutorials-
http://antionline.com/showthread.php?s=&threadid=251176
http://antionline.com/showthread.php?s=&threadid=255443
http://antionline.com/showthread.php?s=&threadid=255353
ok its 5 in the morning and I cant sleep...but if this was mentioned before, sorry. Another good way to really seal off your computer is to keep it disconnected from the internet. Just dont connect online...end of story, that will eliminate most of your issues, and save you some money each month.
Like some of the other previous members mentioned you must study first in order to know how to really secure your system. Since I'm a bookworm, a book that I would suggest buying and reading that would be good for a beginner is "Steal This Computer Book 3 , by wallace wang ." The book I mentioned pretty much goes over the more general things about what to watch out for especially when using the internet since that's what computers are used mostly for. Your not just protecting your computer, your protecting yourself. It also will help provide you with great links to visit which will help you explore. General information is always good to have since you know a little about everything. Once you know what dangers to look out for, your level of paranoia is what eventually will determine the security of your computer.
Did you not read what I had posted up? And how can you say a OS alone is more secure than another then turn around and say that in order to be secure you must configure things properly... thats so stupid. So mainly its up to the user correct? So in other words you've basicly just repeated what I said about how a OS alone won't do jack-crap for you security wise only you've added parts that counter your own statements.Quote:
Originally posted here by Sgear17
?!?? securing windows OS??? kinda hard to do well just one thing to share to you learn the linux OS coz first of all linux OS or Unix OS has a greater security than windows...if your using a box that runs window OS and trying it tosecure it you'll be needing a hell lot of this and that etc... but if you use linux /unix you'll just configured it properly and use some free downloadable program that can help you a real programmer OS , learn to use linux you'll find the difference..
Sgear17,
You obviously haven't done your homework and will probably need to keep a fire extinguisher handy for the flames. I would highly recommend you search this site about securing OS's. Although opinions are great, the facts differ in this particular case.Quote:
?!?? securing windows OS??? kinda hard to do well just one thing to share to you learn the linux OS coz first of all linux OS or Unix OS has a greater security than windows...if your using a box that runs window OS and trying it tosecure it you'll be needing a hell lot of this and that etc... but if you use linux /unix you'll just configured it properly and use some free downloadable program that can help you a real programmer OS , learn to use linux you'll find the difference..
The best security practices encompass a layered defense. Think of dropping the soap in a prision shower, if you don't know how to pick it up without bending over and if you don't have a butt plate in place......?
Firewall Basics
FAQ: Firewall Forensics (What am I seeing?)
Firewall Basics
ZoneLog Analyser
Internet Explorer: Secure Browsing; as Safe as possible
Internet Explorer 6 & Outlook Express tweak guide
Internet Explorer Privacy & Security Settings
Internet Explorer Security Options, Part 1,Part 2,Part 3,Part 4,Part 5,Part 6
Securing Internet Explorer
Outlook Express: Securing it, Setup & Testing
GFI Email Security Testing Zone
Email Ssecurity Test FAQ
Message Rules
HTML E-Mail read receipt demo
Safe Computing - The Risks
Test Your E-mail Defenses
Security in General
Beginner's Guides
Guide to Windows Online Security & Privacy
Home Computer Security
How to secure Windows2000 / XP
Microsoft's "Protect Your PC" Guide
Protect Your PC" Videos
Windows Hidden File Extensions
Spyware: Prevention and Removal
Adaware 5.83
SpyBot Search and Destroy v1.1 with Installer
SpywareInfo
SpywareBlaster
Windows Messenger
How to turn off Windows Messenger Service
Messenger Service Window That Contains an Internet Advertisement Appears
myNetWatchman Alert - Windows PopUP SPAM
www.grc.com/stm/shootthemessenger.htm]Shoot the Messenger - Windows Messenger Spam Elimination Freeware[/url]
I couldn't disagree more. Windows ACLs are much better for file-level security than the Linux user/group method. Yes, Linux now has ACLs, but a great many people don't even know that. Your average user can manage to turn on/off file permissions and auditing in Windows, but how many average users can manage Linux ACLs?Quote:
Originally posted here by Sgear17
?!?? securing windows OS??? kinda hard to do well just one thing to share to you learn the linux OS coz first of all linux OS or Unix OS has a greater security than windows
I'm currently mentoring a class for SANS, and three of the students in my class work for a DoD contractor securing Windows desktops. They edit file permissions and audit settings with a HEX EDITOR!! There is no doubt in my mind those machines are locked down tight, much tighter than most production-level Linux servers that I've seen.
I love Linux, and am even an RHCT. I run Gentoo, Mandrake, and Redhat at work, and do everything I can to help Linux progress in the desktop market. However, to automatically assume that Linux is more secure than Windows is flawed. It depends on the application, and who is securing the desktop.