computer security for a beginner
Share practical recommendations that address the author's needs.
what computer security would be best for a beginner please, to protect every situation, email, web, etc.
You'll get many varied opinions, easiest is just using Microsoft Defender augmented with either Configure Defender or DefenderUI, add browser extensions such a Ublock and Malwarebytes Browser Guard, set your DNS to something like Quad9 or Cloudfare and use your brain in watching what you install and what you click on. Read this forum for a week or so and you'll get lots of good ideas.
Last edited:
If you can afford it, a good backup program to a external drive, can be a real security help(macrium reflect is recommended )security in the sense to restore, keep external drive unplugged after backing up. There are others to use but I would not be qualified which,just ask on the forum if you want good advice.
Know that no one single security app will protect Everything well. You have to piece together the apps to use.
Security is 3 things:
. Protect & prevent
. Detection
. Remediation
You try to protect, like using security programs like VoodooShield CyberLock and any AV
What you can't protect or if protection fails, you must be able to Detect. I like Wazuh. It requires a separate old PC, and you forward the logs to it. You use it to monitor for actions that you did not take. (eg. a supposed video program scheduling regular calls outbound to some hacker's server.)
Remediation is mainly 3 things: you separate the PC that is infected so the infection doesn't spread and the hacker doesn't roam around. And you restore a good copy from drive image. And you prepare to respond to an incident, follow the planned steps so you don't panic and forget.
Protection has 3 forms :
Technical - like an antivirus program
Administrative procedures - like taking the time to upload an unkown dowload to VirusTotal, or never surfing with your admin account
Physical - like a door lock on your study room's door.
Security technology and apps come and fade away. But these principles remain. Know and apply them and you will have good security coverage. Threats are many, so you put together pieces of security control and aim for coverage. Remember protection can take 3 forms. If you can't find a technical control to cover a threat or it's too expensive you can sometimes cover it with an administrative control or several separate controls.
Have layers of control. If a threat bypasses one, then you still have another. Like my favorite example: when the AV's blacklist fails you still have CyberLock's default deny. And if you are tired or in a rush and Ok'ed CyberLock, you still have Wazuh's detection.
Copy and paste this short intro to AI and ask it to elaborate.
Security is 3 things:
. Protect & prevent
. Detection
. Remediation
You try to protect, like using security programs like VoodooShield CyberLock and any AV
What you can't protect or if protection fails, you must be able to Detect. I like Wazuh. It requires a separate old PC, and you forward the logs to it. You use it to monitor for actions that you did not take. (eg. a supposed video program scheduling regular calls outbound to some hacker's server.)
Remediation is mainly 3 things: you separate the PC that is infected so the infection doesn't spread and the hacker doesn't roam around. And you restore a good copy from drive image. And you prepare to respond to an incident, follow the planned steps so you don't panic and forget.
Protection has 3 forms :
Technical - like an antivirus program
Administrative procedures - like taking the time to upload an unkown dowload to VirusTotal, or never surfing with your admin account
Physical - like a door lock on your study room's door.
Security technology and apps come and fade away. But these principles remain. Know and apply them and you will have good security coverage. Threats are many, so you put together pieces of security control and aim for coverage. Remember protection can take 3 forms. If you can't find a technical control to cover a threat or it's too expensive you can sometimes cover it with an administrative control or several separate controls.
Have layers of control. If a threat bypasses one, then you still have another. Like my favorite example: when the AV's blacklist fails you still have CyberLock's default deny. And if you are tired or in a rush and Ok'ed CyberLock, you still have Wazuh's detection.
Copy and paste this short intro to AI and ask it to elaborate.
Last edited:
Hi @kev7
Before choosing security tools or specific configurations, I think it helps to first understand what kind of user you are and how you normally use your PC.
For example, someone who mainly browses the web, watches streaming content, and checks email will have different needs from someone who frequently downloads software, performs online banking, or works with sensitive information.
Once you have a better idea of your own usage, it becomes easier to find a good balance between protection and convenience. A setup that is too restrictive can become frustrating to use, while one that is too permissive may leave unnecessary risks.
The best approach is usually to adjust security measures to your real needs, keep good browsing habits, and always have a reliable backup strategy.
Before choosing security tools or specific configurations, I think it helps to first understand what kind of user you are and how you normally use your PC.
For example, someone who mainly browses the web, watches streaming content, and checks email will have different needs from someone who frequently downloads software, performs online banking, or works with sensitive information.
Once you have a better idea of your own usage, it becomes easier to find a good balance between protection and convenience. A setup that is too restrictive can become frustrating to use, while one that is too permissive may leave unnecessary risks.
The best approach is usually to adjust security measures to your real needs, keep good browsing habits, and always have a reliable backup strategy.
I completely skipped an important step when answering. (self reminder to stick to the darn security framework). Identifying existing usage is an important step in tallying the risks that one faces. For example, I copy over various notes and documents via USB to my offline PC for prosperity. So the USB stick is an infection vector. My administrative procedural control is to a) use a different qube to receive files first, then move the document only across qubes to the destination. The receiving qube can become infected but I still succeed the goal on transferring. The reception qube can be rebuilt. b) I format the usb stick regularly, as it is only for transport, and not for keeping anything.
Which reminds me of one other thing in the identification phase. Rank your data in terms of CIA importance. And put effort into protecting the important ones. If A (availability) is important, then be sure to maintain backups. If C (confidentiality) is important then you encrypt it. And if I (Integrity) is important then you can hash the file and do periodic automated examinations.
I am getting old and forgetful. Did the NIST RMF (risk management framework) steps and forgot about them. Time to do the assessment phase again soon, as I have made some new controls. Haven't figured out how yet.
Short on budget this year so may have to skip the pentest somehow, so this assessment is important.
Last edited:
Ice Dream'
Level 1
the free firewall from Sophos, but you must install it on a whole different system. not yours.
tbh is at the kaspersky seriousness
most home users can't even fully utilize to it's potential
tbh is at the kaspersky seriousness
most home users can't even fully utilize to it's potential
Microsoft Defender (hardened) See Digmor Crusher"s post above. This is very strong. Cyberlock a great addition to any AV you pick
Ice Dream'
Level 1
kev you must realise something
a firewall, any given one, so there's not the fact that one has less or more, no no, but no firewall gonna protect you from a DDoS. That's your ISP job.
any third-party FW can make your ports stealthy so does the integrated FW, any FW as a matter of fact works on the WFE(Windows Filtering Engine). What a third-party firewall can do, is to block some 0 day psihing attempts, if you lack in other parts(adblocking, tracking or HOSTS redirects) but more or less, nowadays a good AV suite simply offers a browser level protection with the help of propietary extension. I think for many power-users, Webroot can't do any bad here. Is not free but it worth buying a license and semi-infrequently they offer giveaways through other media.
Basically now, to boil it down in a few words. Any firewall can protect you, as long as your ports are in STEALTH. Make sure to avoid buggy Chromium/Webkit releases and stay as up to date as you can. As long as you got these 2, you're set to rock.
happy black web day
a firewall, any given one, so there's not the fact that one has less or more, no no, but no firewall gonna protect you from a DDoS. That's your ISP job.
any third-party FW can make your ports stealthy so does the integrated FW, any FW as a matter of fact works on the WFE(Windows Filtering Engine). What a third-party firewall can do, is to block some 0 day psihing attempts, if you lack in other parts(adblocking, tracking or HOSTS redirects) but more or less, nowadays a good AV suite simply offers a browser level protection with the help of propietary extension. I think for many power-users, Webroot can't do any bad here. Is not free but it worth buying a license and semi-infrequently they offer giveaways through other media.
Basically now, to boil it down in a few words. Any firewall can protect you, as long as your ports are in STEALTH. Make sure to avoid buggy Chromium/Webkit releases and stay as up to date as you can. As long as you got these 2, you're set to rock.
happy black web day
Recently browsing
Members who viewed this thread in the last 5 minutes
You may also like...
-
-
Software Review COMODO Internet Security Pro 2027 (Re-Test) -
-
-
