Serious Discussion computer security for a beginner

[kev7]

hi, sorry if this has been asked before what computer security would be best for a beginner please, to protect every situation, email, web, etc.

thank you,

 

[Digmor Crusher]

You'll get many varied opinions, easiest is just using Microsoft Defender augmented with either Configure Defender or DefenderUI, add browser extensions such a Ublock and Malwarebytes Browser Guard, set your DNS to something like Quad9 or Cloudfare and use your brain in watching what you install and what you click on. Read this forum for a week or so and you'll get lots of good ideas.

 

[kev7]

thank you

 

[Sampei.Nihira]

@kev7

You can also get inspiration by reading the security configurations posted by other forum members.
Keep in mind that the best configuration for you is the one you know how to manage best.

 

[kev7]

ok thank you

 

[Dave Russo]

If you can afford it, a good backup program to a external drive, can be a real security help(macrium reflect is recommended )security in the sense to restore, keep external drive unplugged after backing up. There are others to use but I would not be qualified which,just ask on the forum if you want good advice.

 

[Victor M]

If you are using Windows, hasleo is free drive image + regular backup app. If you are using Linux, clonezilla is an open source drive image app.

 

[Victor M]

Know that no one single security app will protect Everything well. You have to piece together the apps to use.

Security is 3 things:
. Protect & prevent
. Detection
. Remediation

You try to protect, like using security programs like VoodooShield CyberLock and any AV
What you can't protect or if protection fails, you must be able to Detect. I like Wazuh. It requires a separate old PC, and you forward the logs to it. You use it to monitor for actions that you did not take. (eg. a supposed video program scheduling regular calls outbound to some hacker's server.)
Remediation is mainly 3 things: you separate the PC that is infected so the infection doesn't spread and the hacker doesn't roam around. And you restore a good copy from drive image. And you prepare to respond to an incident, follow the planned steps so you don't panic and forget.

Protection has 3 forms :
Technical - like an antivirus program
Administrative procedures - like taking the time to upload an unkown dowload to VirusTotal, or never surfing with your admin account
Physical - like a door lock on your study room's door.

Security technology and apps come and fade away. But these principles remain. Know and apply them and you will have good security coverage. Threats are many, so you put together pieces of security control and aim for coverage. Remember protection can take 3 forms. If you can't find a technical control to cover a threat or it's too expensive you can sometimes cover it with an administrative control or several separate controls.

Have layers of control. If a threat bypasses one, then you still have another. Like my favorite example: when the AV's blacklist fails you still have CyberLock's default deny. And if you are tired or in a rush and Ok'ed CyberLock, you still have Wazuh's detection.

Copy and paste this short intro to AI and ask it to elaborate.

 

[Halp2001]

Hi @kev7

Before choosing security tools or specific configurations, I think it helps to first understand what kind of user you are and how you normally use your PC.

For example, someone who mainly browses the web, watches streaming content, and checks email will have different needs from someone who frequently downloads software, performs online banking, or works with sensitive information.

Once you have a better idea of your own usage, it becomes easier to find a good balance between protection and convenience. A setup that is too restrictive can become frustrating to use, while one that is too permissive may leave unnecessary risks.

The best approach is usually to adjust security measures to your real needs, keep good browsing habits, and always have a reliable backup strategy.

 

[Victor M]

how you normally use your PC

I completely skipped an important step when answering. (self reminder to stick to the darn security framework). Identifying existing usage is an important step in tallying the risks that one faces. For example, I copy over various notes and documents via USB to my offline PC for prosperity. So the USB stick is an infection vector. My administrative procedural control is to a) use a different qube to receive files first, then move the document only across qubes to the destination. The receiving qube can become infected but I still succeed the goal on transferring. b) I format the usb stick regularly, as it is only for transport, and not for keeping anything.

Which reminds me of one other thing in the identification phase. Rank your data in terms of CIA importance. And put effort into protecting the important ones. If A (availability) is important, then be sure to maintain backups. If C (confidentiality) is important then you encrypt it. And if I (Integrity) is important then you can hash the file and do periodic automated examinations.

I am getting old and forgetful. Did the NIST RMF (risk management framework) steps and forgot about them.