SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Cyberhygiene: 15 healthy habits for living with information

Cyberhygiene: 15 healthy habits for living with information
09.01.2023


  |  Listen on Google Podcasts  |   Listen on Mave  |   Listen on Yandex Music  |  


Ruslan Rakhmetov, Security Vision


This article will be useful for those who are interested in how to behave online in order not to ‘litter’; how to improve their security and what services and programmes exist for this purpose. Cyber hygiene is somewhat similar to periodic cleaning of the house, checking electrical appliances before going on holiday, renewing car insurance together with passing a technical inspection. It is desirable to do it regularly and do not be afraid of complexity. If you turn some actions into habits (like washing your hands before eating and brushing your teeth every day), you won't waste energy and nerves on doing them (you probably don't get too tired after performing daily procedures).


We'll divide the article itself into parts, but that's not due to prioritisation. Some habits you may already have. Some have been replaced for you by specialised remedies. So we suggest starting small and implementing individual cyber hygiene rituals at a pace that suits you. Just remember that your peace of mind and sometimes your safety depends on a few dozen simple actions. And we'll help you by rounding up 15 useful habits and talking about tech tools that will help you.


We go online from a computer or smartphone not only to work, but also to solve everyday tasks: find and listen to a new music album, watch a film, buy a new book, clothes or simply order groceries for the week ahead. All this becomes available when using web applications or software. So let's start by looking at network behaviour and security of the applications themselves, and then move on to the data itself.


Transmitting data over the network


Paying attention to the address bar in the browser is useful because attackers can make a copy of a useful site and place it on the network by substituting a few characters. So, for example, securityvision.ru and secnrityvlslon.ru are two different addresses, one of which may be useful to you, and the second - vice versa. In addition to the name of the site should also pay attention to the protocol on which it works (modern sites rarely use http, replacing it with faster more secure https). Encryption is also provided by the router itself, you can check its capabilities by searching for the phrases WPA2 or WPA3.


If you understand that the source of Wi-Fi signal passes through everything you download or send over the Internet, you can be more vigilant about open and free sources of the Internet, because ‘give away’ it can and malicious person. And to feel safer at home, it is worth changing the password from the router administrator page. This ritual can be compared to changing the locks or the whole door when you move into a flat that has been used by strangers before you. Standard passwords can be found in the documentation, which means that you can get full access to your devices by simply brute force (they are usually the simplest or even nonexistent). By the same token, you can change the name of the connection itself so that you can't immediately recognise the operator or device model.


Useful habits:

- Read the website address

- Ensure data encryption

- Be sceptical of Wi-Fi signals

- Customise your personal router and the network itself

- Update router firmware from the manufacturer's website


Application security


By downloading applications to your mobile phone through official shops, you simplify the procedure of their regular updating. Every day we receive information about discovered vulnerabilities in different applications and operating systems. If you use your browser often, update it. Also pay attention to the status of application updates to receive protection from developers for vulnerabilities discovered earlier. It's important to strike a balance here, as updates can sometimes ‘break’ something, but as a rule they are temporary and fixable, unlike losing money from your card or social network page.


The more applications, the more opportunities for attackers, so along with dusting the house, you can also simply throw out unnecessary applications. Such a ritual will not only help to increase security, but also save space for something really useful. Using a computer at home, it is also convenient to create a separate account without elevated privileges for those relatives and friends who use the device not as carefully as you do. The best thing to do, of course, is to talk about useful habits, but even when using the device yourself, you can limit the capabilities and accesses of the apps themselves (which is more convenient to do on mobile devices).


Useful habits:

- Use licensed software

- Download from trusted sources

- Update to new versions

- Uninstall old and unused software

- Limit the capabilities of programmes and users


Data security


In the last part of the article we had time to touch on the importance of updates, but we talked more about development security, which doesn't depend on us as much as updating our own data. Personal accounts with a separate login and password are often used to access services and services, which if hacked can pretend to be you and harm you. The password from a social network where personal correspondence is located, and the password from an online shop to which a bank card is linked (as well as other passwords) - these are things that depend directly on us. If you get in the habit of updating your passwords periodically, you can protect yourself from the effects of data breaches. It is also useful to create different passwords for different applications and tasks, so that once you have one password, it is impossible to log in to any service under your name.


Many services will solve this task for you: the operating system at work will ask you to change your password every few months, social networks and banks will most likely use a second factor of protection (sms, call, special code, etc.). But you shouldn't rely on everyone: if you can protect your data yourself, update your password and use multi-factor authentication (which, by the way, we briefly described in one of our reviews).


We all also store data on flash drives, computers or in the cloud, where a few habits will also help you. To share a file in the cloud, you don't have to share your username and password, you can do a read link. If the service doesn't allow you to control access, the file itself can be password protected with a regular archiver. If you throw away a flash drive or hard drive - make sure that the data on them is securely wiped (sometimes even from a formatted flash drive you can recover information).


Useful habits:

- Use different passwords

- Update them and make them harder

- Use two-factor authentication

- Delete important files securely

- Control access (read only, encryption, etc.)


We hope these 15 simple actions will make your online life easier. We've also compiled 10 simple and free services that can help:

1. router setup instructions

2. VPN for security on a public network

3. check the SSL certificate of a website and other details

4. search engine with high privacy

5. online file scanning for viruses

6. email address data leak checker

7. password generator

8. password vault for better password protection than browser

9. secure data deletion

10. recovery of deleted files (if deleted normally).

Recommended

Artificial intelligence in information security
Artificial intelligence in information security
XDR - eXtended Detection and Response
XDR - eXtended Detection and Response
Penetration testing
Penetration testing
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Confidential information
Confidential information
Mobile device management
Mobile device management
More alive than ever: business continuity
More alive than ever: business continuity
Information security trends. Part 1
Information security trends. Part 1
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #3 ‘Align your SOC structure to your company's needs’. Part 1
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #3 ‘Align your SOC structure to your company's needs’. Part 1
Gamification and human resource management
Gamification and human resource management
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3

Recommended

Artificial intelligence in information security
Artificial intelligence in information security
XDR - eXtended Detection and Response
XDR - eXtended Detection and Response
Penetration testing
Penetration testing
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
MITRE's publication ‘11 World-Class SOC Strategies. Strategy #6 ‘Use Cyber Intelligence to Combat Attackers’
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Confidential information
Confidential information
Mobile device management
Mobile device management
More alive than ever: business continuity
More alive than ever: business continuity
Information security trends. Part 1
Information security trends. Part 1
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #3 ‘Align your SOC structure to your company's needs’. Part 1
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #3 ‘Align your SOC structure to your company's needs’. Part 1
Gamification and human resource management
Gamification and human resource management
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3
Measuring the effectiveness of cybersecurity processes. IS metrics. Part 3

Other articles

Review of NIST publication SP 1800-5, ‘IT Asset Management’
Review of NIST publication SP 1800-5, ‘IT Asset Management’
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Cybersecurity, cyber resilience, cyber training - what is it?
Cybersecurity, cyber resilience, cyber training - what is it?
Overview of information security tools: users and data
Overview of information security tools: users and data
Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
New approaches and new opportunities for network infrastructure monitoring
New approaches and new opportunities for network infrastructure monitoring
Information leakage channels. Part 2
Information leakage channels. Part 2
Development without code
Development without code
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’

Other articles

Review of NIST publication SP 1800-5, ‘IT Asset Management’
Review of NIST publication SP 1800-5, ‘IT Asset Management’
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Threat analysis and cyber intelligence: what problems the updated Security Vision TIP solves
Cybersecurity, cyber resilience, cyber training - what is it?
Cybersecurity, cyber resilience, cyber training - what is it?
Overview of information security tools: users and data
Overview of information security tools: users and data
Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
Review of NIST Publication SP 800-184, Guide for Cybersecurity Event Recovery
New approaches and new opportunities for network infrastructure monitoring
New approaches and new opportunities for network infrastructure monitoring
Information leakage channels. Part 2
Information leakage channels. Part 2
Development without code
Development without code
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’
MITRE's publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #1 ‘Know what you are protecting and why’