june 2014 lccu meeting symantec svp says antivirus is dead. is it? how do the best free antivirus...
TRANSCRIPT
June 2014 LCCU Meeting
• Symantec SVP says antivirus is dead. Is it?
• How do the best free antivirus programs rate and what other protection is available?
• We’ll answers members’ questions:– Which browser is most secure?
June 2014 LCCU MeetingIs antivirus dead?
• Brian Dye of Symantec estimates that antivirus software catches only 45% of cyberattacks.
• Kaspersky said that security is about a combination of various technologies - heuristics, sandboxing, cloud protection and many others alongside "good old time-tested signature-based virus detection".
• PC Mag’s Neil Rubenking says AVG and Avira blocked 97% of malware tested; Avast blocked 94%, using malicious URLs from MRG-Effitas.
June 2014 LCCU MeetingIs antivirus dead?
• Anti-malware layers of protection:– Antivirus software
• Signature-based detection
• Heuristic-based detection
• Whitelist of executables (in some)
• Link scanners for browser, Facebook
• Spam blocker
• Sandbox (in some)
– Firewall – Windows Firewall or other– Secure wireless network
June 2014 LCCU MeetingIs antivirus dead?
• Antimalware layers of protection:– Automatic software updater:
• Secunia’s Personal Software Inspector or filehippo.com’s Update Checker
– Password Manager and use of unique passwords• LastPass, KeePass or other
– Paypal and amazon.com payments for shopping – Browser security
June 2014 LCCU MeetingBest Free antivirus
• References– The Best Free Antivirus for 2014 and
How We Interpret Antivirus Lab Tests by PC Magazine
– Best Free Antivirus Software – by Gizmo’s Freeware at Techsupportalert.com
– Free Security Software Keeps You Safe Online and Security Software Ratings from Consumer Reports
– 4 Places to Find Up-to-date Antivirus Tests Results Online by howtogeek.com
June 2014 LCCU MeetingBest Free antivirus
• Best free antivirus – testing labs used– AV-test of Germany – 1, 2– AV-comparatives of Austria – 1, 2 – Dennis labs of London –2– West Coast Labs – 1– Virus Bulletin - 1– ISCA Labs - 1
• Note: 1 = used by PC Mag, 2= used by techsupportalert.com
June 2014 LCCU MeetingBest Free Antivirus
• AVG– PC Mag – 97% blocked, labs – 3 stars; Consumer
Report score – 51; techsupportalert – decent choice; Cnet – 4 ½ stars
• Avast!– PC Mag – 94% blocked, labs - 4; Consumer Reports
– 57; techsupportalert – 2nd choice; Cnet – 4 ½ stars
• Avira– PC Mag – 97% blocked, labs - 4; Consumer Report
score – 53; Cnet – 5 stars
June 2014 LCCU MeetingBest Free Antivirus
• Comodo– PC Mag – 95% blocked; labs - 4 stars;
techsupportalert – top choice for advanced users
• Panda Cloud– PC Mag – 92% blocked; labs - 3 ½ stars;
techsupportalert – excellent choice for average users
• Bitdefender– PC Mag – 92% blocked; labs - 4 stars;
techsupportalert – good but lacks real world testing
June 2014 LCCU MeetingBest Free Antivirus
PC MagMalware Blocking Tests:
June 2014 LCCU MeetingBest Free Antivirus
PC Mag Lab Tests:
June 2014 LCCU MeetingBest Free Antivirus
Consumer Reports:
June 2014 LCCU MeetingBrowser Security Features
• References– 7 Things You Can Do to Make Internet Eplorer More Se
cure by PC World
– 5 Steps To Ultimate Firefox Security by PC World– Google Chrome – Best Security Tips for Safer Browsin
g by PC World
– Which Browser is Best? – Chrome vs. Firefox vs. Internet Explorer by PC Magazine
– Experts warn against judging Firefox on its poor Pwn2Own performance by Computerworld
June 2014 LCCU MeetingBrowser Security Features
• Internet Explorer Security– SmartScreen – warns of suspicious, phishing &
malicious software sites and blocks downloads from malicious sites. On by default; to turn off/on: Safety, Turn on/off Smart Screen Filter;.
– ActiveX filtering – optional; Safety, ActiveX filtering.– Certificate Errors warn of untrustworthy sites. – Internet Explorer runs in a sandbox – uses “low
integrity mode” to run with as few user permissions as possible.
June 2014 LCCU MeetingBrowser Security Features
• Firefox security– Phishing & Malware Protection – warns of bad sites.
On by default; to turn off/on: Menu button, Options, Security, check “Block Reported Attack Sites” and “Block Reported Forgeries”.
– Warns when sites try to install add-ons; on by default.– Master Password to access saved passwords, off by
default; if on, saved passwords are encrypted.– Certificate Errors – message “This site is untrusted”. – Note – no sandboxing yet; IE and Chrome have it.
June 2014 LCCU MeetingBrowser Security Features
• Chrome security– Safe Browsing - Phishing & Malware Alerts – turned
on by default; to turn off: Menu button, Settings, Show advanced settings, under Privacy, uncheck “Enable Phishing and Malware Protection”.
– Certificate Errors – under Settings, HTTPS/SSL, check “Check for server certificate revocation”.
– Sandboxing – process running in each tab is isolated from others & from rest of PC; built-in & sandboxed Flash and PDF functionality.
June 2014 LCCU MeetingBrowser Security Features
• Internet Explorer privacy– Tracking Protection – keeps browsing info from 3rd
party content providers – • To add a list, click Tools, Manage Add-ons, click “Find more
toolbars and extensions”, select “Tracking Protection Lists”, click add.
• To turn on/off: click Safety, Turn on Tracking Protection; off by default.
– Synching across devices – none; Firefox & Chrome do it.
June 2014 LCCU MeetingBrowser Security Features
• Firefox privacy– Tracking Protection – Go To Menu Button, Add-ons,
Get Add-ons, Browse all add-ons, select Privacy & Security category, select “Do Not Track Me”.
– Recommended security add-ons from PC World: NoScript, AdBlock Plus, Web of Trust (WOT).
– Synching across devices – log in with Synch password; all synched data is encrypted.
June 2014 LCCU MeetingBrowser Security Features
• Chrome, privacy– Tracking Protection – to get Abine’s DoNotTrackMe
app from the Google Store: Menu button, Tools, Extensions, Get extensions, search “DoNotTrackMe”.
– Recommended security add-ons from PC World – AdBlock, Web of Trust (WOT), KB SSL Enforcer.
– Synching across devices – default sign in is Google account password, but can add a passphrase, and can turn on encryption for all synched data.
June 2014 LCCU MeetingBrowser Security Features
• Chrome, privacy– Privacy (or lack of)– Omnibox text is logged by Google
for 2% of users if Google is your default search provider.
June 2014 LCCU Meeting
• At future meetings, we’ll answer:– Demonstate the basics of using the Firefox browser.– What are the best media players?– How do you use Secunia PSI (Personal Software
Inspector) to keep your software updated and secure?