Author |
Message |
Escalader
|
Posted: Sun Jun 10, 2012 10:51 am |
|
|
welcoming committee |
Joined: Sat Apr 21, 2012 3:35 pm Posts: 147
|
In my next machine, I'm going to take a different route on security
1) learn all the built in security, backup features of W7/W8 and deploy those. That means the 2 way FW the built in defrager, the policy tools.
2) maximize or harden the browser(s) I use to contain script, sites, refers etc.
3) Use free ASW and AV's to scan weekly
4) Maximize encryption
5) Put the os on SSD
6) Maximize the fw control in a new router
7) Separate ip black lists from AV or FW products
8) I will need a HIPS unless I can convince myself that sandboxie renders that not needed.
9) I will need a antikeylooger and use EMET
This means I no longer need to buy perfect disk defragger type tools, or any AV products.
This plan is flawed since I am human and we make mistakes. If you have the time or interest please critique this and be as brutal as you like.
|
|
|
|
|
JoanA
|
Posted: Sun Jun 10, 2012 11:50 am |
|
|
Moderator |
|
Joined: Thu Apr 05, 2012 3:25 pm Posts: 1916 Location: Pembrokeshire, South Wales, UK
|
Well the first flaw is that as this is a site for the novice it would help them if you'd not used abbreviations with everything, do all novices know what putting an "os on SSD" is, I think some of the others would confuse them as well.
|
|
|
|
|
jaylach
|
Posted: Sun Jun 10, 2012 11:53 am |
|
|
Resident Geekazoid Administrator |
|
Joined: Wed Mar 21, 2012 5:09 am Posts: 9484 Location: The state of confusion; I just use Wyoming for mail.
|
First I don't know what defrag and using a SSD (Solid State Drive) has to do with security but will touch on those anyway. You can get a better defrag than the one built into Windows for free. I use Auslogic's Defrag which has the advantage of optimizing the drive for performance along with doing a defrag. http://www.auslogics.com/en/software/disk-defrag/download/Putting the OS on a SSD will increase performance but will do nothing for security.. The router will be the inbound firewall. Windows firewalls are outbound only. Personally I think that your plans are way overkill but I guess overkill is better than underkill.
|
|
|
|
|
MacDuffie
|
Posted: Sun Jun 10, 2012 2:21 pm |
|
|
Fearless Leader |
|
Joined: Wed Mar 21, 2012 5:42 am Posts: 2819
|
As I said in another thread - this is fine if you are into the "care and feeding" of computers. But totally unnecessary today.
_________________ Patty MacDuffie Computer Haven Administrator
Live Long and Prosper Mr. Spock
|
|
|
|
|
Escalader
|
Posted: Sun Jun 10, 2012 4:25 pm |
|
|
welcoming committee |
Joined: Sat Apr 21, 2012 3:35 pm Posts: 147
|
Sorry about the abreviations. I'm imperfect Jay you are right, some of these steps are NOT security but performace oriented. Anyway I'm done on this thread for now. Thanks all!
|
|
|
|
|
Michael
|
Posted: Sun Jun 17, 2012 4:18 pm |
|
|
welcoming committee |
|
Joined: Tue Apr 17, 2012 3:42 pm Posts: 83
|
To be honest, (I know you said your are done with this thread but for future reference), it's very rare you would actually need to defrag with the new Operating Systems now adays anyway. And certainly you wouldn't do it on an SSD (solid state drive). That's a lot of steps to take but if that's the sort of setup you need then better than having none of them
_________________ Michael Senior Infrastructure Engineer (Wintel) - Infrastructure Management Degree: Computer Systems - BSc (Hons) Certs: CCNA, CCNA:Security, MCP, MCTS, MCSA, MCITP:SA, MCITP:EMA 2010, MCSE:Server 2008, VTSP5, ITIL V3 Foundation http://www.michaelriccioni.com
|
|
|
|
|
|