Your System's Sweetspots: CEO's Advice on Basic Cyber Security: CEO's Advice on Computer Science

Your System's Sweetspots

CEO's Advice on Basic Cyber Security

Warren H. Lau

INPress International

Copyright © March 2023 Utopia Online Limited

All rights reserved

No part of this book may be reproduced, or stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without express written permission of the publisher.

Cover design by: Utopia Creative Studio

Printed in the United States of America

To Everyone who has a computer and/or smartphone

Contents

Title Page

Copyright

Dedication

Introduction to Your System's Sweetspots

Introduction to CEO's Advice on Computer Science

Preface  - The Best Way to Protect Your System is to Think Like a Hacker

Part One: Cyber Security for Personal Computers

Make Use of Windows Defender Wisely

Firewall Settings for Windows

Do Not Keep Your Browsing Histories and Cookies

Internet Browser Security Settings

The Built-in Remote Access Function of Windows

Shared Experience Settings

Blue Tooth Settings

All Measures to Prevent Backdoors Connections of Windows

Hackers Attack You with Your IP Address!

Change Your Computer Name and IP Address Often To Dodge Attacks

How to Hide Your Computer From Internet

Stop USB Autorun/ Autoplay Function

Device Security: Core Isolation

How to Encrypt Files in Your Computer

Cyber Security for Mac Computers

How Can Mac Computer Users Protect Themselves from Cyber Attacks

How To Check If Your Computer Has Become a Botnet

How to Tell If Your Computer is Infected with Rootkit

Part Two: The Fastest Way a Hacker Hacks into Your System CMS

How do Hackers PWN Their Victims

How to Protect Website CMS Link

How to Protect Your Login Information

Part Three: Even If Your CMS Link is Protected, They Still Have Their Trump Cards

MySQL Injection

Embedding a Backdoor To Your System

Open Source Vulnerability

DOM Based Cross Site Scripting

Part Four: Passwords, Login Names ...... Piece of Cake!

Usual Tricks for Hackers to Crack Your Password

The Dark Web (Where Breached Data are sold)

Part Five: The Solutions

How to Prevent MySQL Injection and Backdoor Injection with Better Coding Practice

Better Protection of Login and Password Information

How to Prevent Cross Site Scripting

Encryption Basics

- End -

About The Author

Books In This Series

Books By This Author

Introduction to Your System's Sweetspots

Computer Systems Nowadays have become more sophisticated, more convenient to use, however, the convenience comes in a price. The system nowadays are more vulnerable to cyber attacks!

What to do if your computer/ smartphone/ website server is compromised?

What to do if your email account is PWNed?

Or, if your friends, relatives or employers face the above problem, what would you do to help them?

In this book, you will learn about the most recent hackers tricks, most prevalent form of cyberattacks that personal computers and website managers nowadays have to deal with.

Introduction to CEO's Advice on Computer Science

Let's face it. The traditional schooling system's focus on computer science is severely inadequate. In order to survive an ever developing computer driven world, in order to equip yourselves or your children with sufficient computer knowledge, so to have better employment or better living standards, the smart choice will be to seek new solutions from experts who have already spent decades in this field.

And that is why the cyber education series, CEO’s Advice on Computer Science, is published for you.

In this series, we would discuss the most sought after topics in Computer Science, including SEO, ASO, Cybersecurity, Computer Programming, Coding Skills, eCommerce, and other useful techniques that you would find very useful in your future career path, whether you wish to seek a job in large companies or tech firms, or even though you wish to run your own startup.

Preface  - The Best Way to Protect Your System is to Think Like a Hacker

One of the best things you can do in business is to pre-test the security of all your interacting objects - websites, mobile applications, networks, etc. Complying with the law is just as important as protecting your systems and networks from criminal hacker attacks.

Ethical hackers and penetration testers can secure potential entry points, make sure all systems and applications are password protected, and secure network infrastructure with a firewall. Experienced hackers can often break into a system with complex lines of code to steal data, cause damage, or provide the hacker with an alternative entry point. An attacker can use various tools and methods to gain access and gain access to the system. The next step in hacking is when an attacker uses every means to gain unauthorized access to targeted systems, applications, or networks.

During the scan, the hacker continuously uses the target system, launches DDoS attacks, uses the captured system as a springboard, or steals the entire database. Ethical hackers or penetration testers can use scanning to scan an organization's entire infrastructure for malicious activity and find the root cause to prevent systems from being exploited. The purpose of this step is to test whether the target's vulnerabilities can be exploited to gain a permanent presence on the production system long enough for an attacker to gain deep access.

Testers then try to exploit these vulnerabilities—usually through privilege escalation, data theft, traffic eavesdropping, and so on—to see what damage they can cause. Attack vectors allow hackers to exploit system vulnerabilities, including human error. Often, red hat hackers deploy cyberattacks on intruder systems.

White hat hackers, commonly known as ethical hackers, are often hired by companies and government agencies to test security vulnerabilities. They apply cybersecurity techniques, commonly known as penetration testing and deep vulnerability assessments, to make sure security systems work. Many professional hackers use their skills to identify security holes in corporate systems and then advise where companies need to beef up their defenses to keep attackers out.

Hackers can also use their technical skills to install malware, steal or destroy data, or disrupt an organization's services. Not only do hackers break into businesses and demand ransom, but they also try to break into ordinary user accounts and try to take advantage of things like online banking, online trading, etc. Hackers can infiltrate a company's website, steal data (cross- scripting) and/or use them to distribute malware and viruses to unsuspecting visitors.

If malware lands on any of your connected devices, it can spread to other devices connected to your home network. As a result, the number of cybersecurity attacks that use the network to access corporate devices is huge and scary.

Your devices, accounts, and your entire network are as secure as your router. You can check the security of your home network, but you cannot do the same for a public Wi-Fi network. Keep your network access and your personal data secure and don't leave windows or doors open for a hacker to access. You don't want to leave the door open for hackers to get your information.

When scammers, hackers, and other intruders try to steal your personal information online, it can be helpful to know how to lock down your device, network, and information. These tips should help you prevent hackers from violating your personal security on your computer and other devices. Protect your computer and other devices with antivirus and antimalware software.

Keep your security software, internet browser and operating system up to date. For information on how to update your security software, operating system, internet browsers, and apps, visit the developer's website. While no one is immune from a data breach, good cybersecurity habits can make you less vulnerable and help you survive a data breach with fewer disruptions.

To keep up with the bad guys, you need to first understand your vulnerabilities, understand the many ways your defenses can be compromised, and then implement the defenses you need to maintain a safe and resilient cybersecurity posture. The consequences of a lack of effective cybersecurity can be catastrophic.

Devices and users that connect to unsecured networks and applications are at risk and may even be compromised. Mobile devices can act as a secondary means of protecting your online accounts through 2FA, but these endpoints can also be a weak link, completely compromising your privacy and security. A vulnerability in mobile devices is a vulnerability that could allow an attacker to lower the security of systems. This can leave many devices vulnerable, allowing attackers in some cases to take over your IoT devices for further attacks, or even spy on your company that the cameras are connected to.

You are less likely to be hacked with an exploit, but many computer users have been affected by malware downloaded as part of a software package or injected into their computer via a phishing attack. In the examples of security breaches above, several methods were used to gain access to networks: Yahoo was phished, and Facebook was hacked with an exploit.

Attackers can also target their malware across multiple platforms and potentially find malware that attacks one operating system but is able to spread to others. In spear phishing attacks, attackers target potential victims with deep knowledge of them, a method that allows them to customize their attacks. The type of information these criminals are looking for can vary, but when individuals are targeted, criminals often try to trick you into giving them passwords or banking information, or install stealthy malware on your computer that allows They are able to access. your passwords and banking information and let them control your computer.

Part One: Cyber Security for Personal Computers

Make Use of Windows Defender Wisely

Windows 10 includes Windows Security, which provides the latest virus protection. Although Microsoft no longer offers security updates for Windows 7, Avast continues to protect its users with the Windows 7 version, making Avast Free Antivirus one of the best antivirus solutions for Windows 10 and Windows 7. In addition, we keep Avast Free Antivirus updated all the time. to make sure you stay protected no matter what threats arise. With the free Microsoft Defender Antivirus software running on Windows 10 Windows 10, you have the security of protecting against malware should you let your guard down.

Detecting threats with Microsoft Defender should be the starting point for better antivirus security on Windows, and most people will find it unnecessary to go any further when deciding on an antivirus solution. I spent weeks testing Microsoft Windows Defender and all the best antivirus software on the market, ranking them based on malware detection rate, system performance, scan speed, overall internet security protection, and customer support. We set out to create the standard Wirecutter guide for the best antivirus apps, so we spent months researching the software, reading reports from independent testing labs and agencies, and consulting with cybersecurity experts. If you're not sure which of the many antivirus utilities available is right for you, we can help.

If you're still not convinced that none of the above products provide Microsoft with the best free antivirus software, the solutions below are still strong players against all types of malware, not just viruses. These commercial products offer protection beyond Windows 10's built-in antivirus; the best free antivirus utilities offer more than Windows offers. Again, there are better free Microsoft antivirus software out there, and no free antivirus software offers the kind of protection you get with full premium antivirus software. In fact, you can get high-quality protection completely free these days, as almost every major vendor offers free antivirus software.

AVG AntiVirus FREE now also offers best-in-class ransomware protection, previously only available as a premium feature. Best of all, the malware protection in Kaspersky Security Cloud Free Antivirus is a snapshot from Kasperskys or Bitdefenders, whose free programs bother us less with paid updates and load less on the system. We still recommend Kaspersky Security Cloud Free, it has less impact on the system, better protection against malware, and more useful plugins, but there is absolutely nothing wrong with using Microsoft's built-in antivirus as your antivirus solution. Windows Defender itself won't have many extra features, but Windows 10 does have parental controls, a gaming mode, and protection for Windows 10 Edge and Internet Explorer browsers.

Norton 360 is the best Microsoft security package on the market. Norton 360 offers significant improvements to all of Microsoft's Windows Defender protections and offers many additional features that Microsoft doesn't include in its built-in antivirus software. Best of all, Norton 360 offers a range of Windows antivirus packages to suit every budget, all of which include free features like VPNs and password managers. This premium software offers everything you need, such as fraud protection, virus protection, built-in VPN, and more. Sophos Home Antivirus offers virus and malware protection as well as phishing protection and even content control, which is also ideal for parents.

This free antivirus program is built into Windows and enabled by default, so just turn it on and this antivirus solution will cover the basics of internet security. An excellent corporate antivirus package that offers various tools such as antivirus protection, firewall, email protection, spam protection and the ability to isolate applications for complete security. Avira Antivirus Free Avira is one of the best free antivirus solutions. In addition to protecting your Windows 10 PC, you can also add protection for your phone. With a single subscription to McAfee AntiVirus Plus, you can protect all your Windows, Android, Mac OS, and iOS devices.

Depending on the level you choose, Microsoft Defender Antivirus can protect both Windows 10 and Mac, as well as mobile devices with five secure devices and a built-in password manager. Upgrade to Trend Micro's full security and you can count on Mac and mobile protection, as well as Windows, covering a total of 10 devices. In any case, you have enough time to test Aviras Free Security Suite and decide if this antivirus is suitable for protecting your Windows device. Other Windows programs include Avira Free Security Suite, Avira Antivirus Pro, Bitdefender Antivirus Free Edition, and Bitdefender Internet Security.

This list does not include Windows Phone 7 and Windows Phone 8 because they do not support running security software. The best antivirus vendors usually offer more paid Windows products that have the same malware protection but with additional features as prices rise. You have the option to use Bitdefender as a standalone antivirus, or use many of Bitdefender's features in conjunction with Microsoft Defender. Many users are reluctant to switch to a third-party antivirus because they think it will be more difficult than Microsoft Windows Defender Auto-Protect, but Bitdefender is actually even more practical than Defender.

Microsoft Defender's number one with a powerful antivirus engine, Windows-specific security features, firewall, VPN and more. Bitdefender Total Security 2020 allows you to protect five devices (Windows, MacOS, iOS, and Android), set up parental controls on a child's computer, and run a VPN. Sometimes it's nice to know that antivirus vendors are doing the right thing by constantly updating their Internet security software packages to protect you from ever-increasing threats to your online life.

Firewall Settings for Windows

Iwill give some tips to help illustrate the process so you can understand how to set up a firewall in 5 steps. When using the guides, or even if you decide to set up your firewall, make sure you have a security expert review your configuration to make sure it's set up to keep your data as secure as possible. Setting up a firewall can be an intimidating project, but breaking down work into simpler tasks can make the job much more manageable.

If you are already using a firewall to prevent cyberattacks, perhaps more information on how it works will improve your ability to manage a firewall with more personalization at home and in the office. Using a firewall is also important to protect data from malicious attacks. Firewalls provide protection against external cyber attacks by protecting your computer or network from malicious or unnecessary network traffic.

Firewalls can be configured to block data from specific locations (such as computer network addresses), applications, or ports, allowing important and necessary data to pass through. Firewalls also prevent malicious software from accessing a computer or network over the Internet. Firewalls filter incoming and in some cases outgoing traffic by comparing packets against predefined rules and policies, preventing threats from entering the network.

Firewalls prevent unauthorized access to the corporate network and warns of any intrusion attempts. Hardware firewalls are especially useful for protecting multiple computers and controlling network activity trying to pass through them. Host firewalls are also useful for homes where multiple computers share the same network. A host firewall is also recommended for corporate computers that are connected to the network but are not protected by a network firewall.

If you have a larger business, you can purchase an optional corporate network firewall. You can also buy a hardware firewall from companies like Cisco, Sophos, or Fortinet, depending on your broadband router, which also has a built-in firewall to protect your network. Your router should also have a built-in firewall to prevent attacks on your network. There are many suitable firewall models you can use to protect your network.

Configuring Windows Firewall according to the following guidelines will help you optimize the protection of devices on your network. You can protect your computer by using firewall and