Security Meetup Олексій Лунков Project Manager у компанії Atwix. Основна спеціалізація – Magento (e-commerce). Cпівавтор та викладач курсу IT Project Management. Тези доповіді: 1. Тренди в безпеці даних у 2018. Як ми повинні адаптуватись? 2. Специфіка роботи в компанії. Як працювати з даними, які належать компанії? 3. Почни з заліза. Веб-камера, жорсткий диск, екран — як їх захистити? 4. Кращі практики роботи з паролями. Додатки, поради, ризики. 5. Що таке “двухфакторка”? Як її правильно налаштувати? Чого варто уникати? 6. Social engineering, безпека данних на мобільних пристроях. 7. Професійні інструменти.

1. www.atwix.com

2. 02www.atwix.com
‣ Project Manager at Atwix
‣ Lecturer at IT Academy by
stfalcon.com
‣ Former Account Manager
at RexSoft
‣ Commerce Evangelist
ALEX LUNKOV

3. 03www.atwix.com
SECURITY TRENDS
WHAT SHOULD WE DO TO SECURE OUR
ASSES IN THE MODERN WORLD?

4. 04www.atwix.com
TECHNICAL PART

5. 05www.atwix.com
START WITH PASSWORDS

6. 06www.atwix.com
WHAT
TREAT YOUR PASSWORD LIKE YOUR
TOOTHBRUSH. DON'T LET ANYBODY
ELSE USE IT, AND GET A NEW ONE
EVERY SIX MONTHS.

7. 07www.atwix.com
WHAT DO WE DO ABOUT PASSWORDS?
TECHNICAL PART | PASSWORDS
▸ Use passwords
▸ Use secure passwords
▸ Use password managers
▸ Change passwords
▸ NEVER use the same password twice
▸ Use 2 (or more) FA

8. 08www.atwix.com
PASSWORD MANAGERS
APPLICATIONS

9. 09www.atwix.com
PASSWORD MANAGERS APPLICATIONS
TECHNICAL PART | PASSWORDS
▸ LastPass
▸ Dashlane
▸ KeePass — free and Open Source
▸ 1Password
▸ Roboform 8 — store your passwords locally

10. 10www.atwix.com
HOW TO CHECK IF YOUR PASSWORD
IS STILL SECURE

11. 11www.atwix.com
HTTPS://HAVEIBEENPWNED.COM/
PASSWORDS

12. 12www.atwix.com
STAY
PROTECTED
ON DEVICE LEVEL

13. 13www.atwix.com
REMEMBER, BEST THING YOU CAN
DO TO IMPROVE YOUR SECURITY IN
60 SECONDS IS TO PUT TAPE OVER
YOUR LAPTOP CAMERA.

14. 14www.atwix.com

15. 15www.atwix.com
PROTECT YOUR HARDWARE
TECHNICAL PART | HARDWARE
▸ Tape your webcam
▸ Encrypt your hard drive
▸ Screen protection
▸ Virtual keyboard
▸ Do not connect unknown devices to your computer

16. 16www.atwix.com
DATA
EXCHANGE AND
BACKUPS

17. 17www.atwix.com
DATA EXCHANGE AND BACKUPS
TECHNICAL PART | DATA
▸ 3-2-1 rule of backups
▸ No access by a link
▸ No screenshot sharing web applications
▸ Do not upload sensitive information to unknown web applications

18. 18www.atwix.com
SOFTWARE
& UPDATES

19. 19www.atwix.com
SOFTWARE
TECHNICAL PART | SOFTWARE
▸ Latest -1 is a good approach
▸ Do not use hacked software
▸ If you use free software, try to stick with Open Source

20. 20www.atwix.com
SOCIAL PART

21. 21www.atwix.com
WHAT
WHAT IS SOCIAL
ENGINEERING ABOUT?

22. 22www.atwix.com
WORKING
IN PUBLIC PLACES

23. 23www.atwix.com
WORKING IN PUBLIC
SOCIAL PART | WORKING IN PUBLIC PLACES
▸ Use your Personal Hotspot
▸ Lock your computer when you are not nearby
▸ Use virtual keyboard
▸ Use screen protection

24. 24www.atwix.com
PHISHING
AND HOW TO PROTECT
YOURSELF?

25. 25www.atwix.com
PWNED?

26. 26www.atwix.com
HTTPS://
HAVEIBEENPWNED.COM

27. 27www.atwix.com
WHAT INFORMATION
THEY CAN GET ON YOU?

28. 28www.atwix.com
JUST A SOCIAL APP?

29. 29www.atwix.com
JUST A FITNESS APP?

30. 30www.atwix.com
THANK YOU!
AND LET’S DO SOME Q&A