Presentation by David Dowling @David_S_Dowling on practical tips and tactics to secure yourself online. The Presentation covered off items like: how to check if one of your email accounts has been compromised, how to move off a single password or that pesky Excel sheet full of passwords, why 2FA is A-ok, quick an easy ways to reduce spam, simple things to secure your computer and links to interesting security blogs.

1. © 2017 Imperva, Inc. All rights reserved.
Practical Tips And Tactics To
Stay Safe Online
David Dowling | Director Worldwide Inside Sales
@David_S_Dowling
Thursday, 15 June 2017

2. © 2017 Imperva, Inc. All rights reserved.
Intro
Confidential2
• Hiring – Anyone looking to hire? Anyone looking for roles?
• Brief Overview of Imperva and the DDoS Threat landscape
• How to check if your accounts have been compromised
• Moving away from the same password or an Excel sheet
• Why 2FA is A-OK
• Quick easy way to reduce spam
• How to secure your computer
• Tips and tricks from the audience

3. © 2017 Imperva, Inc. All rights reserved.
Staying Safe Online?
3
U Wot M8?

4. © 2017 Imperva, Inc. All rights reserved.
Don’t Worry! This Is Not A Sales Pitch – Everything mainly free and online

5. © 2017 Imperva, Inc. All rights reserved.
Background on Imperva – Data and App Security
Confidential5
• We focus on Database and application security, stopping DDoS attacks
(stopped 17,000 DDoS attacks in Q1
• DDoS trends – More short hit and run DDoS attacks
• Increase in application DDoS attacks – Seeing up to 176,000 Requests per
second (RPS)

6. © 2017 Imperva, Inc. All rights reserved.
Bay Area Meet Up Hiring Managers?
Confidential6
• Imperva has multiple technical roles open at Imperva – Join the team
• Who else is hiring?

7. © 2017 Imperva, Inc. All rights reserved.
Way To Check URLs or files for viruses
Confidential7
• VirusTotal – Way to check URLs or files
• URL Extenders - http://urlex.org/
• Google Docs – Safer way to open Word docs

8. © 2017 Imperva, Inc. All rights reserved.
Has my Ashley Madison / LinkedIn / Adobe account been ‘pwned’?
8
• https://haveibeenpwned.com – Free service run by fellow Strayan Troy Hunt
• 2015 had 34 ‘pwned’ websites, 2017 had 220 ‘pwned’ websites
• Now upto 3.8 Billion pwned accounts – Left is 2015, right is 2017

9. © 2017 Imperva, Inc. All rights reserved.
But I Didn’t Click Anywhere!
9
• A Malvertising attack on Yahoo users in Eastern Europe via the advertising
meant that users DIDN’T have to click on ads to get malware – Just had to
visit the site
• Ad Blockers are your friend – Electronic Frontier Foundation (EFF) has
Privacy Badger and Ad Block Plus is good for Google Chrome. NoScript is for
Firefox.

10. © 2017 Imperva, Inc. All rights reserved.
If You Visit “Dodgy” Sites
Confidential10
• Use FireFox and Install NoScript
• Duckduck Go – Do you really want “Hooli knowing everything?
• Don’t forget to set Private Browsing for other computer users

11. © 2017 Imperva, Inc. All rights reserved.
Example of Passwords from 42 Million Accounts At OkCupid
• If this is your password – Please change!
• Source: Krebs on Security

12. © 2017 Imperva, Inc. All rights reserved.
Password Management
12
• KeePass, Dashlane – A way to generate passwords
• www.PasswordGenerator.net
• Do your research – Tavis Ormandy from Google

13. © 2017 Imperva, Inc. All rights reserved.
Two Factor What?
Confidential13
• Two Factor Authentication or Multi-Factor Authentication sends one time
passwords via email or SMS
• Gmail, LinkedIn, HootSuite, LastPass, Yahoo, PayPal, Facebook
• Great blog post by Imperva’s Solutions Manager Jeff Serota

14. © 2017 Imperva, Inc. All rights reserved.
How Can I Check If My Bank / App Has 2FA?
Confidential14
• https://twofactorauth.org/ - Free site that lists all apps that have 2FA
• Gmail, LinkedIn, HootSuite, LastPass, Yahoo, PayPal, Facebook

15. © 2017 Imperva, Inc. All rights reserved.
Why Is Two Factor Authentication Important?
Confidential15
• Stops people that you don’t want to read your
email or do your banking for you.
• Example I had post Yahoo breach notification
• Look for solutions that let you accept or reject like
Duo Security, Authy as well as Google
Authenticator
• Physical tokens are making a come back –
Yubico’s Yubikey is good

16. © 2017 Imperva, Inc. All rights reserved.
Brian Krebs – Tools for a Safer PC
16
• Turn On automatic updates so your operating system can receive the latest
fixes
• Especially Adobe and Java

17. © 2017 Imperva, Inc. All rights reserved.
How Not Give Marketers Your Emails
Confidential17
• Use temporary services like Shark Lasers, Mailnator and more
• Reduce the number of accounts that tie back to your main email and reduce
your spam

18. © 2017 Imperva, Inc. All rights reserved.
Using “Free” Wi-Fi At a Cafe
Confidential18
• Source: Life Hacker
• Use a VPN and turn on Firewall
• Turn off Sharing
• Https
• Use Public Network

19. © 2017 Imperva, Inc. All rights reserved.
Useful Websites
1919
• Information is Beautiful – Data Breaches
• Have I Been Pwned.com
• Twitter
• Naked Security - Sophos
• Krebs On Security.com
• Incapsula.com/blog
• Dark Reading
• Swift on Security
• Troyhunt.com