SANS has been kind enough to post a paper that I wrote targeted at the end-user titles “Top Five Tips to Prevent Malware”. I believe it is important to break it down for the end-user into short tips that they can do, which are:
1) Don’t use Internet Explorer For General Web Browsing
2) Run as a non-privileged user
3) Run an Anti-Virus program
4) Use Anti-Spyware tools
5) Patch and upgrade your system often
This paper is a good read for those who do not have total control over the desktop machines in your environment and want something to send to their users, have users who use their home machine to VPN into the office, or to send to friends and family to help keep them from unknowingly participating in botnets.
You can find the paper in the SANS Reading Room in the Special Topics section:
http://www.sans.org/rr/special/index.php?id=preventmalware
As always, feel free to send me you comments/feedback (paul /at/ securityweekly.com)
.com
Top Five Tips To Prevent Malware
Paul Asadoorian is currently the Principal Security Evangelist for Eclypsium, focused on firmware and supply chain security awareness. Paul’s passion for firmware security extends back many years to the WRT54G hacking days and reverse engineering firmware on IoT devices for fun. Paul and his long-time podcast co-host Larry Pesce co-authored the book “WRTG54G Ultimate Hacking” in 2007, which fueled the firmware hacking fire even more. Paul has worked in technology and information security for over 20 years, holding various security and engineering roles in a lottery company, university, ISP, independent penetration tester, and security product companies such as Tenable. In 2005 Paul founded Security Weekly, a weekly podcast dedicated to hacking and information security. In 2020 Security Weekly was acquired by the Cyberrisk Alliance. Paul is still the host of one of the longest-running security podcasts, Paul’s Security Weekly, he enjoys coding in Python & telling everyone he uses Linux.
