Internet Safety
Child proofing your home
Personal info
• No Jesus
• Know Jesus
• Entered IT security 5 years ago
• Certified Ethical Hacker
• Computer Hacking Forensic Investigator
• Security+
• Network Administrator for Cole Valley Christian Schools
• Help churches and families:
• Little time and resources to find and implement security
• Largely don’t even know how/where to start
Computer and Network Security Services, LLC
• My wife and I started the company to serve as a framework for
making security services more accessible to “regular” people
• We also provide technical support, training and consulting for
businesses
Objectives
• We want our kids to be safer online
• “safer” is subjective
• How do we achieve it?
• Conversations with the kids
• Network Monitoring
• Parental controls
• Right to privacy
• Privacy vs Secrecy
What are the access points to your network?
Internet
Service
Provider
Neighbor’s house
Cellular
House
What needs to be protected – Technology
and relational tools
• Network router
• Wireless access point
• Cellular
• Devices
•
•
•
•
Phones
Computers
Laptops
Tablets
Network based vs. Host based protection
• Host based
• Installed on each device
• Only affects the device it is installed on
• Network based
• Installed at the network level
• Covers all devices in the network
Devices – handheld mobile
• Built-in controls
• iOS (iPad, iPod, iPhone) can lock the settings so no changes can be made to
the device, including:
•
•
•
•
Turning Wi-Fi on/off
Switching to another Wi-Fi network
Installing apps
Removing apps
• Windows Phone has Kids Corner
• You give access to the apps they can use but they can’t leave Kids Corner without the
password
Devices – handheld mobile (cont’d)
• Android version 4.3 and later
• Create secure profiles
• http://www.pcadvisor.co.uk/how-to/google-android/3461359/parental-control-onandroid/
Devices – tablets, desktops and laptops
• Built-in
• Windows 7, 8, and 8.1 have a Family Safety feature
• It can interfere with larger network polices if the device is used in a school or business
setting
• Mac OSX
• http://support.apple.com/kb/PH18571
Devices – Installable applications
• Net Nanny
•
•
•
•
$59 per year
Can be installed on up to 3 devices ($12.99 with discount for multiple devices)
Mobile version available
Controls:
•
•
•
•
Individual applications
Logon hours
Can record chat sessions and social media posts
Monitor and control time spent playing games
Devices – Installable applications (cont’d)
• Mobicip
• Free and paid versions
• Paid covers up to 5 devices
• Very similar to Net Nanny but can be used on more devices
• iOS, Android, and Windows
• Not Mac Osx
• Both Net Nanny and Mobicip can be managed from a web login
Devices – Installable applications (cont’d)
• Forticlient
•
•
•
•
•
•
Free
Provides Anti-virus, Intrusion prevention, and Web content filtering
Works well on Windows and Mac
Reduced features for iOS
Not useful for Android
Each device must be managed individually
• There are apps in the various app stores for Android and iOS
Cellular
• Many of the options above will work on cellular enabled devices
• Verizon, T-Mobile, and Sprint have parental controls that are accessed
through your cellular account
Wireless access point and network router
• These are typically the same piece of physical hardware
• Some routers/wireless switches have built-in parental controls
• Netgear
• Consider using the built-in guest network for your kids' friends. You
can easily change the password when they leave so they have to ask
again next time.
• By doing it this way you don’t need to change the Wi-Fi passwords on your
own devices.
• These come with a rudimentary firewall but it is designed more for
keeping others out than controlling access from the inside
Wireless access point and network router
• OpenDNS
•
•
•
•
•
Free
Fairly easy to install and manage but it can be difficult to understand
Select categories of websites to allow/disallow or monitor
Works for all computers in the house
Can be configured to work on an individual computer but not phones if they
are off your wireless network
• It can be easy to circumvent
• Personal favorite
How DNS works
• DNS is the Internet phone book
• If you can control the phone book then you can control web access
• OpenDNS and NetGear use this method
Internet
Service
Provider
House
DNS
Neighbor’s house
Cellular
Wireless access point and network router
• Sophos UTM
•
•
•
•
•
•
Mother of all firewalls
Not for the faint of heart
Free but requires networking knowledge or a commitment to learn
Requires a separate computer to be set up (can be a much older PC)
You will probably need to buy an additional Wireless router/switch
Fine grained network control
• Can allow someone to view Facebook but not post status updates, for example
Relational methods and house rules
• Knowing the kids
• Expressing the dangers involved
• Continued awareness
• It isn’t hard to find news stories of recent tragedies
• Share these in normal conversation
• Sometimes kids listen more attentively when they aren’t “invited” to
the conversation but they are near enough to overhear
• Have a rule about not clearing browser history
Manual searches of the device
• Very different for each manufacturer
• I can usually find a way to retrieve the data you are interested in so please
contact me if you need to
• Easier on computers than mobile devices
• I have links and instructions on my website for software resources
that can view browser history where you will find a wealth of
information
Things to be aware of
• There are ways to get around most security
• There is stronger security to prevent circumvention
• This is the arms race I mentioned earlier
• The parents can begin to lose when it gets to this point
• Proxy avoidance software
• P2P file sharing
• Torrent sites
• Google image searches
• Administrator privileges on the device
Contact info
• todd.macqueen@compnetsec.com
• Phone: 994-9570
• www.compnetsec.com
• Resources page for instructions and download links
• Blog page
• You can always call or email me
• I am happy to help you set up the software you want to use
Questions and follow up?