hello and welcome back to this cyber security awareness course
in previous videos we've talked about the definition of cyber security and we talked
about the basic elements regarding that including confidentiality integrity and availability and
we've also talked about some cyber security facts including malwares passwords and others
so in today's video we're going to start with security measurements or safety measurements
beginning with device safety now before we start talking about how you can keep your device secure
you have to keep one thing in mind every device with any operating system
is vulnerable some people might tell me well i have a mobile device how could it be vulnerable
well there are viruses and malwares for mobile devices whether they were an android or ios
devices and for windows for short there are malwares for windows and for mac as well so
how can i keep my device secure well the use of anti-virus is a must whether it was a mobile
device whether it was a computer device running a mac or windows you have to have an anti-virus
do not download cracked or unknown applications now some people tend to
download cracked applications because they cannot afford the high price of the original application
but let me tell you something in the previous video we've talked about malwares we've talked
about how they can be injected in any sort of files so when you download cracked applications
i can guarantee that for sure there is a malware injected in those applications
be careful of using untrusted usbs these days hackers tend to do something called a bad
usb attack now what that does is they have a code injected on that usb that whenever they
put this usb inside of a computer the code would auto execute itself now we said that the malware
is a computer program and computer programs are written in some sort of a programming language
so what they do is they turn this usb into a controller device instead of a storage device
and the code would auto execute itself and therefore you would get hacked next we have beware
of outdated applications now what companies do is that they issue an update for their softwares and
applications every now and then and these updates mainly contain bug fixing and security fixing now
i know that sometimes they issue an update that contains new features but i'm talking about these
updates that companies issue every month or every two months if you read the description it
would say that oh this update contains bug fixes and security fixes so we should always do these
updates in order for us to be secure and we should also be aware of downloading outdated versions
of programs and applications because sometimes or most of the times these old versions
could trigger a vulnerability on your device or sometimes it could have a vulnerability itself so
we shouldn't download outdated applications under any circumstance now next we have make sure your
firewall is on now we can imagine a firewall as a computer program that works as a barrier between
your computer and the rest of the network so for example if you are connected to a certain network
and someone else on that network is trying to send you data or if you are trying to send data to
someone else on that network then that data has to go through the firewall first now this is really
cool because if someone is trying to send you data and that data has to go through the firewall
then the firewall would ensure that this data is not malicious meaning that this data won't
harm your computer now got an example of antiviruses over here for pc and for mobile
the first one is sofas and the second one is bitdefender now keep in mind that there are
always other antiviruses out there but these are just examples that i've chosen to demonstrate in
this video now later on i'm going to show you how they both function now somebody might ask me well
what if i don't have an anti-virus what can i do in this case well we've got a solution for you
you can use a website called a virustotal now of course there are other websites like virustotal
but i've chosen this one what you do is you upload the file in which you believe is suspicious
and virustotal would run multiple scans in order to see if this file has a virus or not now without
further ado let's go ahead and demonstrate all these things all right so we're on this windows
environment right now and as you can see over here i've got two tabs open i've got the bitdefender
tab and i've got the sofas tab now one thing to keep in mind is that both of these softwares are
the free editions of bitdefender and sopas so of course the premium edition is going to have
much more capabilities from what we're going to be reviewing in this video but the idea is
to understand how anti-viruses in general work so the download process is really easy you just hit
the download button over here and it's going to start downloading and same thing goes for sofas
but one thing i want to say is that this is the virus removal tool from sofas now the antivirus
that sofas provides is called intercept x but this tool is really good when it comes to scanning your
computer and removing viruses and it's going to have the same database as intercept x so before we
start reviewing these two softwares let's go ahead and start with a virustotal all right so we're
on this linux environment right now and as you can see over here i've got virustotal opened up
now let's go ahead and observe this screen for a little bit we've got three tabs we've
got the file tab we've got the url tab and the search tab now in the file tab is where you
actually upload a file to virustotal and it would start a scan against that file in the url tab is
where you just put in a url and it would tell you if it contains a malicious activity or not
and in the search tab over here is where you put anything else that you have in mind for example
an ip address a url a domain a file hash anything else that you have in mind and you want to check
if it has a malicious activity or not so let's go ahead and try the url tab over here let's go
ahead and try facebook for example so let's just type in www.facebook.com and over here it says
that no engines were able to detect that this url contains malicious activity and this is because
facebook is a safe website now let's go ahead and observe this screen over here we've got a bunch of
antiviruses and all of them say that facebook is clean and without malicious activity so we've got
these tabs over here the detection tab is where you actually view the results of antiviruses
and in the details tab over here we can see all the details about this particular url for example
the http response the serving ip address and so on now in the relations tab over here is where
we actually view all the relations regarding this uh website and in the community tab over here is
where we actually see what people say about this website so for example over here take a look at
this this comment over here says that facebook is clean and without any malicious activity all right
so let's go ahead and go back for a little bit and go to the file tab so in the file tab over here
we're just going to upload a file now i've got this virus.exe file this is actually a virus that
i created before i recorded this video in order to see what virustotal has to say about this file
so let's go ahead and upload it and as you can see over here it says that 23 engines were able
to detect that this is actually a virus so let's scroll down a little bit we can see the bunch of
antiviruses that say that this is a virus now the text in red over here is what the antivirus has
to say about this particular file so for example we've got this uh antivirus that says that this
file contains a trojan now we can see a list of antiviruses over here we've got bitdefender
the one that we mentioned we got kaspersky we got microsoft we got avg and if we scroll down we got
sofas and we've got some other antiviruses but one thing to notice is that some antiviruses were not
able to detect that this is actually a virus and this goes back to the strength of the antivirus
now every antivirus company has a database of known viruses so once you start an antivirus scan
it would check if that particular file is in its database of known viruses and if it is
then it would identify this file as a virus so this is what makes for example microsoft
better than this particular antivirus and it is because microsoft has lots and lots of known
viruses in its database now one thing i want to say is that virustotal and other virus scanning
websites are not an alternative for antiviruses and this is because antiviruses when they're
installed on your device they check the behavior of any software so even if they don't have that
virus in their database they would just check the behavior of that file in which it contains a virus
and it would tell you that oh this particular file is trying to spy on your data so it is a virus
and this is the cool thing about having an installed anti-virus on your device so remember
buyer scanning websites are not an alternative for antiviruses but they are good if you don't have an
anti-virus but in that case you will have to be careful when you download stuff on your device
now let's go ahead and scroll up a little bit to this tab where it says details now in details
over here we can see the basic properties of this file over here tells you all the hashes
of this particular file and a hash is basically a code we can imagine it as a code or something
concerned with any file in the world so any file has a hash and this hash identifies the file so
what virustotal does is that it matches this hash with known hashes of viruses out there so if the
hash is identified to be a virus then that file is actually a virus so this is how virustotal
works and this is why it is not better than an antivirus because it only checks for the hash
of the particular file that you just uploaded it doesn't check for the behavior of the file itself
now over here in the community tab we can just open it up we can actually see what
people have to say about this particular file we can actually see that we've got one review about
this particular file over here and this is it really about virustotal like this is everything
that i have to say about virustotal of course there are other scanning websites out there and
virustotal is only one of them and i've chosen virustotal to be a demonstration in this video
right now since we're done talking about virustotal let's go ahead and check out
bitdefender and sofas all right so let's go ahead and see bidd defender and sofas now as you can see
over here we've got the bitdefender interface and we've got a button that says system scan and this
is how an anti-virus works you just schedule a scan and it would scan your device and tell you
if it has any viruses or not now one thing i want to show you over here is that we can just scan a
single file for example this particular file over here we can just drag and drop it into bitdefender
and it would start a scan and over here as you can see as a notification it says on demand scan
scanned one items and detected zero threats and this is really great about bid defender now
over here we got this settings icon if you just click on it we've got a bunch of options we've
got events quarantine exclusions protection account info help and support so let's go
ahead and navigate to events over here you will find the list of all events in which you've done
in bitdefender so for example the file that we scanned it tells us over here that we've
done an on-demand scan and it scanned one items and detected zero threats all right so over here
we've got quarantine for example if we have an infected file it would appear right here
in which bitdefender puts this file in quarantine away from the system so that it wouldn't be able
to harm or infect other files in your system in exclusions over here if you're an ethical hacker
or if you're just a penetration tester and you're testing out a piece of malware or a piece of virus
then you can just put it in the exclusions tab over here so it's as if we're telling bitdefender
that oh this file will be excluded from the scan meaning that this file is safe it's just like
telling bitdefender that oh don't scan this particular file now if we click on protection over
here we can just see uh the list of options we can see that we've got the protection shield over here
and it is set to on meaning that bitdefender is currently active and over here we've got product
information and anti-malware engine properties we can just see the version of the engine the
bit defender engine over here all right so let's go ahead and take a look at sofas now this is the
virus removal tool given by sofas it says over here welcome and it says that this tool is up
to date and this is really great to have such a tool that is always up to date with its database
now the process is simple as well you just hit the start scanning button and it would start scanning
your device to see if it has any threats or not now this is it about bitdefender and sofas and
this is it about this video i hope that you liked it and i'll see you in the next video