¿Cómo puede proteger su sistema operativo? (2024)

Es cierto que las actualizaciones tanto de sistema, como de software o la propia base de datos de la solución antivirus/EDR/XDR son unas de las medidas más recomendadas para intentar estar lo más a salvo posible dentro de la infraestructura IT, pero siempre se deben tener en cuenta los entornos de actualización y el procedimiento del mismo. Tener bien marcado que, antes de actualizar, es necesario un entorno pre-producción obligatorio y un periodo de prueba antes de realizar las actualizaciones en el entorno final.

Como manter o hardware do seu computador funcionando bemPara manter o hardware do seu computador funcionando bem, é importante realizar as seguintes tarefas regularmente:- Atualizar os driversOs drivers são softwares que permitem que o computador se comunique com o hardware. É importante manter os drivers atualizados para garantir que o hardware funcione corretamente.- Escanear o computador por malware O malware é software malicioso que pode danificar o seu computador. É importante escanear o computador regularmente para detectar e remover malware.- Manter o computador limpoA sujeira e a poeira podem acumular-se no computador e causar problemas de desempenho. É importante limpar o computador regularmente com um pano macio e seco.

Traducido

Hardware token authentication is another option. Yubikeys, for example, can be used to authenticate in a windows machine.Be wary of cloud integrations like iCloud that let you reset your computer’s password. Compromise of your iCloud account can compromise your machine as well.

Traducido

Make sure you use at least 12 characters.Use a combo of uppercase letters, lowercase letters, numbers, and even some special characters (!, @, $, %, ^, &, *, +, #) in ALL passwords. Avoid using easy to guess dates like anniversaries, pets names, zip codes, your favorite sports teams, birthdays,Information that could be public on social mediaPassphrases are good alternativesI would recommand 16 characters and use Mfa if available

Traducido

Don't use any "password managers". Although handy (esp. if you have a lot of passwords) Those tend to get compromised on a regular basis.

Traducido

Must enable local firewall as well as harden the systems by closing unnecessary ports and services.Also, one should apply ACLs (Access control lists) on OS level and file/folder levels.

Traducido

Enable firewall and antivirusA firewall is a software or hardware device that monitors and controls the incoming and outgoing network traffic on your computer. It can block or allow certain connections based on predefined rules and prevent unauthorized access to your system. An antivirus is a software that scans and removes malicious programs, such as viruses, worms, trojans, and spyware, that can harm your system or steal your data. You should enable both firewall and antivirus on your operating system and configure them according to your needs and preferences.

Traducido

Stockez vos données dans un datacenter qui correspond aux lois en vigueur selon le type de données (données de santé, bancaire...)

Traducido

Encryption by itself is not enough. Secrets can be easily stolen and data can be easily accessed, if your machine or OS is tampered with. And be wary of third party encryption software. Always stick to first party implementation. For protecting your data and the integrity of your machine, implement systems that verifies the integrity of your entire system before decrypting any data. In Linux based operating system there are systems like Secure Boot/Trusted Boot, dm-verity, dm-integrity that prevent tampering with your operating system and user space. In macOS, rely on System integrity protection and make these systems are never turned off.

Traducido

There's a saying in the field of data backup that warns, “If it's not in three places, it doesn't exist”. Backing up your data to three separate locations is an easy and very worthwhile thing to do.

Traducido

Remember to encrypt your backups. You can buy hard drives with pin lock/fingerprint lock for relatively cheap. This way you have defense in depth with multiple systems protecting your data.

Traducido

It is my experience that multiple backups should be performed and stored in different locations and in different formats. Obviously all encrypted.

Traducido

Consider what periphal dedicated program you really need. I.e. mouse or keyboard software supplied by it's manufactor. Many times those just bloats your system with unnecessary update polls etc.

Traducido

Optimize your settingsOptimizing your settings can help you secure your operating system by reducing the exposure and vulnerability of your system to potential threats. You can optimize your settings by disabling unnecessary services, features, and programs that run in the background or start automatically on your system. You can also adjust your privacy and security settings to limit the access and sharing of your data with other users or devices. You can find and modify your settings in the control panel or the system preferences of your operating system.

Traducido

Use two accounts on your computer. One is your daily user level account and other one is just for administrative purposes only. That way you will less likely let malicous program to do harm to your system with out your knowledge.

Traducido

In addition to the previously mentioned, below are some more considerations for safeguarding the operating system:# Implementing 2F (two-factor authentication) adds extraprotection by asking users to submit a second form of authentication. # Unnecessary services and ports should be disabled. # Install an all-encompassing security software suite that contains antivirus, anti-malware, and other security capabilities. # Use caution when downloading files or opening email attachments, especially if they come from unknown or untrusted sources.# Examine system logs for any suspicious activity or indications of a security breach.

Traducido