Crowdsourcing Network Security

Key takeaways

Firewalls are essential for defending home networks against outside threats, acting as barriers that manage incoming and outgoing traffic.
CrowdSec's unique model of crowd-sourced cybersecurity empowers users to share information on malicious IPs, enhancing security across the network.
Understanding the concept of internet background radiation is vital in recognizing the constant scanning that occurs for vulnerabilities in devices.
Proactive measures like network segmentation, using guest networks, and employing two-factor authentication significantly boost home network security.
Being vigilant against phishing scams and suspicious activities by verifying communication sources can help safeguard against cyber threats.

Summary

Understanding Firewalls and Network Security Basics

In this episode, Carrie Parker speaks with Philippe Mo, CEO of CrowdSec, about the fundamentals of network security, particularly the role of firewalls. They explore how firewalls act as barriers between protected internal networks and the outside internet, detailing their importance for safeguarding devices from malicious actors. Philippe explains networking concepts like Network Address Translation (NAT) and the risks associated with Universal Plug and Play (UPnP). The duo articulates how these components work together to create a protective environment for home networks.

The Concept of Internet Background Radiation

The conversation dives into the idea of 'internet background radiation,' a phenomenon where malicious or compromised devices continuously scan the internet for exposed systems. Philippe elaborates on how routers and firewalls defend against this constant threat, and why it is essential for users to remain vigilant regarding digital security. This section serves to educate listeners on the unseen cyber threats constantly lurking in the digital space.

The Unique Approach of CrowdSec

Philippe introduces CrowdSec’s innovative approach toward network security through crowd-sourcing. Using a participatory model, CrowdSec stands out by allowing users to share threat data, creating a community-driven firewall that adapts based on real-time threats. Philippe describes how the reputation of IP addresses plays a crucial role in blocking potential attacks, emphasizing the speed at which the system identifies and disseminates threat information to users.

Navigating Network Vulnerabilities and Threat Entities

The discussion transitions into identifying various threat actors in the cyber landscape. Philippe outlines categories of attackers, from organized state-sponsored entities to opportunistic cybercriminals, and emphasizes the need for individuals and businesses to understand these threats. The importance of proactive measures such as network segmentation and siloing devices within home networks is also highlighted as effective strategies against internal threats and malware.

Practical Security Tips for Users

To conclude, the podcast shares actionable advice for listeners on improving their network security. Philippe suggests creating guest networks for IoT devices, enabling two-factor authentication, using complex passphrases, or even utilizing reverse firewalls like Lulu to monitor suspicious app behavior. Additionally, he stresses the importance of verifying the legitimacy of emails and being wary of urgent requests that may indicate phishing attacks.

Show notes

We take that little box that connects our home to the internet for granted. But in reality, it's often the only thing hiding our computers and vulnerable IoT devices from automated, remote attacks. This "internet background radiation" is ever present - a massive network of malicious or compromised devices, constantly scanning the internet for exposed and ill-protected systems. Today, we'll discuss routers, firewalls and other common aspects of home network security with the CEO of CrowdSec. He'll also explain how we can enable these devices to share information in a sort of global neighborhood watch program, distributing information about bad actors to better protect us all.

Philippe Humeau graduated as an IT security engineer in 1999 in Cyber security. He then created his first company, dedicated to red team penetration testing and high-security hosting. After selling his first company, his eternal crushes for Cybersecurity led him to create CrowdSec in 2020. This open-source editor creates a participative IPS which generates a global, crowd-powered CTI.

Further Info

CrowdSec: https://crowdsec.net/ CrowdSec code repository: https://github.com/crowdsecurity/crowdsec Lulu reverse firewall: https://objective-see.org/products/lulu.html Donate directly with Monero! https://firewallsdontstopdragons.com/contact/ Amulet of Entropy!!:https://amuletofentropy.com/ Subscribe to the newsletter: https://firewallsdontstopdragons.com/newsletter/new-newsletter/Become a Patron! https://www.patreon.com/FirewallsDontStopDragons Would you like me to speak to your group about security and/privacy? http://bit.ly/Firewalls-SpeakerGenerate secure passphrases! https://d20key.com/#/

Table of Contents

Use these timestamps to jump to a particular section of the show.

0:02:46: Update on Firefox Total Cookie Protection0:03:50: DEF CON coming soon0:04:47: Interview start0:06:49: What does a firewall do?0:10:18: Should I enable the firewall on my computer, too?0:14:18: What is Universal Plug and Play (uPnP?)0:16:04: What is Network Address Translation (NAT)?0:20:16: Hacker vs Cybercriminal?0:21:17: Internet Background Radiation0:26:19: Creating network silos0:29:28: Attacks from within0:32:15: Botnets and DDoS attacks0:35:37: What are the biggest network threats today?0:40:16: Who are the main threat actors?0:45:09: How does Crowdsec work?0:49:36: How quickly do agents share info?0:51:37: How does Crowdsec make money?0:53:03: Can you use Crowdsec on home routers?0:55:28: Are things getting better or worse?0:57:43: Top security tips?1:01:45: How do you poke a hole in a firewall?1:04:01: Setting up guest network1:07:48: Reverse firewalls1:09:07: Final word