1.1 Andmed ja teave ning ohud 1.1
1.2 CIA-kolmik ja andmekaitse 1.2
✅ Integrity — data is accurate and untampered
🔄 Availability — data accessible when needed
Protect personal info to avoid identity theft ja fraud. Kaitse töökoha teavet, et vältida theft, sabotage, accidental loss.
Data protection principles: Transparency, Legitimate purposes, Proportionality. Data subjects = people whose data is collected. Data controllers = organisations managing the data.
1.3 Sotsiaalne manipulatsioon ja identiteedivargus 1.3
| Attack | Meetod |
|---|---|
| 📞 Telefonipettus | Fake phone calls pretending to be tech support or a bank |
| 📧 Andmepüük | Fake emails from "trusted" organisations asking for info |
| 👀 Shoulder surfing | Üle õla paroolide või PIN-koodide vaatamine |
| 🗑️ Teabe otsimine prügist | Searching rubbish for personal documents |
| 💳 Kaardiandmete kopeerimine | Hidden device on ATMs that copies card data |
| 🎭 Pretexting | Inventing a fake scenario to trick you into sharing info |
1.4 Failiturve: krüpteerimine ja paroolid 1.4
| Feature | What It Does |
|---|---|
| 🔐 Krüpteerimine | Scrambles data — only someone with the key can read it. Lose the key = lose data forever! |
| ⚠️ Macro security | Dokumentide makrod võivad olla pahatahtlikud. Hoia makroturve KÕRGE! |
| 🔑 Failide paroolid | Protect documents, spreadsheets, and ZIP files with passwords |
2.1 Pahavara liigid 2.1
2.2 Kaitse 2.2
| Toiming | Why |
|---|---|
| 🛡️ Paigalda viirusetõrje (ClamAV on tasuta!) | Scans and blocks malware |
| 🔄 Uuenda regulaarselt KOGU tarkvara | Paikab turvaauke operatsioonisüsteemis, brauseris ja rakendustes |
| 🚫 Ära ava tundmatuid manuseid ega linke | Enamik pahavara saabub e-posti või allalaadimistega |
| 📅 Ajasta automaatsed kontrollid | Regular scanning catches threats early |
| ⚠️ Avoid obsolete software | Turvauuendusteta = suur haavatavus |
2.3 Karantiin ja eemaldamine 2.3
3.1 Võrgutüübid ja tulemüürid 3.1
| Type | What |
|---|---|
| LAN | Kohtvõrk — üks hoone |
| WLAN | Wireless LAN (WiFi) |
| WAN | Wide area — cities/countries (Internet) |
| VPN | Encrypted private tunnel over the internet |
Võrguriskid: pahavara levik, volitamata juurdepääs, privaatsuse kadu. Võrguadministraatorid manage authentication, install patches, monitor traffic, handle malware.
ufw (Uncomplicated Firewall). Piirang: see ei saa skannida krüpteeritud liiklust ega takistada sul andmepüügilinkidel klõpsamist!3.2 Traadita võrgu turvalisus 3.2
| Protocol | Turvalisus |
|---|---|
| WEP | ❌ Weak — don't use! |
| WPA | ⚠️ Outdated |
| WPA2/WPA3 | ✅ Strong — always use this! |
| MAC-filtreerimine | Lubab ainult kindlaid seadmeid |
| SSID Hiding | Hides network name |
Isiklik pääsupunkt: Turns your phone into a WiFi router using mobile data. Always set a strong password, disable when not in use.
📖 Allikad
4.1 Juurdepääsu haldamise meetodid 4.1
| Meetod | What |
|---|---|
| 👤 Username + Password | You identify (username) and prove (password) |
| 🔢 PIN | Short numeric code |
| 🔐 Krüpteerimine | Scrambles data |
| 📱 Mitmeteguriline autentimine (MFA) | 2+ meetodit: teadmine (parool) + ese (telefon) + omadus (sõrmejälg) |
| 🔑 Ühekordne parool (OTP) | Single-use code sent to phone/email |
4.1.5 Biometric Security 4.1.5
4.2 Password Best Practices 4.2
✅ Mix uppercase + lowercase + numbers + symbols
✅ Different password per service
✅ Change every 3–6 months
✅ Ära kunagi jaga
❌ Never: your name, birthday, "password", "123456"
Paroolihaldurid (KeePassXC — avatud lähtekoodiga!) salvestavad kõik paroolid ühe peaparooli alla. Lukusta kontod või logi neist välja, kui neid ei kasuta.
🎮 Test Password Strength
5.1 Browser Privacy 5.1
| Setting | Toiming |
|---|---|
| Autocomplete/Autosave | Disable on shared computers! |
| Browsing history | Clear regularly |
| Cache & Cookies | Clear periodically (Ctrl+Shift+Delete in Firefox) |
| Saved passwords | Use a password manager instead |
5.2 Secure Browsing 5.2
Verify websites by: Content quality (no errors), valid URL (correct domain, not g00gle.com), company info, contact details, security certificate (click padlock).
Ümbersuunamispettus (pharming) = redirects you to a fake site even when you type the correct URL (DNS hijacking).
Content-control: Internet filtering software blocks harmful sites. Parental controls limit children's access.
📖 Allikad
6.1 Email Security 6.1
Email encryption scrambles messages. Digital signature proves sender identity. Andmepüük uses fake logos, false links, urgency, requests for personal info.
🎮 Spot the Phish!
Is each email SAFE or PHISHING?
6.2 Social Network Safety 6.2
| Danger | What |
|---|---|
| 🔓 Privaatsuslekked | Sharing too much personal info publicly |
| 😢 Küberkiusamine | Veebiahistamine ja julmus |
| 🎭 Fake identities | Inimesed, kes teesklevad, et on keegi teine |
| 🔗 Pahatahtlikud lingid | Lingid pahavara või pettusteni |
Review privacy settings regularly. Report inappropriate behaviour to the platform and authorities.
6.3 VoIP & Messaging 6.3
Vulnerabilities: malware via file sharing, backdoor access, eavesdropping. Use encryption, avoid sharing sensitive info, restrict file sharing.
6.4 Mobile Security 6.4
| Risk | Protection |
|---|---|
| Unofficial app stores | Kasuta ainult ametlikke poode (avatud lähtekoodiga rakenduste jaoks F-Droid!) |
| Excessive app permissions | Review and deny unnecessary permissions |
| Apps extracting private data | Check permissions in Settings |
| Kadunud/varastatud seade | Enable remote wipe, disable, locate features |
7.1 Physical Security & Backups 7.1
Don't leave devices unattended. Log equipment. Use cable locks.
| Feature | Recommendation |
|---|---|
| Frequency | Daily (important), weekly (general) |
| Schedule | Automatic! |
| Asukoht | Different from original: external drive, cloud (Nextcloud!), network |
| Compression | .zip või .tar.gz ruumi säästmiseks |
7.2 Secure Deletion 7.2
Empty Trash → seems gone but data still on drive (recoverable with tools!)
Püsiv kustutamine → overwrites data, truly unrecoverable
| Meetod | How |
|---|---|
| 🔨 Füüsiline hävitamine | Drilling, crushing the drive |
| 📀 Purustamine | Industrial shredding machines |
| 🧲 Demagneetimine | Strong magnets erase magnetic data |
| 💻 Andmete hävitamise tarkvara | Kirjutab mitu korda üle (DBAN — avatud lähtekoodiga!) |