WEBVTT 00:00.720 --> 00:08.000 We now understand the difference between privacy anonymity and pseudo anonymity which then brings onto 00:08.390 --> 00:11.950 security here we can see our assets. 00:12.060 --> 00:18.180 These are the things that we care about the things that we want to be private like our files our accounts 00:18.420 --> 00:26.190 our financials our e-mail and things that may relate to anonymity and our identity and not wanting association 00:26.190 --> 00:27.040 with our identity. 00:27.040 --> 00:31.460 Maybe our browser history what we download what we post and so on. 00:31.500 --> 00:38.890 The assets are individual to you your personal needs and to protect these assets. 00:38.910 --> 00:50.520 We apply security through various security controls security controls our VPN is encryption OPSEC patching 00:50.550 --> 00:57.240 hasty ETP filters open g.p locked screens and the other is that you can see here. 00:57.240 --> 01:08.090 So this means that security is the degree to which our assets are resistant to threats from our adversaries 01:08.220 --> 01:17.190 and we select security controls based on the type of threats and adversaries that we face threats all 01:17.190 --> 01:24.660 the bad things that can happen like a malware attack like mass surveillance like ex-boy kids like the 01:24.660 --> 01:30.250 weakening of encryption and a virus infection and the others that you can see here. 01:30.390 --> 01:38.650 And these threats they are enabled by our adversaries which might be hackers cyber criminals nations 01:38.720 --> 01:45.970 stays oppressive regimes and maybe something like your ex-partner if you're lucky and you can also see 01:45.970 --> 01:55.320 here these red triangles these represent vulnerabilities boobs and weaknesses in your security controls 01:55.440 --> 02:03.150 a threat will try to exploit vulnerabilities in your security to impact your assets. 02:03.420 --> 02:12.030 For example malware infecting your computer through the vulnerability of being on patched risk equals 02:12.320 --> 02:15.430 vulnerabilities times threats times. 02:15.430 --> 02:19.600 Consequences would be a way of representing it in a formula. 02:19.620 --> 02:25.770 The likelihood of threats exploiting vulnerabilities in your security controls and the consequences 02:25.770 --> 02:35.150 of that is known as risk risk to your assets the risk to you the risk to your privacy and anonymity 02:35.460 --> 02:39.000 and the threats and adversaries that you face. 02:39.000 --> 02:46.050 These are cold your threat landscape or your threat model your threat landscape will be individual to 02:46.050 --> 02:46.600 you. 02:46.650 --> 02:47.580 In the section on. 02:47.580 --> 02:48.810 Know your enemy. 02:48.810 --> 02:54.540 We will better understand the threats and adversaries that are out there so you can assess what your 02:54.540 --> 02:56.650 individual threat landscape is. 02:56.650 --> 03:04.200 Although we will share a lot of common threats and adversaries such as hackers cyber criminals and so 03:04.200 --> 03:08.400 on though we may not all have an unfortunate ex-partner. 03:08.400 --> 03:14.220 So as you can clearly see security does absolutely not exist in isolation. 03:14.220 --> 03:17.260 There is not a one size fits all solution. 03:17.290 --> 03:25.740 Your security controls should be selected based on their ability to mitigate your perceived threats 03:25.830 --> 03:30.480 and adversaries and the consequences of that realization. 03:30.480 --> 03:37.440 For example you might select toil as a security control to help mitigate against mass surveillance the 03:37.430 --> 03:43.620 threat of mass surveillance from an oppressive regime and you might choose top because the consequences 03:43.620 --> 03:50.070 are high in terms of your identity and once your identity is known the consequences will be realized. 03:50.070 --> 03:57.990 So you must implement security controls to protect your assets to ensure privacy and anonymity and pseudo 03:57.990 --> 04:00.110 anonymity if you require it. 04:00.120 --> 04:02.300 Security is a technology. 04:02.310 --> 04:10.170 Security is also an action and it's also a process is very important to understand are security controls 04:10.600 --> 04:12.420 not just technology. 04:12.420 --> 04:20.100 You must understand that security controls are also processes and actions your actions are in fact one 04:20.100 --> 04:25.740 of the most important security controls to protect your assets and mitigate threats and adversaries. 04:25.830 --> 04:34.230 The outcome of suitable security processes actions and technology is the protection of your assets privacy 04:34.290 --> 04:35.870 and anonymity.