constant-content.com | May 28th, 2008
Computer security is extremely important in these days of trojan horses, spyware, and malware, and it is very important that every computer user maintain the highest security they can reasonable manage. The means of accomplishing that goal can be confusing and seem contradictory to the less-than-tech savvy computer user, but if you read, understand, and follow the advice in this article, you’re on your way to a more secure computer.
There are a few very important steps to maintaining the security of your PC running Microsoft Windows, and the first and most important is to keep your system updated for security patches from Microsoft. Millions of Windows users are compromised (hacked) every day because of security holes that were patched literally months before by Microsoft, but not by the particular user. You can skip updates that aren’t security related, if you’re concerned about the affect of the patch on your software or hardware, but don’t neglect the security patches. Internet Explorer is a very common vector for malware, so pay special attention to updates to that program.
You should also make sure that your Windows Firewall is turned on and configured. The firewall is designed to protect your system from network attacks by blocking certain types of network traffic. It’s important to understand that firewalls can cause problems with some software, so if your software stops working when you turn the firewall on, turn it back off and see if it fixes the problem. If it does, contact the vendor of the software to find out the information you need to configure your firewall so the software can work properly.
The next extremely important step is to make certain you have a “virus scanner” in place - although it’s important to note that virus scanners don’t just watch for viruses any more. Most providers have an adware blocker and a firewall included at the very least. But make sure you have something scanning for viruses on a regular basis, and make sure that the product you choose also scans email attachments and quarantines anything suspicious. The product you choose should also examine everything you download from the Internet for malware and viruses. Many new products even watch the sites you surf and warn you if they are somehow fraudulent or dangerous.
The fourth step for the home user is to make certain you have a hardware firewall. Such devices aren’t expensive anymore, and even if you only have one computer, the “internet router and firewall” (as they are often called) is an invaluable ally in the battle against the bad guys on the Internet. The router/firewall should be configured to provide NAT services, and you should turn off “upnp” (Universal Plug and Play) unless you need it for network gaming. The UPNP service allows software or hardware inside your network to configure your router in whatever fashion it chooses, so when you’re done playing, you should turn it off.
The hardware firewall protects you against many pro-active attacks, because nothing on the Internet can address your system directly once it is installed. Hackers on the Internet can only attack the ‘front door’ of your network - the firewall. Most of these attacks are automated scripts that are designed to take advantage of vulnerabilities in Windows, and since your firewall isn’t running Windows, they’re wasting your time. Most hardware firewalls have a logging function, so if you’re interested, you can get an idea of just what kind of attacks are being thrown at your network.
The final - and most critical - step is to manage your own behavior. Downloading software from untrusted sources on the Internet is a good way to get your system infected or hacked. Opening email attachments without scanning them carefully is another activity to avoid. A good practice is to scan all expected attachments, and delete all unexpected attachments. Whether you recognize the sender or not is not a good criteria for the safety of the file. Many trojan horses take over the victim’s email contacts and send a copy of themselves to every email address in the list. Always be suspicious of executable attachments from anyone.
The steps outlined here won’t turn your network into a virtual Fort Knox. To be completely secure, you’d need to disconnect from the Internet - but that would defeat the purpose most people have in mind when they obtain a computer. The trick is to balance access with risk. If you only play games on your computer, a virus infection is probably no more serious than simply re-installing - but if you do a lot of online banking and the like, a trojan might just set you up for something much more ominous. Only you can be certain what risk you’re willing to accept, but the steps outlined here will go a long way towards reducing that risk to a reasonable level.
