|
With the
increase in Internet usage and increased usage of e-business
practices, there has never been a more critical time for
companies and individuals to apply effective security
technology. Today, as public and private networks merge,
security breaches and security weaknesses become more
common.
The
Internet can be a dangerous place, so can the surf on the
Gold Coast.
But if you arm yourself with the right software and habits,
you to can sail its choppy waters, just as safely as
you would surf the beaches at the coast.
Security awareness should be
part of any computer usage. Ignoring this factor can be
costly whether it relates to time, money or both.
Do your systems meet your
needs now and in the future? It is impossible to make valid
decisions without the facts. In order to minimize your
downtime and identify future issues undertake a
comprehensive audit of your systems. It should cover every
single detail you need to know about your computers.
Securing Workstation and
stand-alone computers:
-
A
Software
Firewall
should be installed and functioning correctly.
If
you think that installing an anti virus is the most
important step you can take, guess again. These days you
need to make sure you’re protected by a firewall before
you do anything else.
If you’ve got Service Pack
2 installed you already have one in place. But
unfortunately the windows firewall only does so much.
While protecting from threats that originate on the
Internet, it doesn’t monitor programs already on your
PC. Trojans and other nasties can still dial out and
cause havoc.
-
Antivirus
With many viruses in cyberspace it would be risky not
using any type of antivirus software.
Viruses can destroy and reveal important data.
Always keep antivirus software up to date.
Although
traditional viruses known as Worms – are no longer as
fashionable as they once were, they are still dangerous.
Today’s viruses don’t just prey on your e-mail box
either, you’ll find them lurking inside messaging tools,
inside files you’ve downloaded from some web sites, or
lurking on the file sharing networks.
Virus Checking software should be enabled at all
times, and a full system scan should be done weekly.
-
Spyware / Malware
The
latest scourge to hit the Internet are Spyware & Malware
programs that check on what you’re doing and report it
to a third party. While some forms of Spyware are
honest, you might get a program for free that would
otherwise cost money, this could most likely contain
Spyware, which is malicious in its intent. Much Spyware
is now installed silently in the background whenever you
visit some sites, courtesy of what is known as a drive
by download. As many Spyware programs are delivered via
ActiveX controls, Service Pack 2 introduced more
stringent ActiveX controls to Internet explorer so that
they have been blocked by default. You now have complete
control over whether any ActiveX components are
installed on your PC.
Spyware / Malware search and removal tools should
be installed and run daily.
-
Phishing
Phishing attacks
use an e-mail forged to appear to originate from popular
companies and organizations ("phishmail" from
"impersonated organizations"). Phishmail tries to lure
target victims to impersonated websites where an attempt
is made to fool recipients into divulging personal
information.
Also
see Phishing
-
Windows Update
A large number of security fixes have been released for
Windows XP since its release; one of the most vital
updates you can install on your system is “Service Pack
2”.
The
best way to get subsequent critical updates is to use
Windows XP’s automatic update feature, which works
quietly in the background when they are released.
You can check your
automatic updates settings by clicking on the "Start"
button then clicking on "Control Panel" then
click on "Security Center". Click
the "Automatic Updates" icon under “Manage
Security Settings for” and pick one of the
appropriate options.
-
A Complete set
of software disc's and documentation of all applications
should be assembled, in case of disaster.
-
Hardware and
Software Asset Lists and specifications should be
compiled for each computer, and checked monthly to
ensure correctness.
- Use
Encryption Keys, time access controls, user
level security
- Apply
Intrusion detection, packet sniffing, monitoring
and alert services
A
System Maintenance Routine
should be compiled and
adhered to.
- Virus software
should be enabled, and a full scan conducted weekly.
- Spyware / Malware
scanners/removers should be run daily.
-
A full
"Configuration Check" of security software should be
conducted at least monthly.
[Some Viruses, Trojans & Malware change the settings
on system files to allow more vicious viruses to be
installed.]
-
Conduct a
Data Structure Check at least monthly, to ensure
that your data has not been corrupted.
-
Scan Disc
should be run at least weekly, to guard against disc
errors.
-
Disk
Defragmentation should be run at least weekly.
|