Computer Security – Do You Even Care?

For the last year, or more, I have had members of my group query every client on the state of Internet security, and the protective measures they have instituted to ensure both their own safety, and the safety of their systems, while connected to the Web.

While not in the realm of a scientific survey, never-the-less, the results from this survey are far more than just anecdotal evidence.

So here’s the scoop – a significant majority (more than 70%), simply do not care about, or understand, the vulnerabilities and issues that surround computer system security. It is fair to say however, that those who have a high degree of proficiency on their computer also have an understanding of how to avoid or mitigate risks, and critically – how to address issues when they arise.

Common responses from those who do not care, or who do not understand, vulnerabilities and exposures while connected to the Internet include:

Security applications are too confusing and hinder my “fun” by slowing down system response time.

I didn’t know I shouldn’t click the ‘YOU ARE A WINNER!!!!’ banner.

My anti-malware application has let me down – how was I supposed to know I was downloading a bad program!

I’m not sure how my machine got infected – it just happened.

I like to download from Crack sites and Peer-2-Peer networks. So what?

I got a popup saying I was infected, so I clicked on it. What else was I supposed to do!

I didn’t know I was supposed to read the End User License Agreement – I don’t even know what that is.

I thought I had Windows update activated.

What do you mean I should update ALL my applications?

What’s a Firewall – never heard of it?

On the face of it, it might appear as if these types of responses are somehow not very typical. Unfortunately, these responses are not only typical, but characteristic of the majority of the home computer users’ my group comes into contact with every day.

In a previous article, a year or so ago, I wrote:

“Being involved in computer security, I am amazed at the lack of knowledge exhibited by typical computer users, and most importantly, the lack of knowledge concerning the need to secure their machines against the ever increasing risks, previously noted, on the Internet.

I’m not talking about unintelligent people here. I’m talking about people who are intelligent in every other aspect of life, but who view computers like cavemen who saw fire for the first time.”

If anything, the results of this survey have hardened my view. It’s as simple as this – Lack of computer education coupled with a lack of accountability = A very unhappy, and inevitably an expensive experience.

I have no doubt that the problem is multifaceted. Part of the problem is simply fear. People do not understand computers, so they are afraid of them in a sense. Secondly, people generally, are simply not interested in learning about computers sufficiently to make the fear go away. The question is, of course, should they need to know anything other than how to turn on a computer? Well maybe not.

Many computer experts agree that it is primarily flawed computer software and not just inadequate user knowledge, or lack of proper procedure that is the biggest contributor to the proliferation of unsecured computer systems and cyber-crime, on the Internet.

It seems to me then, what is needed as a good first step, are machines that are designed with simple, but internally sophisticated operating systems, secure and easy to use for the majority of users; where limited user interaction is required to maintain the security of the system. Happily, Windows 7 has made great strides in this direction.

We now live in the age of the “Interconnectedness of All Things” in which we are beginning to enjoy the development and availability of large numbers of Internet connected devices. There is no doubt that this will lend new strength to computer-aided crime and as we are now beginning to see, terrorists.

Unless we develop a rational approach to the underlying security issues surrounding the Internet, and insist software companies’ stop rushing out new products with little regard for security, hackers will continue to flourish and successful attacks on computers over the internet will continue to proliferate.

Equally as important is the need for a concerted level of effort from law enforcement, at every level, to actively pursue those who continue to cause havoc on the Internet. Otherwise we run the risk of an Internet meltdown. If you disagree and don’t think we face such a harsh reality; the worldwide financial meltdown and the aftermath we are now forced to deal with, might dissuade you.

The following is a quote worth thinking about as it applies to the shared responsibility we have to protect our computer while attached to the Internet.

Property has its duties as well as its rights.

– Thomas Drummond (1797-1840)

There are steps you can take to decrease the likelihood you will be the victim of a successful attack on your computer.

The following is a brief guide to the basic security issues you should be aware of on the Internet, followed by a guide to some of the steps you can take to secure your computer for Internet usage.

Security risks on the Internet you need to be aware of.

Trojan horse programs

Back door and remote administration programs

Denial of service

Being an intermediary for another attack

Unprotected Windows shares

Mobile code (Java, JavaScript, and ActiveX)

Cross-site scripting

Email spoofing

Email-borne viruses

Hidden file extensions

Chat clients

Packet sniffing

Security Checklist: Actions you can take to protect your computer system.

Don’t open unknown email attachments

Don’t run programs of unknown origin

Disable hidden filename extensions

Keep all applications (including your operating system) patched

Turn off your computer or disconnect from the network when not in use

Disable Java, JavaScript, and ActiveX if possible

Disable scripting features in email programs

Make regular backups of critical data

Make a boot disk in case your computer is damaged or compromised

Turn off file and printer sharing on the computer

Install a personal firewall on the computer

Install anti-virus and anti-spyware software and ensure it is configured to automatically update when you are connected to the Internet

Ensure the anti-virus software scans all e-mail attachments