 Security Basics In A Home Computing Environment
Many home users make the mistake of thinking that they do not need to be concerned with securing or protecting their computer. Their mentality is that there is nothing of any tremendous secrecy or importance on their computer so who would want to get in?
The problem with this line of thinking is that often the hacker (or cracker or intruder) has no interest in you personally or the data on your computer. Instead, they are after the computer itself.
Hackers use programs called Trojan horses or backdoors to plant programs on your computer and leave secret entrances that allow them to get back in to your computer at will. They can then use your computer to launch an attack against another computer- possibly causing that computer to stop working- while hiding their identity. Anyone tracing the attack will believe it came from you.
As more home users subscribe to broadband Internet service such as cable modems or DSL (digital subscriber line) the job of hackers becomes easier. Like a corporate network, broadband users are generally connected to the Internet 24 hours a day, 7 days a week. However, unlike a corporate network, home broadband users are not typically updated with patches and anti-virus protection. This means the hacker has a virtually unlimited amount of time to work on breaking into a relatively insecure system.
Three Easy Steps
As a home computer user accessing the Internet, whether through a broadband connection or traditional dial-up, you should do the following three things at a minimum to protect your compute:
1. Install and maintain anti-virus software. There are plenty of great anti-virus software packages available. This software checks for known viruses by scanning your computer periodically. Most will also check for viruses on incoming email. It is important to update the software as well though.
New viruses are discovered almost daily. At least once a week you should check the web site of the vendor that makes your anti-virus software to see if there is an update available.
2. Do not open unknown or suspicious email. Many viruses and worms use what is called “social engineering”. That is, they attempt to trick you into becoming a participant in the process. The latest viruses can “spoof” the sending email address so that it looks like it is coming from someone other than the computer that infected it.
If an email is not from someone you know, it is usually best to simply delete it without looking at it. If the email appears to be from someone you know, you should read the message carefully before opening any attached files. Viruses and worms often have bad English and poor grammar. Consider whether the person you know would really have written that message or forwarded you the attached file. If in doubt, contact that person you know to confirm they truly sent it before opening the attachment.
3. Keep your computer patched against known vulnerabilities. Almost as often as new viruses are discovered, new vulnerabilities are discovered as well. Many times they are in the operating system (like Windows), but vulnerabilities are also found in tools like your web browser, email software and other 3rd party tools. Left unpatched, these vulnerabilities can be exploited by hackers to obtain access and control of your computer.
Staying up to date can be difficult. Some vendors, such as Microsoft, have automated utilities that check for updates and notify you. Other vendors may have an email mailing list you can join so they can notify you of any new updates. If your vendor doesn’t offer one of these solutions, you may just need to periodically visit their support web site to check for any new patches or updates. | 
