|
|
|
|
 |
Password misuse
Practically everything needs a password
these days. Passwords are the most
common form of security; however, they
can be easy to circumvent. Here are some
helpful hints:
 |
Don't use common or well known
information about yourself as a
password (e.g. birthday). |
 |
Don't store your password somewhere
easily accessible to others (e.g.
under your keyboard). In fact, try
not to write them down anywhere. |
 |
Use a combination of alpha-numeric
characters at least 6 digits long. |
 |
Don't use the same password for
everything. A known password could
be exploited with other
applications. |
 |
Change your password frequently. |
 |
Don't use normal dictionary words as
they are easy to break. |
|
 |
Lack of firewall protection
What is a firewall? It is a piece of
software or hardware that filters all
inbound and outbound traffic and can
restrict certain types of
communications. Firewalls are extremely
important because they limit your
exposure to unknown sources by blocking
ports. Computers have thousands of
communication ports that are used for
various (legitimate) purposes. Hackers
commonly attempt to gain access to your
system by looking for open ports. A
firewall allows traffic only through
ports that you authorize. Think of it
like doors in your business: you lock
the doors that you don't want people
going through; otherwise, you could be
taken advantage of.
|
 |
Unencrypted web transmissions
Do you submit personal information over
the internet like credit card and social
security numbers? If so, then you need
to ensure that your information remains
secure while in transit to the
destination. Data encryption "scrambles"
your communications so that it can't be
read by anyone attempting to intercept
it. When submitting data online, be sure
that the site offers encryption. A
secure site will commonly be prefixed
with https:// (as opposed to http://).
Additionally, if the site is encrypted,
a little lock will be displayed in your
browser window. You can view the
certificate properties of that site by
double-clicking the lock (this will show
you who granted the Secure Certificate).
If the site doesn't appear to be secure,
or if you don't trust the issuing
authority, then don't submit your
personal data.
|
 |
Not installing Windows updates
It's a known fact that most viruses or
exploits are targeted at computers
running Microsoft Windows operating
systems. In fact, viruses often exploit
a weakness within Windows that may have
been previously unknown. Although
attacks like these aren't always
preventable, Microsoft goes to great
lengths to secure any weaknesses found
in their operating systems. After the
flaw has been fixed, they will issue a
hotfix or service pack
that counteracts any previous threats.
Keeping current with operating system
updates helps reduce your security
exposure. You can visit Microsoft's
website to check for updates or you can
enable the Automatic Update feature on
your computer (Windows XP only).
|
 |
Failure to take necessary precautions
against spyware and viruses
Everyone knows that viruses and spyware
can cause damage, yet a large percentage
of computers operate without protection
from both threats. By not installing
protective software, you put your
computer, and others, at risk (an
infected computer can contaminate other
computers).
Another common oversight with
anti-virus/spyware applications is not
keeping subscriptions
current. A subscription is what allows
your software to stay up-to-date with
the newest definitions of known threats,
which limits your risk of being
infected. A computer running definitions
that are a year old isn't protected
against threats that were
developed/identified within that past
year. Contact your software
manufacturers for the latest updates and
definitions.
|
|
|