Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Best Practices - Internet Safety For 2008


  • Please log in to reply
20 replies to this topic

#1 harrywaldron

harrywaldron

    Security Reporter


  • Members
  • 509 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:01:10 AM

Posted 01 January 2008 - 09:57 AM

Posted Image When I first entered the security profession in 1996, there were risks associated with not being informed or technically protected from the dangers circulating in email and on the Internet. The only significant change is that things have worsened and the dangers are far more deceptive even for experienced users.

Below is a list of technical safeguards and best practices for the coming year. This list isn't complete and some folks won't agree with all items on the list. Still, following most of these protective principles below can help keep you and your family safer the coming year.


The key is to educate yourself on the security risks circulating and ways to avoid these dangers through best practices or technical safeguards.

Best Practices - Internet Safety for 2008

RECOMMENDED SOFTWARE
* Anti-Virus (keep it active and updated)
* Firewall (bi-direction preferred)
* Anti-Spyware
* Spam Filter
* XP users move to IE 7 for better security
* Hosts file (advanced users)
* Anonymizer (advanced users)

GENERAL SAFETY TIPS
* Backup any files you don't want to loose to CD, DVD, or flash drives
* Apply Windows and Office Updates as soon as possible - Turn Automatic Updates on (use Microsoft update for both environments)
* Update all Software products periodically on your system
* Run virus scan scans periodically (weekly)
* Run anti-spyware scans periodically
* Clean up your recycle bin, temp areas, etc.
* Use UAC in Vista and prompt warnings in other Operating Systems
* Authenticate and register your version of Windows (including WGA checks)
* Read the EULAs in any software being installed
* Create a protected account (aka limited account in Vista or XP)
* Avoid entering sensitive information or performing e-commerce on a shared public PC in a cafe, hotel lobby, or library
* Avoid P2P File sharing sites for "free" music or videos
* Ensure you are using a trusted website and secure servers for e-commerce
* Use complex passwords of 8 characters or more (at least 1 letter and 1 number, plus 1 upper/lower case -- and special characters if desired)
* Change your passwords periodically
* Protect your privacy - Never share your SSN, bank account, credit card, or other sensitive personal information in emails or enter them on websites (unless you are doing so purposefully on a secure server)

RECOMMENDED EMAIL SAFETY TIPS
* Avoid email attachments where possible
* Avoid clicking on any URLs in email (even to opt out of spam)
* Use plain text mode in email if possible
* Avoid links and files shared in Instant Messaging software
* Never open email from someone you don't know (line up all spam in your in-box and delete it)
* Avoid taking actions or clickin on URLs in official looking email from banks, government, etc. (verify by phone or on the primary website)
* Avoid e-cards which are not from a specific person (and check with the sender if you are unsure)
* Never install updates or free security software from an email attachment or URL

RECOMMENDED BROWSER SAFETY TIPS
* Avoid clicking on banner ads where possible
* Avoid visiting untrusted and inappropriate websites
* Be careful of Internet search results as malware authors are seeding malicious websites with malware
* Complementary browsers (e.g., Firefox, Opera) have good security track records, phishing filters, and other safety measures (e.g., NoScript) that can be used in addition to IE 7 with no conflicts. You can use these as a tool to cross-check questionable sites.
* Completely clean your browser cache regularly of all temporary files, history, cookies, passwords, etc.
* Enhance your browser from automatic processing to prompt warnings where possible (advanced security settings in IE)


MALWARE CLEANING TIPS
* Your computer may be infected with malware when performance deteriorates, browser pop-ups appear, home pages change, firewall warnings are issued, etc.
* When cleaning malware infections get technical assistance from a technically savvy friend preferably who can visit at your home or experts at a security website
* Find out the name of the malware you are infected with (as you must clean uniquely based on how you are infected)
* VirusIntel.com offers a list of free online and command line scanners from many AV vendors
* Free Standalone cleaners may be available to remove some difficult malware agents
* Use SAFE MODE to remove difficult malware
* Change your passwords after an infection in case a backdoor agent transmitted it

SECURITY AWARENESS AND EDUCATION
* Gain better general knowledge on security through articles, blogs, and security websites
* Stay informed - Follow the latest security developments on what to avoid or how to protect yourself against dangers
* Look for updates in any software you are running and install them promptly, so that you are always on the latest version
* Avoid email hoaxes circulating where you are asked to "pass on a special warning"
* Remember that there are "no free gifts" or "special bargains" for you from strangers on the Internet
* Setup separate user accounts for your children and use Vista's Parental controls
* Educate your children, family members, and friends
* Use a "Lessons Learned" approach when you make mistakes to avoid them in the future

Below are an older set of best practices authored in my prior company almost 7 years ago. While the dangers are more hidden and technically innovative, security protection is all about staying informed and keeping key technical safeguards in place. Security is about risk management and an ounce of prevention is always worth a pound of cure. Most of these concepts below still apply even though technology has changed substantially since then:

Best Security Practices (written during 2001)
http://www.geoapps.com/harry_waldron_best_practices.htm

BC AdBot (Login to Remove)

 


m

#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 70,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:10 AM

Posted 01 January 2008 - 12:04 PM

Thanks Harry for another thorough,informative and useful contribution to the forum. :thumbsup:
I've already printed it for handy reference.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 de4thscythell

de4thscythell

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:10 PM

Posted 09 March 2008 - 07:40 AM

thanks. this is so useful. i must also print it out and spread it to my family and friends. :thumbsup:

#4 david28

david28

    Forum Member


  • Banned
  • 1,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:40 PM

Posted 21 March 2008 - 02:23 AM

Great guide, I might print this out and give it out aswell!

Regards,
david.

#5 Luke.mc

Luke.mc

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:12:10 AM

Posted 23 March 2008 - 02:31 PM

Thanks!

I'm using:

Norton 360
Spybot S&D
AVG Anti-Spyware

All active and updated.

Is there anything else I use should use?
Posted Image

#6 ///

///

  • Members
  • 148 posts
  • OFFLINE
  •  
  • Local time:01:10 AM

Posted 26 March 2008 - 05:34 PM

The PCWorld says that Spyware doctor and Norton Internet security is the best and highest rated anti-virus ever! I agree I downloaded spyware doctor from google pack http://pack.google.com/intl/en/pack_instal..._campaign=en_US the official site you have to buy to remove everything. They both worked well and got rid of rootkits, trojans, and viruses on my computer while the free programs: Ad-aware, super-antispyware, etc. didn't find anything :thumbsup:

#7 tork

tork

  • Members
  • 718 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:here
  • Local time:01:10 AM

Posted 13 May 2008 - 11:34 AM

Another user saying Thank you :thumbsup:

#8 -Cloud

-Cloud

  • Members
  • 121 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:10 AM

Posted 15 May 2008 - 02:11 PM

THANK YOU :D

#9 xentrix

xentrix

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:12:10 AM

Posted 02 November 2008 - 03:13 AM

Interesting thanks for the info, will be printing this asap ;)

#10 wish2learn

wish2learn

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:07:10 AM

Posted 03 February 2009 - 02:10 PM

Another user saying thank you for this excellent thread :thumbsup:

#11 markanizer

markanizer

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:10 AM

Posted 07 February 2009 - 11:54 AM

I followed all the suggestions just to be safe. Thanks!
markanizer

#12 sunnybo

sunnybo

  • Members
  • 313 posts
  • OFFLINE
  •  
  • Local time:01:10 AM

Posted 08 February 2009 - 02:51 AM

What is the best protection i should use on my computer please?

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 70,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:10 AM

Posted 08 February 2009 - 12:09 PM

Hi sunnybo, look thru this forum or ask again there as this location had litttle traffic.
AntiVirus, Firewall and Privacy Products and Protection Methods
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 Yeaa

Yeaa

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:10 AM

Posted 19 February 2009 - 09:44 AM

thanks for the heads up

#15 JJ2K

JJ2K

  • Members
  • 162 posts
  • OFFLINE
  •  
  • Local time:12:10 AM

Posted 08 March 2009 - 06:48 PM

* XP users move to IE 7 for better security


I think for even better security use Firefox as your browser. It was well documented in the news recently that security professionals advised against the use of IE due to security flaws. Hopefully they can amend this for the IE8 release!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users