Friday, March 27, 2009
Wednesday, March 25, 2009
Laptop Data Security: Is it Worth the Cost?
what are the most popular computer security software?
Computers are an inseparable part of our lives today
Computer Security-How To Stay Safe In A World Of Hackers
Computer Defense System
A good computer defense system first means making sure that on a fresh install of any operating system, Apple OS included, all software updates are downloaded and any security updates are applied. In windows, set your security update options to at least "notify" you of updates even if you don't want to download them automatically. It is also most prudent to make sure all critical updates are downloaded and applied as soon as they become available. Microsoft Windows makes this easy with the Windows Update feature. Similarly there is a feature called software update in the Finder under the "Apple Menu" called software update. It is essential that you do this regularly. If you do not have options set to notify you immediately of updates, check for them a minimum of two to three times a month.
Another Part of your computer Defense System is your anti-virus software. In recent years their has been a tendency for the best know names in the anti-virus business to bloat their product with more and more features that many users will not use or use very sparingly. This taxes computer resources and slows down your computer because it is trying to do more and more background processes. There are many retail packages out there, but they are not all created equal. Also, be aware that program definition files (that tell the program about what viruses may exist on your computer) often expires at the end of a year meaning you will have to renew your anti-virus definition subscription in order to continue to receive updates. An alternative is a free antiviral software solution that provides updates for free. One of the best is by a company called Grisoft. It is called AVG. While I cannot put a link here, if you type "AVG Free" into Google, the link to the download page will be on the tope of the list.
For your computer to be running properly, you also need to enable any firewalls on your system. For example, in the Control Panel of recent Windows OS versions (like XP or Vista), you will find a security section (Tab or Icon). Once there, make sure the Windows firewall is enabled. However limit the installation of firewall software because not only can this cause program conflicts and slow down your system, cryptic warnings about a possible intrusion will not benefit you and scare an inexperienced user. Instead install a router or get someone to do it for you. Even if you only have one computer because a router is a physical firewall blocking potentially harmful Internet traffic for you. Also much lower prices on computers now means having multiple computers is affordable. A router allows multiple computers to share a single Internet connection.
Another important consideration is not to install toolbars unless from a recognized and trusted source. A good computer defense system recognizes that many of these installations are actually malware in disguise that can do things in the background that may harm and compromise your system. Also, do not download email attachments. This is one of the major ways that a virus or other malicious or self-executing code actually gets on your system in the first place. You need to exercise do vigilance when on the Internet and click with care. Also make sure that things like Active X controls are not automatically set to run on a page. (Unless on a trusted site that requires it.) Additionally, think seriously about changing the browser you use to surf the Internet with. Type "Get Firefox" in Google. Firefox is a better browsing alternative than its man competitor and it is more secure because it is more of a basic browser that does not automatically execute advanced functions that can lead to viruses, malware, Trojan horses and other malicious code that can seriously harm your computer.
A good computer defense system requires more than what has just been detailed, but these steps are important and will go along way toward a more secure and safe computer system. For even more extensive information; look to the end of this article for links showing you where you can go next.
Is Firewall and Anti-Virus adequate ?
There are absolute essentials such as Firewall, Anti-Spyware, Anti-Virus that a PC or server requires against Internet threats such as Hacking, Viruses and so on. From my observation, most corporate PCs or servers had installed Anti-Virus and firewall only. That's it. What other areas that are equally essential ?
I will not cover the essential of firewalls. These are a must or else anybody can sail through the network. It is like a house with the front door wide open with a sign, rob me !
Assumed Firewall, Anti-Virus installed..... What about folders and files ? Are you sure those sensitive files are not able to be accessed by all of your office staff but only trusted Sr. Managers or yourself. Say a technical savy personnel happen to have some knowledge of hacking, high possibility that your most valuable data in your server may be compromised.
Further, the vendor that installed the server and application, does he/she has the admin password ? What services are installed in the server ? Intruders may exploit the services vulnerabilities to gain access into the server.
It is difficult to to know where or who is the Intruder. Are they the intruders from the Internet only ? These are attackers that need to break into your firewall and IPS (Intrusion Prevention System) before getting their hands on the servers. There are those that can break into even the most advance security systems. Fortunately, the numbers are not many. However if they are your personnel, temporary staff, vendors, contracts, dispatch personnel. This will be easier as it is an insider job. Someone that have knowledge of your application, server or network. You will never know.
Windows Hacking Checkout this video on how a basic penetration is done using Windows. http://www.youtube.com/watch?v=sSHIVCkqrlw
So what to do ? I have observed banks and large companies taking the trouble to view every folders, files in their servers and ensure only authorized IDs are allowed to access these servers.
For example, to check world writable files and directories in Unix servers and output to a file for analysis, use this command:
Check world writable files and directories. find / -type f -perm -22 -exec ls -l > /home/Gabriel/worldfiles.csv \; find / -type d -perm -22 -exec ls -l > /home/Gabriel/worlddirectory.csv \;
I will cover more on Unix security in my coming article. Windows Hardening - part of Security Assessment As for Windows, use DumpSec ACL to retrieve the relevant files for analysis and Nmap, Nessus for services. I have conducted security assessments for a number of companies and they were surprised to find IDs of staff that have resigned still active in their servers. Worst still, most of the files that contained critical data are also read and writable by everybody. If the person with ill intention did what the video above demonstrated, he/she may have access to these files already
Backup Data Online for Free
A hard drive nowadays can hold an enourmous amount of data. The more data you have, the greater the chances of your facing a harder situation in case of hard disk failure. Although technology and safety measures are constantly updated, your computer is still a machine and could fail no matter how expensive or cheap it is.
Considering that data loss is more often due to human error than hard disk failure, you should try and create back ups as often as possible so that nearly all the information is available to you. You can thus prevent or at least minimize the damage.
Data loss can have very serious consequences. Consider this situation. You have a presentation the next morning and you have spent sleepless nights trying to get it just right. You will be able to have peace of mind - knowing that your valuable data is safe. The next morning you arrive at the meeting and your computer decides to play tricks. Your presentation just refuses to get underway because your computer has decided to follow its own instructions. Naturally the meeting ends up in disaster.
What you could have done is to save your presentation as a backup before you turned off your computer the previous night, and accessed that copy when you found out that the main presentation was malfunctioning. Malufunctions and crashes can occur anytime and often will have no warning signs. Therefore creating backups is a safety net available to you.
One method is to use the services online or to down load the software and do the task yourself. Most of these services do not mention that they are backup creators, but you can consider them to be so. Try saving your material on your email account by mailing the important files to yourself. You will always have access to them when required.
These free online storage services will have limited space available to you and some are not very reliable or efficient. There are others that charge you a minimal fee for the service, and these are far safer and reliable. Whichever route you choose to travel, please ensure that you have a set of backups to fall back on in cases of emergency, so that the day can be saved