Secure Your Home Computer
{LANG_NAVORIGIN} Enterprise Security Home Office
By: TomCat Internet Solutions, 03/06/2005
These topics are brought to you from TomCat Internet Solutions “Secure Your Home Computer” Version 2.0
Firewall
Use a good bi-directional firewall that will monitor all incoming and outgoing traffic and will alert you for access
permission if such traffic is detected. It also has the ability to hide your presence from intruders by completely blocking
access to the ports that are used for the transfer of information. Select the highest security level for your internet zone
and set all programs to prompt you for access - even those you use frequently. When in doubt, deny access of a program until
you know for sure its identity.
If you do nothing else, you MUST at least use a good personal firewall. It will monitor all incoming and outgoing traffic by
inspecting each individual packet of data and will alert you for access permission if such traffic is detected. It also has
the ability to hide your presence from intruders by completely blocking access to the ports that are used for the transfer of
information. A firewall plus anti-virus protection are rule number 1 to Internet security.
For Windows XP users, be aware that although its Internet Connection Firewall (ICF) will detect inbound traffic, it is
useless for detecting outbound traffic - you need a bi-directional firewall - one that will detect both.
Not only should a firewall be used with your anti-virus program, but firewalls can also be used along with a variety of other
programs such as content filters, proxies, anti-trojans, and port scanners to expand your arsenal of protection. Some are
bundled with an assortment of these other programs as a package or suite, some are stand-alone. There are many from which to
choose for a variety of combinations.
Anti-Virus
Use a virus scanner (anti-virus), keep the virus data files current (check for updates at least once a week), enable the
"Heuristics" or "Bloodhound" feature (for detection of virus-like activity of yet-to-be discovered viruses), and set it to
scan all downloads and e-mail attachments - before they are opened. Let it quarantine and destroy anything suspicious. If it
has settings for scanning ActiveX Controls and Java Classes for potentially harmful content, use that too. For even greater
protection and a wider range of configuration options, combine the use of a virus scanner with a trojan scanner.
Virus Scanners - the rundown:
Installing an anti-virus or anti-virus/anti-trojan program on your system is probably the easiest of all security measures
you'll find. Upon detection of a virus, the program will move the infected file to a quarantine area for disinfection or
removal before it has the opportunity to make contact with you or any other program. Configuration is simple and detection is
reliable as long as you keep the virus data files or rulesets up to date (check at least once a week), and apply all updates
and program or scan engine patches as they are released. A firewall plus anti-virus protection are rule number 1 to Internet
security.
Whichever program you choose, be sure to set it to scan all downloads and e-mail attachments, enable the "Heuristics" or
"Bloodhound" feature (for detection of virus-like activity of yet-to-be discovered viruses), and if it has settings for
scanning ActiveX Controls and Java Classes for potentially harmful content, use that too! Also be sure to allow the program
to create 'clean boot' disks, as you never know when you might need them for an infected system.
Trojan Scanners - the rundown:
Trojans, or often referred to as Trojan Horses, are disguised as innocent programs and most often arrive hidden inside e-mail
attachments or programs that are downloaded from the Internet. Upon execution, they place sets of instructions in various
places then wait silently until you restart your computer to begin their nasty deeds.
Some anti-virus programs will also detect trojans, yet the use of a separate anti-trojan program is a popular and recommended
option that provides you with a wider range of configurations and more extensive Trojan Horse protection. These programs are
meant to be used in conjunction with your anti-virus program. Many anti-trojan programs have an option to stay active at all
times working much like an anti-virus program, but there can sometimes be conflicts - especially when your anti-virus program
is set to scan files when they are opened or executed. If you notice odd behavior such as intermittent system freezes, look
here first. Disable active scanning in the anti-trojan program, NOT the anti-virus program.
Disable File and Print Sharing
Disable File and Printer Sharing in your network settings if you are using a computer that is not connected to a Local Area
Network (LAN). This will shut all NetBIOS ports - those which are used for the sharing of files. Even if you are using a
router and a firewall, this is giving you added protection by disabling something you don't need.
Peer-to-Peer Security
Be extremely careful when using any P2P (peer-to-peer) network service for sharing/swapping files across the Internet. Be
sure you are not exposing any drive folder other than the one designated for access by these services, and keep your virus
scanner active at all times.
Instant Messenger Security
Secure your IMs. It is wise to use an IM encryption utility to secure your AIM, ICQ, MSN, or Yahoo! messages, but be aware
that the encryption will only be effective if the utility is used on both ends.
Disable file transfers in IM programs, as this feature, if configured incorrectly, can enable the sharing of more than you
intend. AIM, .NET Messenger, and others let you disable file transfers from the Preferences or Options menus. If someone
wants to send you an image or file, use e-mail to verify that the request is legitimate.
Your IP Address
Know your IP. If you know the IP address of your internet connection (and the IP ranges used by your local network), you will
recognize when an outsider is trying to break in.
Protect Your Registry
Use a registry guard to protect your registry, startup directories, and startup files from malicious programs. Incoming
trojans can go undetected. They will place a specific set of instructions in the registry or other system files and will
activate the next time you shutdown/restart your computer. A 'rearguard' will alert you before the damage is done. It is also
a useful tool for alerting you of changes when installing new software
E-Mail Link
Your IP address will be sent with this e-mail
