 Internet Security
First Published: May 2000
Last Update: April 2002
Author: Computer Partners
There are two parts to our look at Internet security,
protecting private information in an online transaction and protecting computers
from access by hackers.
Before sending private information, like credit card and
account numbers, over the internet, consider that it could be viewed by someone
other than the intended recipient. Also consider that the site or company you
are doing business with may not be legitimate. The chances of either may be
small, but the potential harm is great.
To ensure the privacy of the personal information you send,
look for web sites that provide a secure connection, using encryption. If
someone does intercept encrypted information he will have to decrypt it before
it can be read. Most modern encryption techniques make this practically
impossible.
There are different levels of encryption in browsers. Until
recently, U.S. Government laws limited the export of the highest level
encryption, 128 bit, to the U.S. and Canada. In either of these countries, to
get a 128 bit secure browser you still have to download a special version of Netscape
Navigator or an extension to Microsoft
Internet Explorer. Standard versions of these browsers provide "40
bit" encryption.
Ideally all transactions would use the maximum security. Due
to the historical limited availability of 128 bit encryption, it is only
required for the most sensitive transactions like those involved in online
banking.
,
You can determine when you have made a secure connection in
two ways. The address of the page will start with "https" instead of
"http". You will see a small icon like a locked padlock in the lower
right of the browser, on the status line. Because you can hide the address line
and the status line, neither of these indicators is guaranteed to be visible.
If a secure connection is not offered, you should be
reluctant to provide a credit card number through a web site. Most companies
will allow you to provide it by phone instead.
Email messages are also insecure and unlike web transactions,
there is no common standard for encryption. It is not recommended that you
provide any of the private information mentioned above in an email.
Regardless of whether the transaction is secure, you should
be confident the site and company you are considering doing business with is
legitimate. To determine this you will have to do some research. Try out the
company's name in a search engine and see what you find. Look for a full address
in their contact information, beware of post office boxes. Consider phoning them
and asking some questions. Look in an online yellow pages or phone book to see
if a company exists outside of the "web". Ask for some references by
email. Ask yourself if the site looks appropriately professional for the size
and type of business.
In a previous article, we discussed the benefits of high
speed internet connections . These fast and permanent connections, used
mostly in homes and small businesses, are prime targets for computers hackers.
If you are not properly protected, a hacker can access your computer and use it
as the source of a mischievous or often malicious attack on another internet
target. Under the terms of most user's contracts with their service providers,
they are responsible for such activities and it is their own responsibility to
secure their computers. There are several ways you can do this.
Shut your computer down when not in use
If you shut down your computer when it is not in use you minimize the
opportunity of hackers to gain access.
Install monitoring software
Software is available that will keep track of attempts to connect to your
computer through methods commonly used be hackers. However, collecting this
information does not provide any protection so most monitoring software is
bundled with firewall software
Install firewall software
A firewall does sort of like what the name implies. It provides a barrier
between your computer and the outside world, blocking unsolicited incoming
internet connections.
Symantec, publishers of the Dr. Norton products, will scan
your system for free and assess its vulnerability to hackers and other risks.
They have a Firewall product that may be recommend based on the scan results.
Symantec's Scan Me Tool
Two popular firewall products are:
ZoneAlarm (Free) and McAfee
Personal Firewall
Further information about firewalls is available at Firewall.com
Further information about internet security is available at
the Electronic Piracy Information Center
Books about internet security:
The
Complete Idiot's Guide to Protecting Yourself Online
I
Love the Internet, but I Want My Privacy, Too!
Protect
Your Privacy on the Internet
Other Links:
Key Loggers and Monitoring Utilities
| 
