Techie Stuff

Trend Micro Virus Tracking Center

Basic Information Security Information

PASSWORDS

- How to select and use passwords effectively

• Passwords should be Alphanumerical with the use of symbols with a minimum of 8 characters.

• Password should be changed at a minimum every 90-day period.

• Users should not be allowed to reuse their previous 3 passwords.

• Passwords should not be birthdays, anniversaries, pet names, family member names, pin numbers or common passwords such as love, god, and sex.

• Passwords are not to be shared with anyone and should be the responsibility of the individual. 

WIRELESS NETWORKING

- Wireless networking - protecting Firm data when you have a home wireless network

When using wireless routers/network cards at home the following should be standard practice:

• The highest Encryption available should be used (128-BIT WEP). This is just a deterrent. 128-bit WEP can be cracked.
• Firewall Software should be installed on home computers.
• Anti-Virus should be installed and updated.
• Default passwords for Router Configurations need to be changed. In using the “Guide to wireless Warwalking”. I used a pocket PC and compact flash 802.11b Ethernet card. I discovered that many people in my neighborhood have not changed their router's SSID, and have not disabled the broadcasting feature. One can assume their Passwords are still set to the default. Using the default password would allow you to access the configuration page and change their routing. I have used my Axim's Dell Client Monitor Site software this week and have picked up at least 3 Linksys Routers with the default Linksys SSID. I also picked up 3 apple airports and 2 Dlink routers.
• Power off Wireless Routers when not in use. Quote from The Definitive Guide to War Xing "If they do not see it they maybe not hack it."

ANTI-VIRUS SOFTWARE

- What it is

• Detects, removes and prevents malicious programs from automatically installing on a machine and replicating to other machines.

- Where to get it

• Retail Stores. (Staples, CompUSA, Best Buy, Software Etc., Circuit City, Target, Kmart, and others)
• Online
• The Firm offers McAfee Anti-Virus software for home use.

- How to use it

• Install the Software.
• During installation, download the latest Virus Definitions.
• You may need to pay for a yearly subscription.
• Schedule a daily virus scan on your workstation
• Update Virus Definitions on a weekly Basis (normally updates are released weekly unless a major virus is on the loose.)

- Choosing your vendor

For home use, you have Several Vendors:

• McAfee
• Symantec
• F-Secure
• Computer Associates

- Getting updates

• Products are updated via the Internet automatically.
• Definition files are downloadable.

- Dealing with infection

• Rescue Disk should be created and kept in a safe place.
• Startup Windows Disk should be made and available.
• Disconnect your computer from your home network and do not attach to the office network.
• Do not save any files on diskette from an infected machine. Do not insert any infected media on firm equipment without contacting IS.
• Research or contact your Software Vendor for assistance with removing the virus from your machine.
• Contact your local help desk for suggestions and possible solutions.

FIREWALLS

- Hardware (routers)

•  Linksys
•  Dlink
•  SMC
•  NetGear
•  Cisco

- Software

•  Norton - Norton Personal Firewall ($)
•  ISS - Blackice ($)
•  ZoneLabs- ZoneAlarm (Shareware)
•  McAfee- Personal Firewall Plus ($)
•  F-Secure- F-Secure Internet Security 2003 ($)

- choosing an approach

•  Pricing and Support. Choose something that is simple and easy to use.

- Administration

•  Most Routers have web based administration (easiest)
•  Telnet administration (Menu Driven)