Computer Security: What You May Not Know

Ok. This post will be brief and to the point. I wanted to quickly address three (3) computer security misconceptions that we come across quite often in our business of providing IT support or management.‍

Misconception #1: Having Antivirus Software Protects You From All Viruses

The answer to that is NO. The vast majority of virus/malware infections we see result from PC's that are missing critical security updates for not only the operating system, but also other common applications like Adobe Flash, Microsoft Office and web browsers (Internet Explorer, Firefox, Chrome etc.). When you fail to install software updates regularly, you leave your computer susceptible to attacks. Not all antivirus products are made equal, and some may fail to recognize viruses that have infected your computer so it's important to choose one that has good detection rates. Not updating your virus definitions or keeping antivirus subscriptions current are another common cause of infected computers.

‍My Suggestion: Keep your antivirus up-to-date and install security updates when prompted. This will help you avoid most of the mess that's out there.

‍Misconception #2: E-mail Communication is Secure.

The above statement is entirely incorrect. The truth would read: "E-mail Communication is Insecure". The word mail in e-mail leads people to think that e-mail is analogous to sending a letter in a sealed envelope. Yes, theoretically the postman could open your mail and read it but we generally trust that who ever is delivering our mail has better things to do than to carefully open the envelope read the contents and then seal it back in such a way that it looks untouched. The best analogy for e-mail however is sending a postcard, where we automatically make the assumption that whatever we write will be read by someone else in addition to the recipient.

From a technical standpoint e-mail is not secured in any way, the protocols make no efforts protect or secure the contents of e-mail messages as it passes from server to server on its way to its recipient. All servers along the way have the ability to see the contents of that message in its entirety. Additionally many companies automatically keep copies of ALL e-mails sent and received by employees.

‍My Suggestion: When sending e-mails assume that someone other that the intended recipient may read your message and be careful with the information you put in your e-mail messages. There are secure ways to send information and files but regular e-mail isn't one of them.

‍Misconception #3: The Biggest Threats to Security Are from the Internet

Yes and no. Often times the primary conversation about computer security is about securing the network from outside threats, but not as much attention is paid to the enemies within. This may be surprising for some, but it's been shown that the vast majority of security incidents that result in financial lost are often perpetrated by insiders (employees, vendors, consultants). Situations such as the hijacking of The City of San Francisco's network by an IT administrator happen more frequently than publicly announced.

‍My Suggestion: Trust no one, not even employees that are entrusted with the management of your network. Always put in place proper controls and oversight to reduce the possibility of insider attacks. Disabling access to systems/data before you dismiss an employee is also a best practice that will save you a lot of frustration.

Visit: application-filing-service.com for important information related to social security filing.