The Internet is a rough place, and it's getting rougher. What started as pranks, graffiti and vandalism has morphed into criminal activity -- some of it international in scope. You don't need a big hat and two six guns online, but you'd better know how to defend yourself.
The best defense in any context is always multi-layered. Think of it as a lock plus an intrusion alarm. The attack may get past one layer, but you hope the next one stops it. No defense is bullet-proof. The object is to reduce the risk to an acceptable level.
The best place to stop hackers and malicious computer code is before they enter. Your firewall is an essential first line of defense for your computer. I'd never go online -- even for a few seconds -- without one.
Firewalls will block ordinary hackers and Internet worms. A skilled and determined hacker can get past most firewalls, but it's not likely that you'll be the target of a sustained attack.
Email and Web pages go right through your firewall without even slowing down. They are allowed in because you expressly request them. As a result, your (informed) common sense is the only perimeter defense that you have against malicious email or Web sites. Firewalls can not protect naive users from themselves.
Some hazards are going to slip through your firewall, and you're not going to catch all of the others. That's where internal defense comes in.
The gated perimeter at Happy Trails gives us a sense of security. You still need to be cautious. A few residents have learned that the hard way. You may want to keep your doors and shed locked at night to provide some internal defense.
Anti-virus and anti-malware programs can stop most attacks that get inside. But don't count on them - they aren't perfect. That's what makes peripheral defense so important. You need multiple layers, internal and external.
Configuring Windows, your browser, and your email client correctly, and keeping them patched provide the essential inner layer of a sound defense system. If they're strong and up to date they will brush off most of the threats that make it past the other defense layers.
The "Single-Layer Defense" Fallacy: A still timely discussion of multi-layer defenses.