Online Security: Introduction

The menus at the right give access to most of the security content at this site. You can also use the more-detailed section map, or the custom search below to find security-related topics.

Security Strategies

These strategies are written from a Windows XP perspective, with [notes] that apply to Vista.

1. Basic defenses, suitable for emailing and surfing safer regions of the Web: The objective of defenses in this category is to avoid an infestation of malware that cripples your computer or turns it into a zombie for a "botnet". They are also adequate for shopping with your credit (but not debit) card.

---

This first strategy requires little or no extra software but running -- at lease internet-facinging programs with lower rights makes is as robust as other simple defenses. It does require learning how to live with a Non-Administrator user account.

Elements: Use a good firewall, learn about informed vigilance, keep Windows and your other software patched and updated and set up a Non-Administrator user account. [Vista (see Managing Vista)] And don't forget to do regular backup. Implement these five elements, and you'll have a good basic defense. Add the software described below and you'll have a much stouter defense.

Ed Bott, an expert at ZDNet, has a semi-humorous article on setting up this kind of defense up for his "Bad Dad".

---

Some newer anti-malware programs, like VIPRE and Avira AntiVir combine antivirus and antimalware engines. I use VIPRE. :-) Add one of them to the defense above, and you'll have a much stouter basic defense. I laid out this approach in A Solid Security Plan.

---

"Security suites" are finally becoming good enough to be a reasonable starting point for a decent security system. If you install one of these, learn about informed vigilance, keep Windows and your other software patched and updated, and do regular backup you'll have a good basic defense. [See "Security Suites" in my Google Scrapbook for information on the best ones.]

2. Robust defenses, designed to be strong enough for online banking and financial transactions: The objective of these strategies is to give you a low enough risk that your computer is compromised to allow you to put real money in harm's way.

You need to create and maintain a well-designed, multi-layer defense if you're going to risk substantial financial transactions online. I designed a multi-layer security system that I call 7 Action Steps for Online Security. It follows a beefed up tradional approach. It's not what I use (see below), but it will give you a very robust defense.

---

My own online defense employs fewer reactive measures, and more pro-active ones than traditional stragegies. I believe it's significantly more effective than my 7 Action Steps for Online Security, but it's not suitable for casual computer users.

One in four people have abandonded online banking because of the growing risk. I haven't gone that far yet, but I don't use my main computer either. I re-installed Windows on an old computer, installed a few essential programs, and I never use that one for any other purpose. ;^)

Notes

You'll want to take further precautions when using public WiFi hotspots or Ethernet connections in motels/hotels. And public computers, such as those in libraries or "courtesy business centers" are doubly risky.