Akorn Komputing acorn logo

 

Akorn Komputing

Paul Van Akkeren

Flag waving
Home
Up


Security/Virus/Backup Information

Security of Information Technology resources has become a major problem.  When the computers go down, many companies and offices are virtually held hostage until the problem is fixed.  Cyber terrorism can be practiced by anyone with a little bit of knowledge virtually anywhere with few resources and little chance of being discovered.  It seems to be great sport for many individuals to create virus programs that will infect and bring down large corporate computer systems.  Awareness, prevention, and adequate defenses are the only ways to protect yourself and your valuable information and systems.

As a developer and consultant, I face the need for heavy security precautions on many fronts:

I work at my home computers as well as the computers and networks of many clients and I am constantly exchanging information across numerous computers and networks

I frequently work with highly proprietary and confidential information

I work with a lot of information which is changing constantly

A lot of my communication with clients is through email, which has become a favorite way of introducing viruses

At client sites I frequently need to access information which is restricted from many users

The following paragraphs discuss very briefly the way I approach the different aspects of security of information technology resources.  This is by no means an exhaustive list.  It merely outlines the methods that I use.

Access Security: The first line of defense in allowing access to systems, programs, and data is requiring password access.  This can and always should be done at the computer system and network level.  It can also be implemented for individual software systems and programs.  Word processing and document management programs have features to add password protection to individual documents.

I recently developed a large software system that had many different functions and programs and was accessed by many different types of users.  Some information in the system is highly confidential and only a few senior users are allowed access.  Users are assigned levels of access that correspond to groups of functions.  Thus, financial users can access only the accounting and some reporting functions, while customer service representatives can access only ordering and related functions.

Encryption of data is another way to protect information.  Encryption makes it more difficult to do development and maintenance, but offers a high degree of protection against intruders who attempt to circumvent other access protection schemes.  Encryption can protect against "back door" access to data.

Virus Checking: Regular and frequent virus checking of all data, files, and memory is a must.  Anti-virus programs are not very expensive and most of the manufacturers offer free upgrades of the virus signature files for some period of time or even forever.  Some programs are even free.  The cost of a good anti-virus program is well worth the investment.  I recommend checking the web site of the manufacturer regularly, at least every two weeks for downloads of new virus signatures.  You should run the anti-virus software regularly, perhaps every week or more often.  Many of the programs have a component that can be enabled to run all the time in the background which will (hopefully!) detect any viruses coming in with downloaded files or e-mails.
E-mail Protection: I use (and recommend) several types of e-mail protection.  My Internet Service Provider (ISP) provides a feature called a Spam Eliminator.  They scan e-mails on the server and delete those that are known to be from spam sites or that have signatures that would appear to be spam.  Before using this feature I was receiving 10-15 spam e-mails per day.  Now I receive 0-2 and the ISP software is quick to add new sources.

Some ISPs and other organizations offer a service where they virus check all in-coming e-mail.  I also have this feature enabled.  One day I received notification that a large number of e-mails destined for me had been dropped because of virus detection.  The source of the e-mails was one of my clients and the client was unaware of the problem.  This detection allowed me to inform my client of the problem and then they proceeded to eradicate it.

The other method I use is a visual one and I highly recommend this.  When I receive an e-mail I first look at the address of the sender and the subject line in the In Box.  If it is not something I expect or/and I don't recognize the sender, I delete the e-mail and any attachments without ever opening it.  I have never found that I missed an e-mail because of this.

Backup: Backing up your hard drive regularly is a must.  Disks can go bad, files can be deleted by mistake, virus infections can render files useless, and decisions can be made to revert to an earlier version of a file, data, or program.  Backup all data regularly.  All systems should have some sort of backup system - tape or CD.  My ISP offers free web space and advertises that the disk space allotted to the web space can be used for backups, although the space is probably too small to backup most computers nowadays.

Backups should be done on a regular schedule and backup tapes or CDs should be cycled so that there are always several sets of backups available in case it is necessary to restore files.  The schedule of backups depends on the usage of the computer.  On a network, a backup of the network drives should be done every night.  Users should not keep any data on personal computers.  All data should be kept on the network.  If anything besides programs resides on personal computers, then the users must be responsible for backing up the data.  Commercial programs aren't terribly important for backup because there will usually be a master copy filed away somewhere on diskette, the network, or CD-ROM.

Firewall: This is a hardware device, essentially another computer, that serves as a buffer between the Internet and the server(s).  Generally this would involve too much cost and "firepower" for the individual, unless running a network that is connected to the Internet at all times through DSL (Digital Subscriber Line) or a high speed communications line.  This type of device is highly desirable, however, for a an office with multiple computers and one or more networks.

Suggested anti-virus and security sites - this list was compiled by Microsoft.  I'm sure it is not an exhaustive list, but includes most of the major sites.

CERT Coordination Center - Carnegie-Mellon University

Aladdin

Alwil

Central Command

Computer Associates

Data Fellows - F-Prot/F-Secure

Kaspersky Labs

Panda Software

Network Associates

Norman

Sophos

Symantec Security Response

Trend Micro

Microsoft

 

by: Paul Van Akkeren

Copyright 2001, 2002, 2003. 2004, 2005, 2006 Akorn Komputing
Last update: July 2006 All rights reserved