Securing Your Personal Computer

1 - You must ensure antivirus software is installed and configured to auto-update virus definitions

Antivirus software by major commercial vendors is recommended. Good examples are Symantec at http://www.symantec.com and Mcafee at http://www.mcafee.com. In addition, there are several providers of freeware anti-virus software:

• Windows 2000/ME/XP/98:
  
  
  • AVG Free Edition at http://www.grisoft.com is available free for single home users.
  • Aavast! Home Edition at http://www.avast.com is available free for home and non-commercial use.
• Linux and others:
  
  
  • F-Prot at http://www.f-prot.com/products/home_use/ has products available free for use by personal users.
  • Bit Defender at http://www.bitdefender.com/bd/site/downloads.php?menu_id=2 1 has several free products available for download.

2 - You must ensure all critical security updates are routinely applied

Manually update your computer with all available critical security updates

• Windows XP/2000/ME/98:

  Go to http://windowsupdate.microsoft.com and do the following:

  • Click Express Install
  • Click install
  • Reboot

  Some updates must be installed separately. Repeat this procedure until no more updates are available.

• Mac OS X:
  http://docs.info.apple.com/article.html?artnum=106704

Ensure that it stays updated by enabling automatic updates

Configure the computer to automatically download the updates and install them (recommended) OR download the updates automatically and notify the user:

• Linux Computer Systems: Any utilities available for automating this task may be used:
  
  
  • Users of current versions of Red Hat may use The Red Hat Network at https://rhn.redhat.com/
  • Users of legacy versions of Red Hat may use http://www.fedoralegacy.org
  • Apt and Yum may be used to update various versions of Linux as well.
• Mac OS X:
  http://docs.info.apple.com/article.html?artnum=106704

3 – You must disable peer to peer file sharing

Default configurations of peer-to-peer file-sharing applications typically enable access to files on the users’ PC. This must be disabled.

Instructions for disabling this feature can be found at http://security.uchicago.edu/peer-to-peer/no_fileshare.shtml

4 – You should protect the computer from spy-ware

Spy-ware programs are programs that secretly monitor a users actions. They may be used for marketing purposes such as pop-ups or may have malicious intent such as secretly controlling a person’s computer or gathering passwords and other information.

Spy-ware programs are often bundled with freeware programs or installed via the web browser using scripting. They may require user consent of “targeted advertising” in order to use a program, but are often installed secretly.

• XP/2000/ME/98:
  
  
  • Many spy-ware programs exploit known weaknesses in Microsoft's discontinued Java Virtual Machine. Install Sun Java at http://www.java.com/en/download/windows_automatic.jsp and configure it as the default Java Virtual machine to protect against this method of installation.
  • Load software to remove known spy-ware programs from the computer. There are several good programs. It is recommended that ONE of the following is used:
    
    
    • Spy-bot Search and Destroy
      Go to http://www.safer-networking.org/en/download/ and download Spy-bot Search and Destroy. Install with default settings. Periodically do the following:
      
      
      • Update - Search for updates then download updates
      • Immunize - Immunize the system
      • Search and Destroy - Check for problems
    • Adaware
      Go to http://www.lavasoftusa.com/support/download/#free and download the freeware version of Ad-Aware. Periodically do the following:
      
      
      • Check for updates now
      • Scan Now
• Mac OS X:
  
  
  • Most spy-ware targets Microsoft Windows, but for Mac users concerned about spy-ware there is MacScan at http://macscan.securemac.com

5 – You should enable a software firewall

• Windows XP
  http://support.microsoft.com/default.aspx?scid=kb;en-us;283673
• Windows 2000/ME/98
  
  
  • Sygate offers a personal firewall that is “FREE for personal use.”
    http://smb.sygate.com/products/spf_standard.htm
  • Zone Alarm that is a free “for the home user.”
    http://www.zonealarm.com/
• Mac OS X
  http://www.macobserver.com/tips/hotcocoa/2001/20010817.shtml