E-NOTES, OCTOBER 2003: Protect Yourself from Information Security Attacks

 October 2003 Home Page

• Computer Security

• Security Guidelines

• Computing Upgrades

• PDAs at GUSM

• Hardware on the Hilltop

• Technology Training

• Dell Repairs

• Get More with GOCard

 E-Notes Home Page

Protect Yourself from Information Security Attacks
Patches and Other Computer Security Guidelines

In August, W32.Blaster, and W32.Sobig.F set records as the most rapidly replicating and widely spread malicious programs in history. Because these computer worms so thoroughly disrupted business, government, nonprofit, and educational institutions around the world, information security experts fear that they will serve as a blueprint for future attacks. In early September, with technical support departments around the world still grappling with August's infections, Microsoft released another security patch to fix a newly discovered security flaw that will probably be targeted by a worm in the near future.

You can find instructions for installing Windows security patches on the UIS Web site. (See How To Use Windows 2000: Getting Windows Updates or How To Use Windows XP: Getting Windows Updates. A few computer users at Georgetown have reported that their computers slowed down after installing a security patch, but this problem is easily remedied by UIS technicians in much less time than it takes to clean an infected computer. You have only a small chance of experiencing problems if you install the patch, but you have a 100% chance of getting a virus if you don't. If you need help installing the patch or your system slows down after you have installed the patch, back up your files (see the Windows how-to documentation linked on UIS's Software Web site) and contact your UIS Help Desk for assistance.

When installing security patches on your home computer, follow your hardware vendor's recommendations. Call your vendor's technical support line or check the vendor's Web site. For example, Dell and HP both have recommendations and online help documentation and for installing patches.

Installing a security patch takes just a few minutes, a small amount of time when compared to the four hours it takes to clean Blaster from one computer. Other essential information security practices recommended by UIS and the Office of Information Security are as follows:

1. Use anti-virus software.
2. Run Windows Update automatically.
3. Use a strong password.
4. Only install reputable or Georgetown University licensed software.
5. Check the source of your e-mail; be careful with e-mail attachments.
6. Avoid disreputable Web sites.
7. Pay attention to UIS security alerts.
8. Lock the screen or log out when away, shut down the machine when not in use.
9. Don’t use an administrative account for daily work.

These recommendations, along with detailed instructions for following then, can also be found at http://uis.georgetown.edu/software/documentation/antivirus under "Protecting Your Computer".