Computer Security

In today's computing environment, it is the responsibility of each person to take appropriate steps to secure of their personal computers. Physical security of the system is a large component of computer security, but it is only the beginning. Regardless of whether a computer has a constant Internet connection (network, DSL, cable modem, etc.) or is used only on a dial-up line, it is essential that certain steps be taken to ensure your computing safety.

There are three primary areas in which you can keep your computer protected against viruses, worms, and other threats:

1. Install an antivirus software package and be sure to keep the virus definition files up to date. Update the definition files no less than once per week.
2. Install a firewall software package such as ZoneAlarm. A firewall acts like a fortified security system on your Internet connection, allowing nothing in that isn't given specific permission by you to enter your computer. Although Windows XP with Service Pack 2 has a built-in firewall, ZoneAlarm provides the added protection of blocking unauthorized outbound communications from your computer.
3. Use Microsoft Windows Update to keep your operating system up to date. Install all service packs, critical updates, quickfixes, and patches. Windows Update should be run on all computers a minimum of once a month.

McAfee VirusScan

The University of Tennessee has purchased a site license for McAfee VirusSan antivirus software. This license not only covers all University owned faculty, staff, and student computers but it also covers all computers personally owned by faculty, staff, and students. All faculty, staff, and students may download McAfee VirusScan for free from http://antivirus.utk.edu. As part of the download process, you will be required to log in using your UT NetID and NetID password. (For information on finding your NetID and NetID password, go to http://accounts.utk.edu/uact/your-netid.html.)

Directions for installing and using McAfee VirusScan on a Windows 2000 or Windows XP computer may be found at: http://www.csw.utk.edu/resources/antivirus/mcafee2kxp.htm

ZoneAlarm

ZoneAlarm is an award winning firewall software from ZoneLabs. Most firewall software packages (ZoneAlarm included) prevent anything from connecting to your computer via the Internet or network without your permission. ZoneAlarm takes this security a step further in that it stops any programs on your computer from connecting to the Internet unless you specifically allow it. This is especially helpful should you accidentally download a brand new virus or trojan program that attempts to spread itself through your Internet connection.

ZoneAlarm presently comes in three versions: ZoneAlarm, ZoneAlarm Pro, and the ZoneAlarm Security Suite (combines firewall, antivirus, and antispyware protection). The base version of ZoneAlarm is free for individual use. ZoneAlarm Pro and the Security Suite are commericial packages that must be purchased. (It should be noted that both ZoneAlarm Pro and the ZoneAlarm Security Suite are excellent program and are highly recommended.) ZoneAlarm can be downloaded from http://www.zonelabs.com. Click the link that says "Download and Buy", then click the link for ZoneAlarm. The prevous URL also provides details of the additional features of ZoneAlarm Pro and the ZoneAlarm Security Suite.

Windows Update

In 2007, Microsoft released sixty-nine (69) Microsoft Security Bulletins addressing security issues within Windows, Internet Explorer, Outlook, etc. - that's an average of over one per week.Windows Update. is the mechanism by which Microsoft provides updates to it's operating systems. It is through Windows Update that Microsoft distributes service packs and critical updates that either fix problems in Windows, or protect against known vulnerabilities in Windows or Internet Explorer. Microsoft never distributes service packs or critical updates via e-mail.

Microsoft's current schedule is to release critical updates and patches once a month on the second Tuesday of the month. However, they will deviate from that schedule if a flaw or vulnerability is severe enough to release a special update. To be certain that you stay current, it is recommended that Windows Update should be run at least once per week. (Another option that is highly recommended is is Windows users to turn on "Automatic Updates". This will automatically check for, download, and install updates when they are released by Microsoft. Users can set Automatic Updates to run as often as once per day or once per week on a specific day and time).

To update your system using Windows Update:

1. Start Windows Update. To start Windows Update Using Windows XP using the default start menu settings, start Internet Explorer, click on "Tools", and then click "Windows Update". (If your start menu was changed to "classic mode", you may access Windows Update by clicking "Start" and the clicking "Wiindows Updates".)
2. You may have one or more pop-up windows appear that state "Security Warning" on the title bar of the window and may ask if you want to install and run Windows Update. Click "Yes" on each of those windows. You may also be prompted to validate your copy of Windows.
3. Next, click on the box that says "Express" Get high-priority updates (recommended).
4. Windows Update will check to see what updates are needed on your computer, and if there are critical updates or service packs to be installed, click on the link to install the updates. (If there are no Critical Updates or Service Packs to install, Windows Update will state "There are no critical updates available at this time" - your system is up to date.)
5. The majority of the time, when Windows Update is finished installing updates, you'll be prompted to restart your computer.

After the computer has finished restarting, repeat steps 1-4 as many times as necessary in order to be sure you have all of the current updates. Note: If you have not run Windows Update before, or if it has been a long time since you last ran it, you may find that you have to run Windows Update as many as 3-4 times to get all of the updates.

Note: When ZoneAlarm is installed on a computer, ZoneAlarm may prompt you a various points during the download and installation if certain programs are allowed to access the local network and/or Internet. Click the "Allow" or "Yes" button each time this happens. Do not check the "Remember this..." box as each prompt will be for a specific update.

Hoaxes

In addition to viruses, worms, and trojans circulating the Internet, there are also plenty of hoaxes. Hoaxes are typically scare alerts started by malicious people and are completely false. These alerts are then forwarded on by innocent users who think they are helping to warn the the online community by spreading the word. If you receive an e-mail that warns about some previous unknown virus and encourages you to pass it along to everyone in your address book, chances are it's a hoax.

The F-Secure Corp is a manufacturer of computer security products and maintains a web page at where you can search their hoax database. The page is found at http://www.f-secure.com/virus-info/hoax/.

Before you unknowingly forward a well documented hoax to everyone you know, take a minute and search the database. Your friends will be glad you did.