Pages

1.22.2011

The Most Powerful Security Tool

Judging from the title of this post, one may presume that I am going to recommend some great new anti-virus software, firewall, or password manager. But that presumption would be incorrect. What most folks do not realize is that the best security tool available is free and can be used by anyone. I am talking about knowledge. The best way to protect yourself and your data is to educate yourself about the tactics used by attackers.

Too many people believe that they are secure just because they have a piece of software installed that said "Protects from viruses and hackers" on the back or the box. The problem here is, that most of the real cyber-security threats today do not exploit computer code, but rather exploit a user's lack of knowledge. It is these social engineering threats that one must be aware of. Scams in the form of phishing emails are the most prominent example of this. Do not click links in emails from people you don't know. Do not click on those "videos" that a "friend" posts on your Facebook wall asking you to download a special video player. I think you get the idea. When in doubt, do not click.

Another extremely dangerous threat and all-too-common threat to the user, is the user itself. Too many times do people use the same password for every website that they create an account at, and too often is it some easily guessable piece of information, such as a pet's name, phone number, or birthday. Creating good strong passwords is an excellent place to start for anyone looking to increase security. For example, anyone who has had their Facebook, YouTube, Myspace, or email accounts hacked, probably used a poor password made of readily available personal information. A good rule of thumb is that any password should be at least eight characters long, and should contain at least one number, punctuation and uppercase letter. Skimping on password strength is the easiest and most surefire way to get yourself "hacked."

Please take this advice into consideration next time you get a strange looking email, or need to create a new online account. Don't expect some piece of software or some company to save your cyber-bacon. Just remember that it is up to you to make sure your digital assets are protected.

No comments: