Chin Music
Users Play a Role in Malware Prevention
Paul Chin
(www.paulchinonline.com)
3/19/2008
Go to page: 1 2
Printer Friendly Version
Malware -- viruses, trojans, worms, spyware, bots -- is a lot like that loudmouth jerk in your office. He's always lurking around some dark corner or loitering where he's not wanted. He has a tendency to strike when you're most vulnerable such as on the eve of a big presentation or crucial deadline. Although you do everything you can to avoid bumping into him in the hallway, sooner or later your paths are going to cross. And you know that once he latches onto you, he's going to be almost impossible to get rid of.
The difference here is that there's plenty you can do to prevent malware from affecting your computer or network, but there's little you can do to get rid of that loudmouth jerk -- at least nothing legal. So, what are you doing to keep yourself from getting hit by malware, and are you doing your part to help keep malware from spiraling out of control?
Last month, a huge computer hacker ring was uncovered in my neck of the woods. The Quebec provincial police and the RCMP dismantled the largest computer-hacking network in Canadian history. It was a ring that affected close to a million computers in 100 countries, and caused an estimated $45 million in damages.
This high-profile story led to the inevitable question by some of my non-IT friends: Why can't security software makers do a better job at preventing the spread of malware? Knowing full well that many of these same people regularly turn off their firewall and cancel full-system virus and spyware scans midstream because it slows down their computer, I wished I had a mirror to hold up to their faces. "This is why," I wanted to tell them.
Malware is propagated by negligent users who don't bother to apply the most basic of preventative measures, and partake in risky computing behavior. They click on suspect and unsolicited e-mail messages or attachments from people they don't know, they visit shady Web sites, they fall for phishing scams spoofed as PayPal or a bank, and they download and install bootleg software cracked by unsavory characters.
Hackers and malware authors do what they do because they know it works. They send out copious amounts of lures to trick users or to seek out unprotected systems. All they need is for one person or system to take the bait to see payday. Unfortunately, there are hundreds of thousands who unknowingly take the bait, whether by actively doing something or by failing to take the necessary precautions. And despite repeated calls for caution and action by IT professional and security experts, many users still don't get it.
Go to page: 1 2
Printer Friendly Version