Home > Security Tips > Threat Monitor > End user's spyware prevention checklist
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

THREAT MONITOR

End user's spyware prevention checklist


Joel Dubin
09.13.2005
Rating: -4.67- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Here are some tips for safe Web surfing to pass along to your employees for preventing spyware from entering your company's network. (Download and print the PDF.)

  • Never deliberately download software to your workstation or desktop from the Internet, no matter how helpful or interesting it may appear. Even innocuous toolbars and nifty utilities can be packed with unwanted spyware. Be especially wary of file-sharing programs, which you shouldn't be using in the office anyways.

  • Stay away from any questionable sites, including pornography, gambling, hacking or other off-beat sites. But you shouldn't be, in any case, visiting these types of sites at work either. At most companies, you could be terminated for doing so.

  • Whenever an unwanted or unexpected pop-window appears, shut it down immediately by clicking on the "x" in the upper right hand corner of the window. Never click on any button, even if it says "Cancel" or "Close" on the window itself. These buttons can masquerade as innocent features that inadvertently start an unwanted download of spyware.

  • Be suspicious if endless pop-up windows start opening simultaneously, or if the performance of your workstation turns into a crawl. Assume that you've been hit by spyware and seek assistance from the Help Desk.

  • If you're using Internet Explorer as your browser, change its settings to block Active X objects. Go to Tools > Internet Options > Security > Custom Level. There is a section near the top of the dialogue box devoted to Active X controls. At the very least, disable downloading of both signed and unsigned Active X controls and those marked as unsafe. Some Active X objects are spyware. This will block them.

  • If you're workstation is running Windows XP SP2, then turn on the pop-up blocker feature in Internet Explorer and activate the firewall now bundled as part of SP2. The pop-blocker is listed under Tools in Internet Explorer's menu bar, and the firewall can be turned on from the Windows Firewall icon in Control Panel. These actions won't stop spyware altogether, but they can help.


MORE INFORMATION:

  • Learn how to educate employees about spyware.
  • Take our quiz to find out if spyware is getting the best of you.
  • Get more tips and expert advice on preventing and cleaning up spyware.


    About the author
    Joel Dubin is an independent computer security consultant based in Chicago. He specializes in Web and application security and is the author of the recently released book
    The Little Black Book of Computer Security available from Amazon.


    Rate this Tip
    To rate tips, you must be a member of SearchSecurity.com.
    Register now to start rating these tips. Log in if you are already a member.




    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Threat Monitor
    How to prevent clickjacking attacks with security policy, not technology
    How to stop malware in a 'Flash'
    How to detect system management mode (SMM) rootkits
    Windows registry forensics: Investigating system-wide settings
    Weaponizing Kaminsky's DNS discovery
    Debian: A niche OS with a not-so-niche security flaw
    Web advertising exploits: Protecting Web browsers and servers
    Ransomware: How to deal with advanced encryption algorithms
    Hidden endpoints: Mitigating the threat of non-traditional network devices
    Protecting exposed servers from Google hacks (and Google 'dorks')

    Web Security Advisor
    DNS rebinding defenses still necessary, thanks to Web 2.0
    New defenses for automated SQL injection attacks
    PCI compliance and Web applications: Code review or firewalls?
    Worst practices: Bad security incidents to avoid
    Web scanning and reporting best practices
    Social networking Web site threats manageable with good enterprise policy
    Enterprise security in 2008: Building trust into the application development process
    PCI DSS Section 6: A plan for tackling application security
    Making the case for Web application vulnerability scanners
    Preparing for uniform resource identifier (URI) exploits

    Spyware, Adware and Trojans
    Study of banking malware analyzes underground economy
    Gartner advises banks to shore up online channels
    Cisco: Cybercriminals more savvy than ever in 2008
    Flash, PDF are growing malware targets
    Holiday shopping threats
    Spam declines, Web-based attacks rise, says MessageLabs
    Microsoft flaw reveals inefficient security model
    Phishing, malware laden USB sticks stoke holiday attacks
    McColo shutdown won't stop spam, malware, warn security experts
    Web-borne malware targets unexpected industries
    Spyware, Adware and Trojans Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    barnacle  (SearchSecurity.com)
    botnet  (SearchSecurity.com)
    browser hijacker  (SearchSecurity.com)
    crimeware  (SearchSecurity.com)
    DSO exploit  (SearchSecurity.com)
    government Trojan  (SearchSecurity.com)
    I-SPY Act  (SearchSecurity.com)
    keylogger  (SearchSecurity.com)
    PUP  (SearchSecurity.com)
    talking Trojan  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary

    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



  • Research Solutions for Network Security, Access Control and Security Threats
    More Security Resources for Resellers, VARs and OEMs
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts