Security: Beware of misconceptions

14 March 2006
Summary This is a classic situation for computer security experts, but it is still a mystery for most users: how can a computer that has simply connected to the Internet, without opening any files, be contaminated with a virus? Don't you have to open an e-mail to get infected? It is this kind of erroneous information that lets virus authors trick Internet users more easily, such is users' misguided faith in their own protection. Here are five examples.

1. You must open a file or a contaminated e-mail to be infected by a virus

This was true a few years ago, but can no longer be said to be the case, since the appearance of the most recent viruses that now behave like hackers and combine several attack techniques. They circulate on the Internet, gaining entry into victims' computers by exploiting the flaws in various software programs, most often, but not exclusively, Windows and Internet Explorer. These viruses, which don't even require any intervention by the user, scan the web searching for new victims who haven't updated their software. The Gaobot virus, which turned up at the beginning of February 2005, trapped its victims in this way. The Korgo, Blaster and Sasser worms also used this technique to spread.

2. Having an anti-virus program installed on a computer is adequate protection

If the anti-virus program is not up to date, it can no longer protect your computer effectively. Because, in order to detect new viruses, the anti-virus program has to know the virus signatures, i.e., the characteristics of these threats. So it is advisable to configure your anti-virus program for regular automatic updates. But this procedure alone is not enough to ensure complete protection. If you don't remedy the flaws in all of your software programs by keeping them up to date, even viruses that you have cleaned may come back. As far as other security problems are concerned, such as intrusion attempts or spyware, an anti-virus program alone is insufficient. To avoid risks of this type, you should install a firewall, as well as anti-spyware software.

3. There is no risk in opening an e-mail from someone you know

On the contrary! Most viruses propagated by e-mail use their victims' address books to propagate. So you may even have to be twice as vigilant about e-mail from the people that you know. Be even more cautious about messages written in a foreign language when your correspondent has no reason for doing this. If you are confronted with an e-mail that appeals to your curiosity - as in the case of the Bropia virus, which claims to contain sexy pictures, or Bobax, which claims to send pictures of Saddam Hussein dead - be sure to trash them immediately!

4. Intrusion attempts only concern people with high-speed Internet connections

Although it is true that people who stay on the Internet for long periods using a high-speed connection are more exposed to threats, the risk factor does not come from their type of connections but from the duration. So a user who connects by modem but spends a lot of time on the Internet is in just as much danger as any other. This was demonstrated by a Symantec study conducted in 2002 which showed that firewalls block an average of 50 intrusion attempts per day.

5. I don't have any confidential information on my computer, so spyware has no reason to spy on me

Most spyware is not aimed at obtaining confidential information (such as your credit card number or your passwords) but records your actions and movements on the Internet. Every site that you visit and every link that you click is spied on in order to display advertising that is targeted according to your interests. Also known as adware, this spy software uses your system resources and slows down your computer. Or even worse, when it comes from adult content sites, it may display images that are unsuitable for children.