Is Your Information Safe? (end-user) *

As, last month, we talked about information security for companies, this month we will focus more on your personal information, and if you are giving it the attention it deserves. When we talk about personal data protection there are many aspects we supposed to be aware of; the first of which is the password, how complex it should be and also how we remember it. However, to keep the information safe, we also need a combination of upto-date antivirus and personal firewall software, and knowledge against social engineering.

Communities related to information security have observed in the last years that attacks have migrated to end users of the Internet in both residential and corporate environments. This is attributed to several factors, such as more and more userswith broadband access at home  who tend to stay connected, and therefore exposed to attacks, longer. However, these users have not increased the level of their security concerns; depending largely on anti-virus software as their only means of protection. Companies, meanwhile, have directed increased security concern mainly towards their servers, thus making system attacks more difficult. In this scenario, attacks on the end user have become easierand more effective.

Research conducted by IBM revealed that more than 50% of security breaches are related to Internet applications, and that the tendency is to explore and attack the weakest link in the chain; the user, more specifically through the exploitation of vulnerabilities in browsers. Users of online games and Internet banking are the preferred targets, although e-mail is also much exploited as a way to get into the computer. Brazil is the third largest emitter of spam, sending 5.5% of this kind of e-mail, topped only by India, with 7.7%, and the United States, which sends 15.2%.

There are several ways to protect yourself against all misuse. However, the minimum effort you should make to reduce the immediate risk is to create strong passwords mixed with special characters and not share them with anyone, nor write them down. You should also install special software for protection such as antivirus and personal firewall and configure them to work together. Never open suspicious e-mails of doubtful subject, even if you know the sender, and always keep all software up to date. For further information, visit cartilha.cert.br.


* Article published on Curitiba in English.