Internet security: What is it, and how can you protect yourself online?
What is internet security? - Definition and meaning
- Hacking, where unauthorized users gain access to computer systems, email accounts, or websites.
- Viruses or malicious software (known as malware) which can damage data or make systems vulnerable to other threats.
- Identity theft, where criminals can steal personal and financial information.
Individuals and organizations can protect themselves from these kinds of threats by practicing internet security.
What are the most common internet security threats?
To ensure privacy and security on the internet, it’s important to be aware of different types of internet attacks. Common internet security threats include:
Phishing
Phishing is a cyber-attack involving disguised emails. Hackers try to trick email recipients into believing that a message is genuine and relevant – a request from their bank or a note from a co-worker, for example – so that they click on a link or open an attachment. The goal is to deceive people into handing over their personal information or downloading malware.
Phishing is one of the oldest internet security threats, dating back to the 1990s. It has remained popular to this day since it is one of the cheapest and easiest ways for criminals to steal information. In recent years, phishing techniques and messages have become increasingly sophisticated.
Hacking and remote access
Hackers are always looking to exploit a private network or system's vulnerabilities so they can steal confidential information and data. Remote access technology gives them another target to exploit. Remote access software allows users to access and control a computer remotely – and since the pandemic, with more people working remotely, its usage has increased.
The protocol which allows users to control a computer connected to the internet remotely is called Remote Desktop Protocol, or RDP. Because businesses of all sizes so widely use RDP, the chances of an improperly secured network are relatively high. Hackers use different techniques to exploit RDP vulnerabilities until they have full access to a network and its devices. They may carry out data theft themselves or else sell the credentials on the dark web.
Malware and malvertising
Malware
Malvertising is a portmanteau of “malicious” and “advertising”. The term refers to online advertising, which distributes malware. Online advertising is a complex ecosystem involving publisher websites, ad exchanges, ad servers, retargeting networks, and content delivery networks. Malvertisers exploit this complexity to place malicious code in places that publishers and ad networks don’t always detect. Internet users who interact with a malicious ad could download malware onto their device or be redirected to malicious websites.
Ransomware
Ransomware is a type of malware that prevents you from using your computer or accessing specific files on your computer unless a ransom is paid. It is often distributed as a trojan – that is, malware disguised as legitimate software. Once installed, it locks your system’s screen or certain files until you pay.
Because of their perceived anonymity, ransomware operators typically specify payment in cryptocurrencies such as Bitcoin. Ransom prices vary depending on the ransomware variant and the price or exchange rate of digital currencies. It isn’t always the case that if you pay, the criminals will release the encrypted files.
Ransomware attacks are on the rise, and new ransomware variants continue to emerge. Some of the most talked-about ransomware variants include Maze, Conti, GoldenEye, Bad Rabbit, Jigsaw, Locky, and WannaCry.
Botnets
The term botnet is a contraction of “robot network”. A botnet is a network of computers that have been intentionally infected by malware so they can carry out automated tasks on the internet without the permission or knowledge of the computers’ owners.
Once a botnet’s owner controls your computer, they can use it to carry out malicious activities. These include:
- Generating fake internet traffic on third party websites for financial gain.
- Using your machine’s power to assist in Distributed Denial of Service (DDoS) attacks to shut down websites.
- Emailing spam to millions of internet users.
- Committing fraud and identity theft.
- Attacking computers and servers.
Computers become part of a botnet in the same ways that they are infected by any other type of malware – for example, opening email attachments that download malware or visiting websites infected with malware. They can also spread from one computer to another via a network. The number of bots in a botnet varies and depends on the ability of the botnet owner to infect unprotected devices.
Wi-Fi threats, in public and at home
Public Wi-Fi carries risks because the security on these networks – in coffee shops, shopping malls, airports, hotels, restaurants, and so on – is often lax or non-existent. The lack of security means that cybercriminals and identity thieves can monitor what you are doing online and steal your passwords and personal information. Other public Wi-Fi dangers include:
- Packet sniffing – attackers monitor and intercept unencrypted data as it travels across an unprotected network.
- Man-in-the-middle-attacks – attackers compromise a Wi-Fi hotspot to insert themselves into communications between the victim and the hotspot to intercept and modify data in transit.
- Rogue Wi-Fi networks – attackers set up a honeypot in the form of free Wi-Fi to harvest valuable data. The attacker’s hotspot becomes the conduit for all data exchanged over the network.
You don't have to worry so much about someone spying on the Wi-Fi network at home because you own the network hardware. But there are still threats – in the US, internet service providers (ISPs) are allowed to sell data about their users. While the data is anonymized, it can still be an unsettling thought for those who value privacy and security on the internet. A VPN at home makes it much harder for outsiders to correlate your online
How to protect your data online
If you are wondering how to ensure internet protection and how to protect your data online, sensible internet security tips you can follow include:
Enable multifactor authentication wherever you can
Multifactor authentication (MFA) is an authentication method that asks users to provide two or more verification methods to access an online account. For example, instead of simply asking for a username or password, multifactor authentication goes further by requesting additional information, such as:
- An extra one-time password that the website's authentication servers send to the user's phone or email address.
- Answers to personal security questions.
- A fingerprint or other biometric information, such as voice or face recognition.
Multifactor authentication decreases the likelihood of a successful cyber-attack. To make your online accounts more secure, it is a good idea to implement multifactor authentication where possible. You can also consider using a third-party authenticator app, such as Google Authenticator and Authy, to help with internet security.
Use a firewall
A firewall acts as a barrier between your computer and another network, such as the internet. Firewalls block unwanted traffic and can also help to block malicious software from infecting your computer. Often, your operating system and security system come with a pre-installed firewall. It is a good idea to make sure those features are turned on, with your settings configured to run updates automatically, to maximize internet security.
Choose your browser carefully
Our browsers are our primary gateway to the web and therefore play a key role in internet security. A good web browser should be secure and help to protect you from data breaches. The Freedom of the Press Foundation has compiled a detailed guide here, explaining the security pros and cons of the leading web browsers on the market.
Create strong passwords, and use a secure password manager
A strong password will help you maintain internet security. A strong password is:
- Long – made up of at least 12 characters and ideally more.
- A mix of characters – that is, upper- and lower-case letters plus symbols and numbers.
- Avoids the obvious – such as using sequential numbers (“1234”) or personal information that someone who knows you might guess, such as your date of birth or a pet’s name.
- Avoids memorable keyboard paths.
These days, it’s no longer enough to substitute lookalike characters for letters or numbers – for example, “P@ssw0rd” for “password” – since hackers are wise to it. The more complex and involved your password, the harder it is to crack. Using a password manager will help – by generating, storing, and managing all your passwords in one secure online account.
Keep your passwords private – avoid sharing them with others or writing them down. Try to avoid using the same password for all your accounts and remember to change them regularly.
Keep an up-to-date security program installed on your devices
Internet security antivirus is critical for ensuring privacy and security online. The best internet security software protects you from different types of internet attacks and protects your data online. It’s important to keep antivirus software up to date – most modern programs update themselves automatically to stay on top of the latest internet security threats.
How to keep your family safe online
Internet security for kids is critical – protecting children from harmful or inappropriate content and contacts, as well as malicious software or attacks. Teaching your children online safety tips can help to keep them safe.
Internet safety tips for children
Children are spending more and more time online, and it’s important to talk to them about how to stay safe on the internet. Making sure that kids know what information to keep private online is essential, for example explaining why they need to keep their passwords private, and not give out personal information. Keeping the computer in a common area, where you can watch and monitor its use, can also be a useful way of ensuring children use the internet safely.
Many kids enjoy watching YouTube videos. So, to make this a safer experience, you can use YouTube parental controls. You may also want to use YouTube’s dedicated app for children, YouTube Kids. This provides a more child-friendly interface, and videos on the app are reviewed by a combination of human moderators and automated filters to help ensure videos are appropriate for younger children.
0 Comments