Spyware, Hackers, and Wormsoh my

1
Spyware, Hackers, and Wormsoh my!
Security threats to public access computers and
how to neutralize them. You need to provide PCs
for public access, but along with them come a
host of security concerns. What threats are out
there? How do your protect your computers and
your network? How do you balance the needs of
your users with the need for security?
2
Schedule

• My Background
• Keep your computer secure and stable
• Public access computing environment
• Computer Maintenance
• Q A/More Information
• Products are not endorsements

3
Keep Your Computer Stable and Secure

• Get a firewall
• Keep Windows up-to-date
• Install anti-virus software and auto update
• Keep spyware/adware and trojans away
• Keep applications up-to-date

4
Firewalls

• Surfing the web without a firewall is like
  leaving the front door of your house unlocked.
• A firewall is the first line of defenseconsider
  it a deadbolt on your front door.
• A firewall monitors the Internet traffic to you
  computer and blocks unauthorized access to your
  data.

5
Microsoft Windows Updates

• Offers the latest critical and security updates,
  device drivers, and other features that are
  available for your Windows computer.
• Updates are FREE!
• Updates can happen automatically
• For more info visit http//www.windowsupdate.com
  

6
Install Antivirus Software

• Antivirus Programs
• Norton Antivirus
• Trend Micro
• AVG Antivirus
• Mcafee Antivirus
• Use the update feature
• Schedule daily updates
• Schedule weekly virus scans
• RENEW SUBSCRIPTIONS

7
Spyware

• What is spyware?
• Protect against spyware
• Only download from sites you trust
• Read license agreements
• Close pop-up adds with the
• red X in the corner
• FREE Anti-spyware software
• Microsoft AntiSpyware
• http//www.microsoft.com/athome/security/spyware/
  software/default.mspx
• Spybot Search Destroy
• http//www.safer-networking.org/en/index.html
• LavaSoft Ad-Aware
• http//www.lavasoftusa.com/software/adaware/

8
Review - Keep Your Computer Stable and Secure

• Get a firewall
• Consult your local computer tech
• Keep Windows up-to-date
• Schedule daily updates
• Install anti-virus software and auto update
• Schedule daily updates
• Schedule weekly scans
• Renew subscriptions
• Keep spyware/adware and trojans away
• Install anti-spyware software
• Schedule daily updates
• Enable real time protection
• Keep applications up-to-date
• Update applications monthly

9
Public Access Computers
10
Public Access Computing Goals

• Create an environment that is
• Functional
• Secure
• Manageable
• Reliable
• Cost effective.

11
Software Used

• Operating System
• Microsoft Windows XP SP2
• Antivirus
• Trend Micro Antivirus
• AntiSpyware
• Microsoft AntiSpyware
• Security Software
• PAC Security Tool
• Restoration Software
• Deep Freeze
• Time Management Software
• Telus Library Online

12
Microsoft Windows XP Professional Service Pack 2

• Automatic Updates
• User-Level Access Control
• Policy-Based Desktop Management
• Internet Explorer 6
• Most Reliable Windows to Date

13
Microsoft AntiSpyware

• One of the best detection rates for all spyware
  programs.
• Real time protection
• Advanced tools
• AntiSpyware pop-ups
• FREE!

14
Antivirus

• Avoid the antivirus suites because they can slow
  down your computer. Install only the antivirus
  part of the software.
• Schedule automatic updates for a set time.
• Know when your subscription is out of date and
  renew it.
• I use Trend Micro PC-cillin 2005.

15
Public Access Computing Security Tool

• Create customizable user accounts for the public
• Protect against accidental or intentional
  tampering
• Restrict access to sensitive parts of the
  computer
• Changes made to the computer are not permanent
• Prevents users from installing/downloading
  programs
• Each time the computer is logged off all changes
  are erased.
• Copy settings to other computers
• Using the profile copier you can quickly move
  security settings to multiple computers.
• Created by the Gates Foundation and is available
  free at http//pacomputing.webjunction.org/do/Ho
  me

16
Deep Freeze

• Freezes the computer configuration so all changes
  are erased after a reboot.
• Maintenance mode thaws the computer, allows
  software to auto update, and then freezes the
  computer automatically.
• Network management allows staff to change
  settings from any network enabled computer.
• Compatible with all imaging software for easy
  deployment.
• More info available at http//www.faronics.com/ht
  ml/deepfreeze.asp

17
Telus Library Online

• Allows patrons to use library computers with
  little or no staff interaction.
• Computers can be reserved for future times.
• Patrons log into the computer using their
  barcode and pin. (typically the last four digits
  of their phone number)
• Staff are no longer required to monitor computer
  time.
• Detailed reports are available for library staff.

18
Computer Maintenance
19
Playing the Update Game

• Most software makers regularly release updates.
• Reasons for update
• New software version
• Fix flaws and security threats
• Software that can be automatically updated
• Operating System
• AntiVirus
• AntiSpyware

20
Automatic Updates

• Schedule software updates at the same time
• Windows 1000 p.m.
• Antivirus 1000 p.m.
• AntiSpyware 1000 p.m.
• Example Deep Freeze Maintenance Mode
• 950 p.m. - Thaw security (auto restart)
• 1000 p.m. - The software will begin to update.
• 1150 p.m. - Schedule a restart for updates to
  take effect.
• 12.00 a.m. - Freeze security and restart or
  shutdown

21
Manual Updates

• Software that requires manual updates
• Microsoft Office Applications
• Instant Messaging
• Adobe Acrobat Reader
• Internet Utilities (Java, Shockwave, etc)
• Perform manual updates monthly

22
Keep the Computer Clock Accurate

• Windows 2000 XP have a built in time sync
  program.
• Set it once and forget it. The time will always
  be accurate as long as you are on the internet.
• For complete instructions go to
• http//tf.nist.gov/service/pdf/win2000xp.pdf

23
Questions Answers
24
More Info

• Microsoft security site http//www.microsoft.com
  /security
• Web Junction http//www.webjunction.org
• Computer basics http//computer.howstuffworks.co
  m
• PC World http//pcworld.com
• For a copy of todays presentation email me at
• Dan Jacobson djacobson_at_scls.lib.wi.us