So you have a PC (90% of computers in the world run some form of Windows), with an anti-virus package, and possibly a firewall. You may even run some tools to clean spyware from your machine. So that means you're basically okay, right? Wrong. There's a very good chance that you're not okay at all.
Here's a link to a VERY interesting article on the state of the Computer Security industry:
Security Absurdity: The Complete, Unquestionable, And Total Failure of Information Security
And the followup article based on comments posted to the first article:
Community Comments & Feedback to Security Absurdity Article
So where does that leave the average computer user? Are we all going to need to be reformatting our hard drives every month or so and reinstalling our operating systems just to get rid of a particularly sinister root kit? Even Microsoft has admitted that it's becoming impossible to recover from malware problems in an
April 2006 article in eWeek magazine. (For more information on rootkits, see this article from eWeek -
VM Rootkits: The Next Big Threat?.)
But what to do? My favourite PC mag,
Maximum PC, recommends the following computer protection tools:
All of these, bar Windows Defender which has only two free support incidents, are free - and you probably need to be using
all of them on a regular basis. Not just a firewall and an antivirus package. Long gone are the days when you just booted DOS and got on with it.
But all these are just band-aids. The real problem isn't going to go away until there is a fundamental change in operating system design. Even the NSA, the world's largest intelligence agency, thinks that to be the case in it's white paper
The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments.
The second article I posted, Comments & Feedback to Security Absurdity Article, has a section towards the end on where Windows Vista fits into the picture. It looks like it definitely will improve things, but it remains to be seen how much. Until then, make sure you're running your firewall, anti-virus, anti-spyware, rootkit scanner, anti-malware, and startup diagnostic tools regularly.
And before anyone asks, there is no way I'm getting a Mac.