Title: 4.4 Internet Security
Course: Information and Communication Technology: Module B > Section: Section 4 - Security Basics

4.4.1 Internet Security

Attacks from the Internet are common. Attackers may use many different tools to install a program on a computer. Browsers are particularly susceptible because users are unaware of the risks. Browser attack may include:

- ActiveX - Controls interactivity on web pages. It is used to define reusable software components. Many Microsoft Windows applications, such as Internet Explorer, Microsoft Office, Microsoft Visual Studio, and Windows Media Player, use ActiveX controls. Internet Explorer also allows the embedding of ActiveX controls into web pages.
- Java - Allows applets to run within a browser (such as a calculator). It is a general-purpose programming language that is platform independent. It is one of the most popular programming languages in use, particularly for client-server web applications.
- JavaScript – Built directly into a webpage and interacts with HTML code to allow interactive web sites (such as a rotating banner or popup window).
- Cookies – A small piece of data stored on a user's computer. When the user returns to a website, the data in the cookie can be used by the website to determine the user's previous interactions including items such as the user's credit card, which pages the user viewed, what preferences the user showed, etc.  The use of cookies is an option determined in the settings of the user's browser, but some websites require that cookies be enabled. Cookies typically do not implement viruses or malware, but they can give extensive history of a user's interactions and can provide private information that may be stolen, information that the user may not know that he or she is providing.

4.4.2 Internet Security

Internet attacks may include:

- Redirects – Forwards Web traffic to a different page. They can be used to make it appear that web links are not broken when they are during times when web pages are being maintained or moved.  They can also be used to make multiple domain names to point to the same website.  Criminals may use them for phishing attacks.
- Spam – The use of electronic messaging systems to send unwanted mass electronic messages, typically advertising, and typically emails.  Most companies have spent signficant funds blocking spam because it fills up email storage space, but spam continues because there is little cost for sending it, and there are little or no enforceable penalties for sending it. It is estimated over seven trillion spam e-mails will be sent this year.
- Malicious attachments – E-mail attachments open by a user that contains some form of malware including viruses, trojans and worms. It is crucial to become savvy in this area and know when it’s safe to open email attachments and when you should simply delete the email.
- Embedded hyperlinks – Links that trick you into going somewhere you did not expect. Criminals can make these bogus webpages look like the real thing and then steal the information you provide.

4.4.3 Internet Security

How can you defend against all these attacks? First and far most, be an educated user. Know the signs and what to watch out for. If unsure, don’t go there. There are a few things one can do to be better prepared. In the web browser, check the advanced security settings tab to verify no content or software is allowed to run without user consent. In the security zones tab, keep the security levels at a medium level or higher. In the privacy tab, keep the Internet zone at a medium level or higher, and have third party cookies prompt the user for permission to run. The popup blocker should be turned on. In general, know about the Internet options available, and set them to the highest level that allows you to function.

In an email client, here are a few things a user can to better protect a system. Set the spam filter or junk email filter to delete suspected spam. Set the email client to read messages using a reading pane. Most e-mail clients contain a reading pane that allows the user to read an e-mail message without actually opening it. When an attachment is received with an e-mail message, some e-mail clients will permit the user to view the contents of the attachment without saving and then opening it. Some email clients can be configured to block external content, such as hyperlinks to pictures or sounds, in HTML e-mail messages that are received. Be sure the email client is using a certificate. This will ensure a legitimate connection to the email server.