PC Security

Issues:

  1. These computers tend to be used by one person at a time
  2. They don't have much software allowing the outside world to connect to them (via the Internet or LAN)
  3. The users tend to have full control: add/remove files, change programs, change the configuration
  4. In a lab, school or library environment, the same machine may be used by many people each day

Vocabulary:

Virus: a program that attaches itself to a legitimate program. It will attempt to propagate itself.

Major threats:

  1. Infection by virus. Could make the computer unusable, or could cause problems for people who use the computers, including loss of data. Solution: Active anti-virus program; "clean" system at boot time; reboot between users.
  2. Change to system software. Users may make changes to anything, including deleting important system files, modifying system screen, etc. This could make a system fail to boot. Solution: Automatically "refresh" the system at boot time (e.g., from a remote server). Have backups on hand. Standardize software configurations so they are easy to put back.
  3. Changes to other software. Users may add undesirable programs or content, or remove existing programs. Solution: Same as above. Also, have a clear policy on what people are allowed to do with the computers.

Home systems (or public-use systems):


Themes
PCs: viruses, trojans, and shared systems
Servers: file protection, access control, server software vulnerabilities
Privacy: policy, copyright, laws, internationalization
Data integrity: encryption, IP security
Resources on Computer Security