Security Basics mailing list archives

Re: Anti Spyware Standards


From: krymson () gmail com
Date: 19 Sep 2006 15:00:56 -0000

I didn't see this mentioned, so wanted to throw it in.

User education.

Many users are not aware of the dangers posed by malware in various forms due to web surfing and clicking ads or 
installing cute programs like screensavers or poker games to while away the slower days or nights on the job.

In a smaller company, personal education while troubleshooting an issue, or after reviewing installed software on 
someone's system does help, especially since the user can see the results of bad surfing/installing habits (slow as 
hell computer!). In a larger company, you can possibly get HR to require a general IT awareness online course of some 
sort, or use more robust network tools like WebSense or SurfControl to limit exposure. You should also be scanning for 
installed software, have a policy stating installing their own software is not acceptable, and removing it promptly.

In the end, users may thank you for the education, as they can take that information back to their personal lives and 
personal computer at home. Far too many people remain ignorant to how to protect and prevent spyware, not because they 
can't understand it, but because no one has bothered to explain it.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: