Financial Risks

FINANCIAL RISKS IN INTERNET

Operating System Security

Operating System is the important program that runs on the computer. It performs basic tasks like recognizing the input from the key board, controlling various files and directories in the hard disk and also various peripheral devices like printers, scanners etc.
It will control the programs in such a way that they do not interfere with each other. It is responsible for securing the system by not allowing the unauthorized users to access the system.

Need for Securing Operating System

The security of the operating system running on various PCs and servers plays an important role in the security of the network as a whole. Not updating one system in the network may affect the security of the other systems in the network. Today we have a highly sophisticated operating system with lots of features, but it may be vulnerable if they are not administered, configured and monitored properly. Sometimes updating the operating system with latest patches may lead to interoperability issues with other operating system. Hence proper care should be taken while updating the operating system.

Tips for Securing Operating System

• Activate a password for the screen saver so that when ever the operations are not active it will lock the computer automatically after particular period of time.
  • In Windows, to activate a password for a screen saver, Go to Settings -> Control Panel -> Display - click Screensaver Tab. Under screen saver section, check the box on resume password protect click apply and click ok to close the window.

• Always use a strong password for your operating system to protect the system from unauthorized users.
  • A strong password should be at least eight characters in length and the password should be a combination uppercase, lowercase, numerical and special characters. The password should not contain the words that are in dictionary
  •  An example of a good password is Th!5iS@g0odP4s5wD

• Turn off file sharing in the computer when there is no need to access files in that system.
  • In windows, to turn off file sharing right click on the directory which we no longer want to share and click sharing and security. Under Network sharing and security section uncheck the option "Share this folder" on network.

• Make sure that the firewall is ON so that it prevents unauthorized users access to your system.
  • In Windows to turn on the firewall, go to start - settings - control panel - Windows firewall - select the option on (recommended) and click ok to close the window..

• Delete the software and features of operating system which are not in use.
  • To add or remove software in Windows, go to start ->settings -> control panel -> select add or remove programs. In that particular window, under change or remove programs section, select the software which is to be removed and click remove.

• Disable the default guest account so that it makes the unauthorized users harder to gain access to the system.
  • In Windows to disable the guest account, go to Start -> Run -> Type nusrmgr.msc and click ok. Now a window opens showing the users and groups directory. Double click user directory and in the right pane. Right click guest account and click on properties. Under general tab, check the box "Account is disabled ".

• Use an updated anti virus software to protect operating system from virus. Check for latest virus updates daily to keep the software up-to-date. This helps in detecting viruses that may try to affect your system.

• Update the operating system with the latest patches mainly with critical security updates for the operating system.
  • To update windows operating system, open the Internet Explorer browser window and go to "tools" and click "windows update".

• Backup critical data which will be helpful in case of operating system failure.

 To take entire information of the system backup, In Windows go to Start ,Programs -> Accessories->System tools -> Backup. A wizard opens to assist you in backing up the system. Click on next , select option backup files and settings and click Next ->select the appropriate option depending on the requirement and click Next Specify the name and place where to store backup and click next -> click finish to start taking backup of the desired data.

• A normal user should be provided with least privileges which do not disturb his normal working.
  • To create a user account with limited privileges in windows, go to Start -> Settings -> Control panel -> User accounts. In the users accounts window, click the option create a new account. In the next window, Type the user name and click Next -> Choose the option limited as account type and click "Create account". Then an user account with limited user privileges is created.

• User accounts should set their passwords according to the defined security policies.
  • In windows to check predefined password policy settings, click Start ->run and type "secpol.msc". In the right pane of the window, double click account policies and in the expanded list double click on the password policies. Then, in the right pane we find a list of settings regarding password policy.

Password Policies

Importance of a password

• Password represents the identity of an individual for a system.
• This helps individuals protect personal information from being viewed by unauthorized users. Hence it is important to secure passwords.
• Passwords acts like a barrier between the user and his personal information.

Basic Things to remember while setting a password

• Use at least 8 characters or more to create a password. More number of characters we use, more secure is our password.
• Use various combinations of characters while creating a password. For example, create a password consisting of a combination of lower case, uppercase, numbers and special characters etc.
• Avoid using the words from dictionary. They can be cracked easily.
• Create a password such that it can remember. This avoids the need to write passwords somewhere, which is not advisable.
• A password must be difficult to guess.

Guidelines for choosing a good password

• Do not use a password that represents you personal information like nicknames, phone numbers, date of birth etc.
• Change the password once in two weeks or when you suspect someone knows the password.
• Do not use a password that was used earlier.
• Be careful while entering password when someone is sitting beside you.
• Never write a password on paper to store it. The brain is the best place to store it.
• Do not reveal your password to anyone, not even to the system administrator.
• Store the passwords on computer with the help of an encryption utility.
• Do not use the name of things located around you as passwords for your account.

Various Techniques used by hackers to retrieve Passwords

• One way of stealing the password is standing behind an individual and over look their password while they are typing it or search for the papers where they have written the password.
• Another way of stealing the password is through guesses. Hackers try all the possible combinations with the help of personal information of an individual.
• When there are large number of combinations of passwords the hackers uses fast processors and some software tools to crack the password. This method of cracking password is known as "Brute force attack".
• Hackers also try all the possible words in an dictionary to crack the password with the help of some software tools. This is called a "dictionary attack".

Sample password:

Th!5iS@g0odP4s5wD ---->This is a good password
admin123 ----> Bad password

Guidelines for using Browser(s)
Please see section of "Guidelines of Browser"

Tips for Cyber bullying and harassing

• Tell a trusted adult about the bullying, and keep telling until the adult takes action.
• Do not open or read messages by cyber bullies.
• Tell your school if it is school related. Schools have a bullying solution in place.
• Do not erase the messages-they may be needed to take action.
• Protect yourself-never agree to meet with the person or with anyone you meet online.
• If bullied through chat or instant messaging, the "bully" can often be blocked.
• If you are threatened with harm, inform the local police