by Paul Wilcox

By now most users are aware of the need to implement antivirus software on individual systems. But a large percentage of the hardware and software used to provide something for those users to use resides outside them. What are they and what can be done to protect them from virus attacks?

Virus attacks aren’t limited to desktop PC’s. The computer servers that operate websites, email and other internet services are also vulnerable.

Many of these servers are really not that different from a desktop PC. They may have more memory, multiple processors and larger hard drives, but they’re still more or less the same type of equipment when you get right down to it.

Most operate much like an individual’s system and are subject to the same kinds of attacks. They can therefore be protected by many of the same means - regular use of reliable antivirus software and being firewall guarded to shut down vulnerable entry points on the Internet.

What else can be done?

These servers can be servicing thousands of users at the same time in some cases so they’re a popular target for the virus writers. As a user on these systems, you can help keep them virus-free by making sure your own computer is. And their system administrators can help by limiting what kinds of programs get installed on them.

Users can help administrators and themselves by being more careful in browser selection and configuration. Most could profit from better self-education in how to minimize the ‘target area’ for hackers by changing browser settings. Users and computer professionals have made strides in voicing concern over security vulnerabilities in Internet Explorer. Adopting other browsers in greater numbers will help to get the message across.

Users and administrators should avoid using bootable CD’s and DVD’s that haven’t been virus scanned after being burned with desired software and files. Sometimes the process that creates them propagates viruses, just as floppy disks did some years ago.

Finally, if you use FTP for transferring files, you need to consider switching to a more secure alternative. FTP sends all passwords unencrypted so if someone is able to intercept your internet connection, they can easily get your password.

Users should take an active role in encouraging administrators to lock down systems. Most admins do a very good job with limited time and resources, but security is usually well down their list of priorities. Users who show an interest can alter that in a constructive way by showing that they care. Very few servers have a thorough check by a skilled security expert at any time in their serviceable lifetimes. That would change if users didn’t passively assume by default that everything is fine until things go sour.

About the Author: