The secrets to secure computing

Spyware is a generic term that covers a wide range of software programmes - from those that are a nuisance by generating volumes of pop-up ads, to those that pose a significant security threat by stealing financial and other sensitive information. But due to the increasing prevalence of all types of spyware - on everything from end-user to enterprise systems - it is important for all PC users to understand what spyware is, how it works, and how to deal with it.

"We are seeing an increasingly hostile environment fuelled by financially motivated and targeted cyber attacks. By 2008, we expect that 40 per cent of organisations will be targeted by financially motivated cyber crime," says Amrit Williams, research director at Gartner. "Combining rootkits with spyware makes the situation even more complex, making it harder to detect and thus remove malware. "However, once a host has been compromised, it can be difficult to detect a rootkit as it conceals itself as a normal system file, which differentiates it from other threats."

Education coupled with a strong technical defense is arguably the first and best line of defence against malware programmes. If users want to avoid spyware traps and minimise their risk of infection, they need to understand safe Internet practices.

"Once the user is infected with these rogue programmes, they are difficult to detect and remove," explained Samir Kirouani, sales engineer, Trend Micro Middle East and Africa. "Their successful eradication will likely require professional tools from a security vendor. By understanding the magnitude of this threat and changing their behaviours accordingly, users can enjoy a rich online experience, secure in the knowledge that they haven't unintentionally opened their computers - and on-line lives - to people they don't know."

According to Anthony Arrott, senior threat analyst at Trend Micro, the universality of spyware is in itself helpful in raising awareness about security issues and solutions.
"Adware, which is spyware that is employed to track and report surfing habits, for the purpose of generating 'targeted' pop-up ads, affects between 40 and 70 per cent of all computers. By way of contrast, spyware that is written with the sole intent of stealing information and using it for profit is typically only present on between 4 and 6 per cent of all computers. However, since the potential for loss is great with this malicious type of spyware, it tends to get people's attention, despite a relatively small infection rate," said Arrott.

Motivating users to take part in solving the spyware problem is essential, because along with security vendors such as Trend Micro, everybody has a role to play in the fight against spyware.

"PC users need to understand what the impact of spyware and adware is on their particular computing environment," adds Kirouani. "Users also need to understand how their online behaviours compound their risk of spyware infection, so they can seek to modify those behaviours. The best way to combat spyware is to not get infected, in the first place."

Spyware is much more than a nuisance. It involves the invasion of privacy and a threat to security. That's why their existence - and their prevalence - as a potentially serious risk that can be significantly reduced or eliminated with the appropriate behavioural modifications.

The basics of secure computing start with the installation of anti-spyware protection and keeping it up to date. Back up data on a regular basis. Create an anti-spyware/malware policy and make sure that everybody knows who to turn to in the event of a problem or concern. IT security is something that requires on-going vigilance and management.