CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Internet Security
Saksham Gupta
Saksham Gupta
Xth – F
1
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Index
Relevant Knowledge..................................................................................................................................3
Insecurity due to Internet.......................................................................................................................3
Online Threats.......................................................................................................................................3
Savage...................................................................................................................................................3
Best Practices for Security.........................................................................................................................5
Passwords..............................................................................................................................................5
Making a Strong Passwords.............................................................................................................5
Ways For Security.................................................................................................................................6
Use encryption software :- ...............................................................................................................6
Keeping your username and password private:-...............................................................................6
Registering with websites:- ..............................................................................................................6
Do not share personal information:- ................................................................................................7
Secure transactions:- ........................................................................................................................7
Use antivirus and antispyware software :-........................................................................................7
Clear browser cookies frequently :-..................................................................................................8
Install firewalls :- .............................................................................................................................8
Remove unwanted or unknown software applications :- .................................................................9
Clearing Data Stored In Browsers...........................................................................................................10
Inbuilt Tendency..................................................................................................................................10
Clearing Data.......................................................................................................................................10
Conclusion................................................................................................................................................11
2
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Relevant Knowledge
Internet security is a branch of computer security specifically related to
the Internet, often involving browser security but also network security.
Its objective is to establish rules and measures to use against attacks
over the Internet. The Internet represents an insecure channel for
exchanging information leading to a high risk of intrusion or fraud,
such as phishing. This session introduces you to Internet security
concepts and how to secure online and network transactions.
Insecurity due to Internet
Though Internet provides valuable information and entertainment,
it may leave your computer unsecure due to many online threats.
You need to ensure that your usernames, passwords, credit card or
online banking information secure as they are prone to be tracked
and used by unauthorized users. Some websites can also install
Malware on the computer without user consent thereby leaving the
computer damaged or insecure.
Online Threats
Online threats such as Phishing, email spoofing, chat spoofing, etc.
can increase the chances of users getting compromised.
Savage
You can reduce the risks by using best practices such as using Antivirus
Software, Antispyware. Software, Firewalls, strong passwords, etc. in
addition to spreading awareness of the best practices.
3
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Illustration 1: Image - 1
Image 1
4
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Best Practices for Security
Passwords
Use strong passwords, a combination of alphanumeric and special
characters could be used for creating a password that is not so easy to
crack or guessed by other users. Do not keep passwords such as your
favorite color, friends or relatives name, bike number, mobile number
either as single or combined option. These passwords are easy to guess
if a user knows you personally. Change your password frequently at
least 2 or 3 weeks so that your account information remains secure.
Using strong passwords can lower the risk of a security breach;
effectiveness of a password depends on the security mechanism of the
software and users involvement in generating a strong password.
Most websites check for password effectiveness when a user attempts
to register for the first time or when they change password. For
example, when you register with Gmail, you may notice a password
meter displaying the strength of your password.
Making a Strong Passwords
Following is a general guideline for managing strong passwords.
➢ Keep the length of the password at least 12-14 characters if
permitted.
➢ Avoid keeping passwords based on repetition, dictionary words,
letter or number sequences, usernames, relative or pet names, etc.
➢ Including numbers, and symbols in passwords if allowed.
➢ Use capital and lower-case letters.
➢ Avoid using the same password for multiple sites or purposes.
➢ Avoid using something that the public or workmates know you
strongly like or dislike.
5
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
➢ Use random password generators if possible. Example of a strong
password: u1vX:,4Hd{]$
You may also use websites such as [Link]
that can generate random strong passwords. To generate a strong
password using [Link] do the following:
➔ Open any web browser. Type [Link]
in the address bar and press Enter.
➔ Click Generate strong password. Notice the password displayed
under your new password. Backup your data: Always keep copies
of personal data in additional media such as compact discs, pen
drives, etc. This could be helpful in situation when there is a loss
of data. Keep the data away from unauthorized users.
Ways For Security
Use encryption software :-
(Usually available within the operating system) to protect your data
from unauthorized users. If encryption software is not available within
the operating system, use a 3rd party software.
Keeping your username and password private:-
Never save your username or password on computers that are used in
shared environments such as internet café. Browsers may save your
personal data on the local computer that can be used by another user
using the same computer.
Registering with websites:-
Read the privacy statement or policy whenever you register with a
website, the statement or policy will include information about how the
website use personal data.
6
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Do not share personal information:-
Websites require you to fill out forms containing fields such as name,
gender, age, email address, school, etc. Be cautious when filling out
such forms; research and verify if it’s a trustable website. Your email
addressed could be used by unauthorized users to send you fake or
unwanted emails; think twice or thrice before providing information to
any website and decide if it is really necessary.
Secure transactions:-
If you are using online shopping or transactions, websites even store
your credit card or online banking personal information such as your
credit card number, account details, etc. This information can be
tracked and used by un-authorized users often known as hackers to
misuse this information. Again, ensure the website is legitimate and
uses secure practices for performing and maintaining online
transactions. Since information such as credit card details or personal
information is sent over the network, it is always recommended to use
only secure websites for such transactions. Verify if the website uses
secure transaction; usually it is indicated through a digital certificate
represented as a golden lock in the web browser’s address bar.
Use antivirus and antispyware software :-
Computers are prone to attacks from software known as Malware that
could harm your computer. Malware track browsing behavior or
transmit personal data from your computer; programs such as
keyloggers could be installed on your computer track and transmit
every key that is pressed on a keyboard (keystrokes) to unauthorized
users.
Antivirus and Antispyware programs also offer real-time protection
monitoring your computer for any changes by malware software. Keep
your Antivirus and Antispyware software always up to date, this can
help in protecting your computer from recent threats.
7
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Do not immediately respond to mails from unknown users: It may be a
fake mail trying to gather personal information such as your bank
account details, home address, etc. Some mails could promise you jobs
or announce lottery results which in turn could compromise
the user. And in some cases, virus or scripts that are dangerous could
be attached to the mail; NEVER open the attachment from an
unknown source.
Clear browser cookies frequently :-
Cookies are programs that are created on your local computer when
you visit websites. Though cookies are meant for storing data based on
your activity performed during your earlier visit such as logon details,
details of a shopping cart, visited pages in a website, etc. they could
also be tracked by unauthorized users and possibly gain access to your
personal information.
Keep the operating system and software applications up to date,
though operating systems and applications are designed, tested and
distributed, sometimes they may have securityholes through which a
hacker can take advantage; they may track and gather information or
even damage the whole computer. In general, most vendors notify the
users whenever a security hole is identified and an update is available
to address that particular issue. You can also visit respective vendor’s
website to check if there are any updates available, download and keep
your operating system and software applications up to date, free from
security holes.
Install firewalls :-
Firewalls could be software or hardware and can assist in keeping a
computer and a network secure. Firewalls analyze the network traffic
and determine if the traffic should be allowed or not. In most cases,
operating systems such as Linux, Windows or Mac include firewall
software as a part of operating system thus keeping thecomputer
8
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
secure. In rare cases, you may need to configure your firewall for
additional security.
Never install software from unknown sources: As they might not be
trustworthy; download only from well-known or reputed websites.
Verify the source if it is legitimate by searching the internet or
referring to comments from other users before downloading
them; understand the nature and the purpose of the software before
attempting to download and install them.
Remove unwanted or unknown software applications :-
These might have got installed without your knowledge when you have
visited some websites. Unwanted software could get installed as they
might have been bundled along with necessary software. Some
programs such as toolbars get installed usually through bundled
software and are programmed to send personal data without your
consent.
Computer Security Technology for Internet
Attack Methods
Attributes Security
➢ Eavesdropping
Confidentiality ➢ Firewall
➢ Hacking
➢ Anti-malware software
Integrity ➢ Viruses
➢ Eavesdropping
➢ Anti-malware software
➢ Email bombing
Privacy ➢ IPSec
➢ Spamming
➢ SSL
➢ Spamming
Availability ➢ Boot record ➢ Truecaller
➢ Infectors
9
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
Clearing Data Stored In Browsers
Inbuilt Tendency
Web browsers have built-in password management designed to store
passwords used in forms on websites. Browsers often prompt to save
usernames and passwords when users attempt to logon to websites.
This facility is offered to users, so that they can logon to their
frequently used websites without having to type the usernames or
passwords. However it is not advisable to leave the web browser store
this data particularly on public or shared computers.
Clearing Data
To clear personal data from a web browser such as Mozilla Firefox,
launch the browser.
• Click Tools Menu, click Options.
• Click Security Tab.
Notice that under Passwords section, Remember password for sites is
checked. This means the browser is configured to save passwords for
websites automatically. You can uncheck.
Remember password for sites option, if you prefer NOT to store
passwords.
Mozilla Firefox can also store data such as cookies, visited websites or
webpages data, browsing history, etc. To clear this stored data, click
General tab > Option.
➔ Click Privacy Tab.
10
CLASS – X INFORMATION TECHNOLOGY(IT) - 402
➔ Under History section, click the drop down menu next to Firefox
will:.
➔ Select Use custom settings for history from the drop down list.
Notice the preferences; Firefox is configured to remember browsing and
downloading history search and form history and cookies. If you do not
wish store the mentione data, select -
Never remember history from the drop down list. If you are in a public
environment such as a cyber café, you may select the option Clear all
current history.
➔ Click Clear Now and then click OK. From now on, Mozilla Firefox
will not remember any history as you have configured it that way.
➔ There are several online threats such as Phishing, email spoofing,
chat spoofing, etc.
➔ You can reduce the risks by using best practices such as using
Antivirus Software, Antispyware
Conclusion
Software, Firewalls, strong passwords, etc. in addition to spreading
awareness of the best practices.
11