A Free Educational Resource Created by Carnegie Mellon University to Empower You to Secure Your Part of Cyberspace

Intrusion

Accessing a computer without permission

An intrusion occurs when somebody gets into your computer without your permission, rather like a burglar breaking into your house. Once inside, an intruder has access to your data and can wreak havoc on your system.

With peer to peer (P2P) file sharing, users often receive files from anonymous senders which can lead to security problems, especially with transfers from music or media downloading sites. These files could contain malware that intruders can use to get into your system. The open ports that allow you to perform these file transfers can also serve as entry points for intruders.

Protective Measures

Practices

  • Only perform file transfers from trusted sources: This reduces your risk of downloading files infected with malware and introduces accountability, so that you have a better chance of getting a response if you do have a problem.

  • Scan all files that you receive through file transfer: It is a good idea to scan the files that you receive from P2P networks with your anti-virus software to detect malware. This may slow down the transfer, but it will help keep your computer safe.

  • Back up your data: Sometimes, after you discover an intrusion, you are left with no option but to format your hard drive and reinstall your operating system. It always helps to have your critical data backed up on another computer so that you can quickly remove the corrupt operating system to prevent further damage. Thumb drives, CDs, and DVDs are good storage and transport media. If possible, store your backup media in different location from the computer itself to keep them from both being destroyed in a fire or other disaster.
  • Make sure the public network you connect to is secure: Many public networks are not secure and do not even require you to identify yourself with a password. If you do not know who else may be logged onto a network, your best option may be to not connect to that network.

Settings

  • Turn off Bluetooth on your phone when you’re not using it: Some mobile phone models can be attacked through their Bluetooth functionality. To make sure this does not happen, turn off Bluetooth when you are not using it. To turn off Bluetooth on a Windows Pocket PC-enabled device:

    1. Click on the Windows icon in the top left corner of the screen and choose Settings.
    2. In Settings, choose Connections and then Bluetooth. This brings up the screen in the figure below.
    3. If you see that Bluetooth is turned on, click on the Turn Off button.
    Turn off Bluetooth

  • Use the passkey option to eliminate unwanted connections: When you use the passkey option, only people who have a password that you give them can connect to your device. This way, you are notified if anybody tries to establish a connection with you. To use passkey, click on the Bluetooth Manager and select Passkey. The screen shown below will appear.

    Passkey
  • Disable discovery by other devices: You can protect your mobile device by preventing other devices from finding you and connecting to you. This way, you can still connect to other devices, but they cannot connect to you first. This protects you from sneak attacks. To disable discovery on a Windows Pocket PC-enabled device:

    1. Click on the Windows icon in the top left corner of the screen and choose Settings.
    2. In Settings, choose Connections and then Bluetooth.
    3. Click on Accessibility to get to the screen shown in the figure below.
    4. Uncheck the “Allow other devices to connect” and “Other devices can discover me” boxes.
    Turn off Bluetooth

Tools

  • Anti-virus software: The popularity of the Microsoft Windows operating system makes it a prime target for hackers and other virus writers, so anti-virus software is crucial for users of this system. Anti-virus software works by identifying files that match definitions of known viruses and keeping them from infecting the system. Make sure that your virus definitions are kept up to date by automatically or manually downloading them from your software manufacturer's Web site. Do not install more than one anti-virus program because incompatibility issues between the programs may end up leaving your system unprotected.

    Two popular anti-virus packages are Symantec’s Norton AntiVirus  and McAfee AntiVirus . AVG , AntiVir  and ClamWin  are free alternatives. The major anti-virus programs, such as Symantec and McAfee, can protect against worms and Trojan horses as well as viruses.

    PDA and mobile phone anti-virus applications normally interact with the full version on a PC and hold fewer virus definitions. New virus updates are automatically transferred from your desktop computer each time you synchronize your PDA. Therefore it is important to keep your desktop computer's anti-virus software updated and synchronize your PDA regularly. Some commonly used anti-virus packages are Trend Micro's PC-cillin for Wireless  and Symantec AntiVirus for Windows Mobile .

  • Firewall: A firewall is like a security guard for your computer that monitors the traffic into and out of your computer. A firewall is your first line of defense against intrusions, especially Trojan horses. One popular firewall is Symantec's Norton Personal Firewall . The Windows operating systems such as Windows XP and Windows Vista  include a firewall that is turned on automatically. This built-in firewall is described in more detail on the Microsoft site .

  • Back-up software: Software like Symantec's Norton Ghost  can make backups of your data, as well as your entire operating system. This can be a helpful tool if you need to return your system to how it was before an intrusion.

Connect Safely from Different Places

Office

If you believe your computer has been invaded through P2P, contact your network administrator to shut down any ports the intruder may have used.

Mobile

Wireless Internet connections on PDAs and smart phones make it easier for intruders to get into your device and access your address book, messages, etc. You should be careful while using these devices to protect yourself against such intrusions.

On the road

Many coffee shops, bookstores, hotels, and airports have public networks that you can connect your wireless device to. However, you should be especially careful to protect yourself from intrusions when you use your laptop to transfer data on a public network, because these networks are often not secure.

Legal Issues

Breaking into a computer system is illegal under federal law, even if the attacker does not damage the system or steal any information. Intruders can receive major fines or even jail time. Victims of intrusions also have the option of suing the intruder in civil court.

Privacy Issues

If you keep information such as account numbers or passwords on your Web server, intruders may be able to steal that information. If you are worried that someone has broken into your computer, disable your filesharing service, and contact your Internet Service Provider or Web hosting provider for help. You may also want to call the organizations you have accounts with to check for unusual activity or to change your password.

My home page