Why
does the average Net user need a course on cyber security?
There are two mistakes computer users make when it comes
to Internet security: First, they assume they will not be
targeted in cyberspace. But consider that 95 per cent of
malicious traffic on the Internet is launched indiscriminately,
like random acts of violence on the streets. There is nearly
a 100 per cent chance that a home or business user will
have their computer scanned for vulnerabilities while connected
to the Internet on any given day. The second mistake computer
users make is underestimating what they have to lose through
a malicious attack on their system or even an unintentional
mishap such as a power outage.
One
of the main attractions of the Web is its ease of use. Very
little computer knowledge is needed now to roam cyberspace
or send e-mail. People can use the Net without understanding
how it works. But this strength is also its weakness. People
focus so much on the positive things that can be done on
the Internet that they tend to forget or ignore or fail
to learn about the negative things that can happen. The
apparent technological sophistication of the Internet may
lead the unwary to believe that someone somewhere is running
the show. But despite continual efforts by various governments
and organizations to regulate activity on the Net, you are
on your own in cyberspace. You have very little practical
recourse if something goes wrong.
Businesses
large and small have been pressured to get on the Net in
order to stay competitive. In many cases the bulk of available
resources has been directed towards computerization, getting
"wired," and trying to keep pace with rapid technological
change. There is often little time, money, or thought given
to security issues. In small businesses there is rarely
a system administrator or technician to turn to if there
are problems. Staff are typically given e-mail and Web access
in addition to existing computer applications with little
or no instruction about safe use. Rarely are there any formal
computer security policies or procedures in place. Even
in many large computer-dependent organizations, you would
be hard pressed to find a systems or network security position.
Most people are responsible for their own online security.
However, few realize it until something bad happens.
As
the Internet becomes more and more integrated with our daily
life and commercial activity, the number of things that
could go wrong will increase, as will the extent of the
damage and the financial impact when they do. In the past
two years we have seen the havoc a fairly simple virus can
wreak. And while the Y2K issue appears to have been much
ado about nothing, the publicity about it made us more aware
of how reliant we have become on the Internet. In addition,
the growing use of cable modems and DSL lines have made
home computers more attractive targets for those wishing
to cause chaos. The increased power of home computers that
makes access to the Internet faster and easier also increases
the speed and ease with which someone with malicious intent
can get access to them.
