Changes

A wide variety of dangers and risk exist, which Internet security efforts must try to avoid or resolve.  The following are some (but not all) of these dangers.

A wide variety of dangers and risk exist, which Internet security efforts must try to avoid or resolve.  The following are some (but not all) of these dangers.

===Vulnerabilities/flaws===

===Vulnerabilities/flaws===

One serious risk to Internet security is that of vulnerabilities in the the systems already in use.  Once found, these vulnerabilities must be fixes (usually using software patches), but with so many different parts of so many different systems in play today, there is almost guaranteed to be a problem somewhere that can be exploited if anyone finds it.  These "zero-day" vulnerabilities are an ongoing problem, since by definition they are yet unknown.  However, another problem is that once such an issue is discovered, not everyone installs the patch or update required to resolve the issue.  Once the patch is released, malicious users can examine the fix and immediately go to work trying to find unpatched systems which can be attacked using this new method.

One serious risk to Internet security is that of vulnerabilities in the systems already in use.  Once found, these vulnerabilities must be fixes (usually using software patches), but with so many different parts of so many different systems in play today, there is almost guaranteed to be a problem somewhere that can be exploited if anyone finds it.  These "zero-day" vulnerabilities are an ongoing problem, since by definition they are yet unknown.  However, another problem is that once such an issue is discovered, not everyone installs the patch or update required to resolve the issue.  Once the patch is released, malicious users can examine the fix and immediately go to work trying to find unpatched systems which can be attacked using this new method.

===Denial-of-service attacks===

===Denial-of-service attacks===

===Software diversity===

===Software diversity===

If everyone uses the same software, everyone shares the same vulnerabilities.  However, when people use a variety of software, they reduce the risk of being successfully attacked.  For example, [[Windows XP]] users were put at risk by [[Conficker]], but Mac OS users were safe, since they did not have the same vulnerability in port 445 as Windows XP.  This is also true for [[Web browser|web browser]]s.  For example, a malicious banner advertizement may exploit a vulnerability in Internet Explorer, but people using [[Mozilla Firefox]] are probably safe, because the gecko engine does not have the same flaw.  

If everyone uses the same software, everyone shares the same vulnerabilities.  However, when people use a variety of software, they reduce the risk of being successfully attacked.  For example, [[Windows XP]] users were put at risk by [[Conficker]], but Mac OS users were safe, since they did not have the same vulnerability in port 445 as Windows XP.  This is also true for [[web browser]]s.  For example, a malicious banner advertizement may exploit a vulnerability in Internet Explorer, but people using [[Mozilla Firefox]] are probably safe, because the gecko engine does not have the same flaw.  

===Anti-malware software===

===Anti-malware software===

===Password managers===

===Password managers===

Almost everyone has seem warnings when they created online accounts to never use the same password as they have on any other website.  They put that message there for a reason.  One could either say it is there because they was to keep you safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital life.<br />

Almost everyone has seem warnings when they created online accounts to never use the same password as they have on any other website.  They put that message there for a reason.  One could either say it is there because they was to keep you safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital life.<br />

Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one--the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks.

Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one—the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks.

==Politics==

==Politics==

Internet security is not free of politics.  President Obama has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  

Internet security is not free of politics.  President Obama has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  

==References==

==References==