Changes

===Malicious software (Malware)===

===Malicious software (Malware)===

Viruses, Worms, Trojans, and Spyware are only some of the varieties of [[malicious software]] that threaten security today.  Some will simply try to destroy systems or equipment, other will open vulnerabilities for unauthorized remote access (hacking), while yet more will collect protected information.  Some are more devious, and have functions that fall into multiple categories, such as [[Stuxnet]] and [[Flame (malware)|Flame]].

Viruses, Worms, Trojans, and Spyware are only some of the varieties of [[malicious software]] that threaten security today.  Some will simply try to destroy systems or equipment, other will open vulnerabilities for unauthorized remote access (hacking), while yet more will collect protected information, or simply [[Ransomware|lock that information and demand a ransom]] be paid to restore access.  Some are more devious, and have functions that fall into multiple categories, such as [[Stuxnet]] and [[Flame (malware)|Flame]].

===Malicious hardware===

===Malicious hardware===

Although this risk is rare, hardware can actually be installed which also poses a risk to Internet security.  This hardware can be designed to perform any number of tasks, depending on the purpose.  Such hardware is often attached in-line with a normal cable, such as the keyboard or network cable.

Although this risk is rare, hardware can actually be installed which also poses a risk to Internet security.  This hardware can be designed to perform any number of tasks, depending on the purpose.  Such hardware is often attached in-line with a normal cable, such as the keyboard or network cable.  However, chips of this nature can also be embedded in a device, whether build right into the motherboard, or soldered on after manufacture.

===Phishing===

===Phishing===

===Network layer security===

===Network layer security===

A variety of protocols have been created to secure TCP/IP communication.  These include Secure Sockets Layer (SSL) and the newer Transport Layer Security (TLS) for Wold Wide Web traffic, as well as [[Pretty Good Privacy]] (PGP) for [[email]], as well as IPsec for securing the network layer.

A variety of protocols have been created to secure TCP/IP communication.  These include Secure Sockets Layer (SSL) and the newer Transport Layer Security (TLS) for Wold Wide Web traffic, as well as [[Pretty Good Privacy]] (PGP) for [[email]], and IPsec for securing the network layer.

===Firewalls===

===Firewalls===

===Encryption===

===Encryption===

Another method used to protect Internet security is [[encryption]].  Information can be transferred win encrypted form when both parties already know the decrypting algorithm and key.  However, when this is not the case, an ingenious solution was been devised which used both a public and private encryption key.  Using this method, a client's data is encrypted using the public key which a server freely provides.  It is then sent to the host, in its encrypted form.  When the host receives this information, it uses its private key, which only it knows, to decrypt the information.<ref>https://www.comodo.com/resources/small-business/digital-certificates2.php</ref> This method is used in HTTPS (Hyper Text Transfer Protocol Secure) communication, which is implemented by online backing, E-mail and many other websites today. Without a [[quantum computer]], it would take so long to break this communication that by the time it were complete, the information would be useless.  Only if the server's private key has been compromised does this system become practically vulnerable.<br />

Another method used to protect Internet security is [[encryption]].  Information can be transferred in encrypted form when both parties already know the decryption algorithm and key.  However, when this is not the case, an ingenious solution was been devised which used both a public and private encryption key.  Using this method, a client's data is encrypted using the public key which a server freely provides.  It is then sent to the host, in its encrypted form.  When the host receives this information, it uses its private key, which only it knows, to decrypt the information.<ref>https://www.comodo.com/resources/small-business/digital-certificates2.php</ref> This method is used in HTTPS (Hyper Text Transfer Protocol Secure) communication, which is implemented by online backing, E-mail and many other websites today. Without a [[quantum computer]], it would take so long to break this communication that by the time it were complete, the information would be useless.  Only if the server's private key has been compromised does this system become practically vulnerable.<br />

This helps prevent any harm from communication interception, since the data in transit is useless without the private key.  It does not solve the problem of interception, and date could still be destroyed, but it uses the concept, "you can get it, but you can't use it."

This helps prevent any harm from communication interception, since the data in transit is useless without the private key.  It does not solve the problem of interception, and date could still be destroyed, but it uses the concept, "you can get it, but you can't use it."

===Software diversity===

===Software diversity===

If everyone uses the same software, everyone shares the same vulnerabilities.  However, when people use a variety of software, they reduce the risk of being successfully attacked.  For example, [[Windows XP]] users were put at risk by [[Conficker]], but Mac OS users were safe, since they did not have the same vulnerability in port 445 as Windows XP.  This is also true for [[web browser]]s.  For example, a malicious banner advertizement may exploit a vulnerability in Internet Explorer, but people using [[Mozilla Firefox]] are probably safe, because the gecko engine does not have the same flaw.  

If everyone uses the same software, everyone shares the same vulnerabilities.  However, when people use a variety of software, they reduce the risk of being successfully attacked.  For example, [[Windows XP]] users were put at risk by [[Conficker]], but Mac OS users were safe, since they did not have the same vulnerability in port 445 as Windows XP.  This is also true for [[web browser]]s.  For example, a malicious banner advertisement may exploit a vulnerability in Internet Explorer, but people using [[Mozilla Firefox]] are probably safe, because the gecko engine would not have the same flaw.  

===Anti-malware software===

===Anti-malware software===

Although Denial of Service attacks are harder to combat, significant progress has been made in this area.  In general, a powerful, stable proxy is linked to a domain name, so that when a website is requested, the proxy is contacted.  The proxy will then try to determine if the connection hostile or not, then act accordingly.  A leading company in this area is CloudFlare, which has patented a determination method which requires each client's computer to solve a computational problem using JavaScript before it can access the site.<ref>http://www.google.co.uk/patents/US8613089</ref>

Although Denial of Service attacks are harder to combat, significant progress has been made in this area.  In general, a powerful, stable proxy is linked to a domain name, so that when a website is requested, the proxy is contacted.  The proxy will then try to determine if the connection hostile or not, then act accordingly.  A leading company in this area is CloudFlare, which has patented a determination method which requires each client's computer to solve a computational problem using JavaScript before it can access the site.<ref>http://www.google.co.uk/patents/US8613089</ref>

===Proxies===

===VPNs===

Another security method sometimes used is routing all communication through a proxy or VPN.  This connection is usually encrypted, so even unsecured communication is protected until it reaches the proxy server.  The proxy will then redirect each packet to the host, and redirect the host's responses through a secure "tunnel" back to the client.  Although the connection is unsecured for part of its journey, it becomes anonymous, so any personal information cannot be traced back to the specific user very easily.<br />

Another security method sometimes used is routing all communication through a VPN tunnel.  This connection is encrypted, so even unsecured communication is protected until it reaches the VPN concentrator at the destination.  At this point, the user can securely access the remote network. The remote network will also typically redirect traffic destined for the internet onward to its destination. It will operate as a go-between, redirecting the internet host's responses through the secure "tunnel" back to the client.  Although this kind of internet connection is unsecured for part of its journey, it protects the data from local threats (such as a compromised or spoofed wireless access point).

However, proxies include their own set of problems.  The least of which is reduced communication speed.  Greater concerns include the security of the proxy itself.  Such a server could be compromised, meaning that all communication form hundreds of users is not being skimmed by a malicious party.  Some are also concerned about the privacy of proxies which have not been compromised.  In some cases, not privacy policy is provided, and even if one is, such servers are sometimes not very well regulated.  For these reasons, some question whether this option provides or surrenders safety.  However, if trusted proxies are available, this can help protect from data interception.

However, proxies include their own set of problems.  The least of which is reduced communication speed.  Greater concerns include the security of the proxy itself.  If clients are not using a remote server which they implicitly trust, that server could be compromised, meaning that all communication from hundreds of users is now being skimmed by a malicious party.  Some are also concerned about the privacy of proxies which have not been compromised.  In some cases, no privacy policy is provided, and even if one is, such servers are sometimes not very well regulated.  For these reasons, there is some question whether this option provides or surrenders safety.  However, if trusted proxies are available, this can help protect from data interception.

===Password managers===

===Password managers===

Almost everyone has seem warnings when they created online accounts to never use the same password as they have on any other website.  They put that message there for a reason.  One could either say it is there because they was to keep you safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital life.<br />

Almost everyone has seen warnings when they created online accounts to never use the same password as they have on any other website.  These messages are in place for a reason.  One could either say it is there because they want to keep the user safe, or that it is in place so they do not get sued when people do just this, and have someone break into their account later.  Either way, the fact remains that using the same password over and over puts people very much at risk.  If any one of those websites is compromised, every other account such people hold can also be taken over.  It is often for this reason that a few people occasionally lose their entire digital lives.<br />

Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one—the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks.

Although a password manager is a convenience item, it can be a very important one.  Most people cannot remember more than five passwords, so they simply reuse the one or ones over and over.  A password manager is an easy way for people to make unique passwords for each website, and still only need to remember one—the master password for the password manager.<ref>http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf</ref>  Some managers even include a random code generator, which can be used to create a strong password that no human needs to remember.  Such passwords are not only unique, but also impervious to "dictionary attacks" and very strong against "brute-force" attacks. A password manager does offer a single point of failure, however, so it must be secure and configured with a strong decryption key (password, keyfile, or whatever else).

==Politics==

==Politics==

Internet security is not free of politics.  President Obama has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  

Internet security is not free of politics.  Former President [[Obama]] has been able to curry favor with a number of people by speaking repeatedly on cybersecurity.<ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity</ref><ref>https://www.whitehouse.gov/issues/foreign-policy/cybersecurity/summit</ref>  However, this political aspect is in no way the greatest issue.  One of the greatest political risks within Internet security is that of freedom being surrendered in the name of security.  Given enough time and a stable economy, commercial enterprises are able to ensure the Internet is a safe place, or at least that people are safe from the Internet while using it.  However, governments have a tendency to take freedom in exchange for offering security; an offering which may or may not be forthcoming.  In the name of security, things like "the great firewall of China" can be created, which censors available content.  This will certainly reduce the security risks from the outside, but the risk of tyrannical dictatorship from inside is too great for this to be allowed by the people.  Likewise, the push for "back-doors" in encryption is supposedly intended to protect individuals from attackers, while allowing governments and other companies to easily decrypt all data at will, for "security" reasons. Not only is this impractical, as "Back doors" always weaken security over-all (and it is only a matter of time before attackers gain access through the back door as well), but it also gives any number of agencies full access to private information.

==References==

==References==