Go straight to page content
JANET CSIRT
ja.net
the UK's education and research network
                  JANET CSIRT front page Reporting abuse E-mail including "spam" Scanning Denial of Service Security advice Very basic measures Security in detail Building safe networks Policies Legislation and regulation The threats to networks Viruses and worms Deliberate attacks Users of the network E-mail abuse About JANET CSIRT External relationships Training and courses Reports and statistics About JANET Contact JANET CSIRT

JANET CSIRT webmaster:
webmaster@csirt.ja.net
JANET(UK) privacy policy
Google Analytics notice
© The JNT Association 2007

Simple security

A few simple things are essential for the security of any network connected to today's hostile Internet.

Up-to-date patches

All software, operating systems and applications, needs regular updates to remove vulnerabilities as they are discovered. These patches should be installed as promptly as possible after they have been properly tested. Particular care needs to be paid to applications for which automatic updating is not practicable; for example, most Web-based applications. You should contact your software vendor for details of when updates are released.

Up-to-date anti-virus

Everyone should use anti-virus software, both on their servers and desktops, to protect themselves from viruses, trojan horses, spy ware and other malicious software. It is essential to keep the product up to date; otherwise it quickly becomes useless and before long provides only an illusion of protection. It is always useful to be familiar with a number of alternative anti-virus software packages and tools in case your primary software fails. You may wish to consider under what circumstances it is no longer useful to attempt to remove malicious software and instead reinstall the system.

Firewall

A firewall partitions one network from another, enforcing a policy on precisely what traffic is allowed to pass between the two networks. More sophisticated (and expensive) firewalls are able to enforce more sophisticated policies and handle higher levels of traffic. Although all do some good, there are many options to be researched when choosing a firewall.

Backup

Not only does a backup of your data protect you from hardware failure but it also protects you from human error and data corruption. Backups should be made often and regularly and tests scheduled so that data can easily be recovered when a real problem occurs.

Logging

Log records of activity on your systems are essential tools for the investigation of an incident after it has occurred. You should configure appropriate, manageable levels of logging and ensure that you have procedures for storing and accessing them while they are current and destroying them after that. JANET CSIRT regularly encounter organizations who have difficulty tracing the origins of network traffic because they do not log network address translations or cannot read the logs, effectively allowing anonymous use (and misuse) of their networks.

Regular examination of logs (which can be partly automated) will often draw attention to issues before they become a serious incident.

There is a separate page of advice on log files: