Introduction Security Policy Information Management Password Management Virus, Worms & Trojans E-mail & Internet Usage Security in our Organization
   

Email Security

 
Internet Security  
  Browser Security


 
Browser Security


Your internet browser (such as internet Explorer, Netscape, etc.) comes with pre-configured settings that may be too liberal. Therefore, you should make some changes to these default or pre-configured settings with a view to enhancing security. There are various versions of Windows, Linux, etc., similarly there are various versions of the browsers such as Internet Explorer, Netscape, etc. Each of these browsers has security enhancements that may not be found in the other or in previous versions.

Cookies

No, not the kind that you can eat. These are virtual cookies—small text files that web sites can create on your computer to store information gathered about your visit to the site including, where you went, what you did, and any personal information you gave. Web sites may also allow other web sites (their advertisers, for example) to place cookies, known as third-party cookies, on your computer.

Cookies are a necessary part of using the Web. Web sites use the information in cookies to deliver personalized content (local news and weather, hot sales, and so on), to complete transactions (for online banking or shopping, for example), and to gather demographic data. However, a web site only has access to personal information that you provide; otherwise, it only records the steps you have taken on the site, so you remain anonymous.

Most of the times, such transfer of information is harmless. Generally, cookies themselves cannot ‘execute' anything malicious. The greatest fear is that they can store little pieces of information about your preferences. When taken together, this information about your browsing habits can reveal more about you than you would care to divulge to strangers!

Web servers can create and store two types of cookies on your hard drive: permanent and temporary. Temporary cookies are also referred to as “session” cookies.

Browser Security : Do's

Ensure that all workstation and browser client software is preconfigured to return all WWW and other external file transfers to temporary files on the desktop.

Ensure that JAVA script is turned off in the browser client software desktop configuration.

Configure browser client software to automatically flush the cache, either upon closing the browser or disconnecting from each Web site.

Make sure that the Antivirus product installed on your system automatically scans internet downloads for viruses.

Configure settings in your browser to allow temporary time bound cookies and block permanent cookies.

Configure the amount of space allocated on your Hard Drive for storage of such cookies.

Configure your browser to empty the temporary internet folder upon exit. To do this,

Click Tools | Internet Options | Advanced tab.
Scroll down to Security sub-settings.
Check the box beside “Empty the temporary internet files folder when browser is closed”.
Click Apply.
Click OK.


Deleting cookies: If you believe a web site has placed a cookie on your computer that you do not want, you can delete it. When you change how Internet Explorer handles cookies, the new privacy settings might not apply to cookies that are already on your computer. To make sure that all the cookies meet your new settings, you can delete all existing cookies.

Don'ts

Under no circumstances should client server applications or process-to-process automated routines download files to system files, preference files, bat files, start-up files, etc.

Ensure you do not compromise anytime below the Medium level of privacy. You may further restrict the use of cookies putting it above the medium level of privacy. But under no circumstances be liberal in setting browser settings which accepting all kinds of cookies.

Ensure that you do not allow Active content from CDs or files to run on your system.

The widely used browser in our company is Microsoft Internet Explorer version 6.

When you first install Internet Explorer, it puts all web sites into a single zone—the Internet zone—and stands guard with a medium level of security. This helps you browse securely, but should prompt you before downloading potentially unsafe content.

Internet Explorer also offers three other zones, including trusted and restricted zones, where you can assign web sites that you trust completely or that arouse your suspicion.


Settings within Internet Explorer 6 can be modified to improve your level of security while browsing. Most of these settings are simple, such as limiting the space allocated to temporary files, which by default allows a rather large percentage of space to be used for this purpose. Internet Explorer sets a medium level of privacy when you first install it. This privacy setting allows the use of cookies with some restrictions—for example, it blocks certain third-party cookies.
   
 
Security Awareness Program Disclaimer