After reviewing the Internet Security Threats – Its Changing Faces (Part 2) from My E-Commerce blog, I try to figure out the information about the internet security threats and I found that many experts have predicted that rootkit malware will soon be thought of as equally troublesome as viruses and spyware. Rootkit malware will become more common and their sources will be more surprising.

A rootkit malware allows someone either legitimate or malicious to maintain command and control over a computer system. Rootkit malware can disrupt the computer systems without the computer system user knowing about it.

Mostly, rookit malware is used by attackers or spies to infiltrate and monitor the computer systems. Beside that, they will install rootkit malware by spreading with a malware threat such as virus.

Prevention Method:

1. Don't accept files or open email file attachments from unknown sources
2. Search and check the computer system memory
3. Keep abreast of the latest antivirus and malware protection software from leading antivirus and security vendors
4. Update your firewall protection
5. If possible, harden the workstation or server against attack
6. Choose the right rootkit detection tool
   • Eg: Sysinternals' RootkitRevealer, F-Secure BlackLight, Sophos Anti-Rootkit, and Rootkit Hook Analyzer.

Sysinternals' RootkitRevealer

F-Secure BlackLight

~For more information, please refer to following websites:

http://www.computerweekly.com/Articles/2007/07/03/224064/rootkit-and-malware-detection-and-removal-guide.htm

http://netsecurity.about.com/od/frequentlyaskedquestions/f/faq_rootkit.htm

MSC Trustgate.com Sdn Bhd is one of the licensed of Certification Authority (CA) in Malaysia since 1999 under the Digital Signature Act 1997 (DSA). They offer complete security solutions and leading trust services that are needed by individuals, enterprises, government, and e-commerce services providers using digital certificates, encryption and decryption. The goal of Trustgate enables the organizations to conduct their business securely over the Internet, as much as what they have been enjoying in the physical world.

The application of 3^rd party certification programmes includes SSL Certificate, Managed PKI, Personal ID, MyTRUST, MyKAD ID, SSL VPN, Managed Security Services, VerSign Certified Training, and Application Developmrnt in the Trustgate.

The applications of MyKad are included as follows:

1. National Identity Card: MyKad will replace the traditional paper based laminated document to provide extra security and access future to future E-government application.

2. Driving License: Any Malaysians will only need to have their MyKad instead of a separate driving license as identification document. It reduces the wastage of resources and increases the processing speed.

3. Passport Information: MyKad does not replace passport for travelling oversea. However, it can help to increase efficiency at immigration check-points for exit and re-entry of Malaysians.

4. Medical Information: Medical history will be stored in the chip of the smart card. It allows for immediate and accurate diagnosis of disease.

By using a Certificate Authorities (CA), online users could perform secure transaction and communications through the internet. As a result, integrity and the authenticity of the information is preserved and protected from anyone.

Other information sharing:

Besides that, Digicert is a joint venture company between POS MALAYSIA Berhad and MMOS Berhad. It was incorporated in February 1998 to pursue its objective as a premier licensed Certification Authority (CA).

It is in the center of an effective trust model that the government is creating to address the issue of information security such as digital signatures, encryption, and the infrastructures to support their use are becoming essential for further growth of E-business in Malaysia.

Phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by concealing as a trustworthy entity in an electronic communication.

It is usually done by sending fake emails and redirecting unsuspecting users by using fake websites which the URL will use legitimate form like email address, logos and link of reputable business such as SunTrust, eBay, Citibank, Chapter One Bank, PayPal and IRS Tax Refund in the message.

The examples of phishing scam are as follows:

Ebay

Trusted Bank

Citibank

The ways to prevent phishing scam:

1. Check where the email comes from
   • Checking the sender of the email. If the email address is not the domain of a legitimate bank/service, then it is certainly a phishing scam


2. Do not follow a “click here” link in the email
   • The email will contain the link which named as “Click here” or link which may re-enter to your user information. Please measure whether the link is meeting to the legitimate website or content before you click on it.


3. Check contact information provided in the email
   • Double check the contact information by using your recorded contact information such as phone number, fax number and address of that company to the email.


4. Check your personal information that provided in the email
   • You can check out the information that stated in the email by figuring out whether it suits your original information such as when you register for this website or account.


5. Make sure a site's URL as listed in the browser is legitimate
   • Verify the legitimacy of a web address with the company directly.


6. Avoid filling out forms in e-mail messages

~For more information, please refer to following websites:

http://www.privacyrights.org/ar/phishing.htm

http://antivirus.about.com/od/emailscams/ss/phishing_8.htm

http://chris.pirillo.com/top-five-ways-to-prevent-phishing

http://en.wikipedia.org/wiki/Phishing

Virus…!!! It’s scary…!!! Online security issues always become the major concern of most of the computer users in protecting their data from losses. For me, I experienced once. My computer was attacked by virus one day before my assignment due date. Have you ever experienced it before???

Online security threat is any danger software that can damage the computer system. It is obviously one of the biggest challenges on internet in today IT world. There are several potential threats to online security that can create possible attacks on personal computer. These threats are listed as below:


(1) Computer Viruses:

• A small computer program that copies itself & spreads it from one computer to another computer without the knowledge of the computer owner.
  


• Such viruses can be infected easily through E-mail attachment, USB drive, CD, & floppy disks.
  
  
  
  

(2) Torjan Horses:

• A program that contains hidden function that carry security risk
  


• Designed to allow hacker remote assessing to a target computer system

• Deletion of files and keystroke logging can be caused by Trojan Horses
  

(3) Denial of Service (DOS):

• Attempt to make a computer resource unavailable to its intended users
  
  
• DOS criminal will normally target sites or services hosted on high-profile web servers such as banks and credit card payment gateways
  
  
  
  
  

• Acquired users’ personal & financial information such as credit card details through acting as a trustworthy entity in an electronic communication



• Collect information through fake websites



• Most likely carried out by instant messaging or Email

(5) Worm:

• A self-replicating computer program that sends copies of itself to other codes until it interrupts the operation of a computer network.



• The transfer of computer worm can be done without any interventions of the computer users

~Effects of online security threats:

• Confidential information might be loss or damaged
• Computer & network can be harmed
• Theft of intellectual property will be increased
• More people will involve in cyber crime
• Copyright material such as music and videos will be illegally used

~ Looming Online Security in 2008:

Research shows that famous social networks such as Facebook & MySpace are most common targets for hackers to obtain users’ sensitive information. Hackers will turn their attention into these social network websites as majority of the internet users like to display their personal information on these websites.

~ Conclusion:

From our point of view, we think that online security threats not only can destroy users’ data, but it also able to harm the users’ computer. As a result, safeguards such as backup procedures & firewall should be developed & updated in order to strengthen the defenses against the threats.

~ Video:

Crazy Virus Can Harm Our Computer!!!

~ Related Website Links:

• Major Online Security Threats
• What Are The Main Online Security Threats?
• Looming Online Security Threats in 2008