Stay alert to information security during the festive season
23 - 12 - 2003

Computer users are reminded to adopt wise practices to protect themselves from cyber attacks, particularly during the festive season.

Festivals like Christmas and New Year are usually high-risk periods for virus outbreaks and hacker attacks. Viruses or malicious programs may be disguised as seasonal greetings.

"Our concern about information security should reflect the fact that information technology has become an indispensable part of life and we are increasingly dependent on IT applications," a spokesman for the Information Technology Services Department said.

In the highly interconnected information world, no individual or enterprise can be completely immune from cyber attacks. Information security is everyone's business.

"By adopting some basic principles and measures, we can effectively protect our computers from a lot of cyber attacks," the spokesman said.

One of the most important measures is to keep computers updated with the latest virus signatures and software security patches.

In view of the number of fraudulent bank and financial websites discovered recently, computer users should be particularly wary of e-mail that contains links to websites requiring them to enter personal and financial data.

Never follow links from untrusted sources, which could possibly lead to security attacks, computer virus infection or even identity or account information theft.

Spamming is another area where increasing attention should be paid as it may sometimes carry viruses or malicious programs. Computer users are suggested to ignore and delete spam mails, or use e-mail filtering software to block or screen out spam. They should not reply to such mail because it may only result in their receiving even more spam.

Some general computing DOs and DON'Ts:

DOs

• Do install anti-virus software and scan personal computers (PCs) regularly using the latest virus signatures;
  
• Do scan all e-mail attachments, downloaded files, floppy disks and compact disks before use;
  
• Do keep PC operating systems and software up-to-date with the latest security updates and patches;
  
• Do perform online transactions only at reliable websites that offer security protection, such as use of encryption, Secure Sockets Layer (SSL) or Secure Electronic Transaction (SET) techniques;
  
• Do choose passwords that are difficult for others to guess, and change them regularly;
  
• Do enable the password function for screen savers and power-on sequences;
  
• Do back up your programs and data regularly; and
  
• Do disconnect your computer from the Internet when it is not in use.
  

DON'Ts

• Don't visit suspicious websites;
  
• Don't download files from doubtful sources;
  
• Don't open or forward suspicious e-mails and e-mail attachments. Delete them immediately;
  
• Don't enable automatic processing of e-mail attachments;
  
• Don't disclose or submit personal information unnecessarily;
  
• Don't use system default passwords;
  
• Don't save login passwords into PCs;
  
• Don't disclose Internet accounts and passwords to others or share accounts with them; and
  
• Don't use illegal software.
  

To assist the public in obtaining information and updates on information security, the department has set up the INFOSEC website (www.infosec.gov.hk) which contains specific tips on how to handle e-mails and passwords, use software, surf the Net and conduct e-shopping, etc.

By visiting the INFOSEC website regularly, computer users can keep pace with developments in information security and learn how to be smarter computer users.

- END -