3 Minutes Guide to Protect Your PC

• Rule #1
  Never run anything on your PC unless you know what it is and how to configure it securely

• Rule #2
  Disable all unnecessary functions on your PC. E.G. Turning off the "file sharing" function in the Control Panels menu, if you do not need to share any file with anyone.

• Rule #3
  Keep anti-virus software active on your computer at all times. Use it to scan any software you intend to install on your PC, and schedule regular sweeps of your hard drives. Check your antiviral vendor's Web site for updates at least once per month

  You may download the PC-cillin anti-virus software at http://avserver.csc.cuhk.edu.hk/avweb/download.html#t2

• Rule #4
  Never open any file e-mailed by a stranger, and if a friend sends an UNEXPECTED ATTACHMENT, drop them a line to confirm before opening it

• Rule #5
  Disable java, javascript, ActiveX in your web browser. (e.g. In IE, choose Tools -> Internet Options -> security) Only enable it when you really need to at some "trusted" web pages.

• Rule #6
  Keep your software (especially your web browser and mail tool) up to date with the latest patches.

  You may check the latest patches of various windows products at http://updates.zdnet.com/essential_updates.htm

• Rule #7
  Do not send any sensitive information (e.g your credit card no.) on web unless you are using a secure connection (e.g. SSL) and you are sure about the identity of the web site (e.g. have valid web server cert). And, always look for a lock icon in your browser and an "https://" prefix in the URL.

• Rule #8
  Do not remote login any host unless you are using secure connection. (e.g. SSH) All our workstations and login gateways are SSH supported. You can download a SSH client from http://gateway.ie.cuhk.edu.hk/

• Rule #9
  Do not download any software from ftp sites, web sites or newsgroups unless
  1. you know what it is and how to configure it securely
  2. it is from the trusted source (e.g signed by a trusted party)
  3. its integrity is preserved (e.g. MD5 check)

• Rule #10
  Do not send any sensitive information via e-mail unless you encrypt it

  You may use the CUHK CA service ( http://www.cuhk.edu.hk/ca/) to encrypt or sign your mail.

  If you are still very concerned about your PC security, you may install some personal firewall and intrusion detection system (IDS) for your PC. (see the analysis report at http://securityportal.com/articles/pf_main20001023.html ) However, it may cost you some effort to install and configure it properly.