Home > Ask the Security Experts > Network Security Questions & Answers > Do good passwords make it safer to do banking on an open connection?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Do good passwords make it safer to do banking on an open connection?

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 15 July 2008
If you have set up a strong password on your laptop with DSL, is it safe to conduct financial, banking and other business over the Internet on an open connection in hotels, cafes, camp sites, etc?

>
The strength of your password actually has little to do with the security of your computer on a home DSL network. It's far more important to follow some simple tips:

  • Ensure that all of the connections you make to banks, financial institutions and other sensitive locations are encrypted. The easiest way to do this is to verify that the Web address begins with "https." This secure protocol prevents others on the same wireless network from viewing your communications.
  • Enable your firewall so that it blocks all inbound connections. If you're using the Windows Firewall, you'll want to check the "Don't Allow Exceptions" box. This setting prevents anyone on the network from connecting directly to your computer.
  • Verify that you have current antivirus and antispyware software installed on your computer.

With all of these countermeasures in place, your password strength only protects you against a casual thief pecking away at your keyboard when you're not watching. If you're worried about someone sneaking away with your computer (and your data!), you should consider using a disk-encryption product. Microsoft includes an encryption feature called BitLocker in its Windows Vista OS.

More information:

  • See how Windows BitLocker enables disk encryption for better data protection.
  • A reader recently asked Mike Chapple, "What are the best ways to hide system information from network scanning software?" (Login required)


  • BROWSE BY TAG
    Network Security,   Network Security: Tools, Products, Software,   Network Firewalls, Routers and Switches,   Enterprise Network Security,   Password Management and Policy,   Enterprise Identity and Access Management,   Identity Management Technology and Strategy,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Network Security
    How to set up a split-tunnel VPN in Windows Vista
    What is the difference between static and dynamic network validation?
    Port scan attack prevention best practices
    Securing the intranet with remote access VPN security
    How to prevent network sniffing and eavesdropping
    How to implement virtual firewalls in a complex network infrastructure
    How to manage network bandwidth with distributed ISP bandwidth
    How to edit group policy objects to give a user local admin rights
    How to prevent operating system cloning with AES 256-bit encryption
    How to securely connect a LAN POS to a remote point-of-sale device

    Network Firewalls, Routers and Switches
    Best Network Firewall Products
    What is the difference between static and dynamic network validation?
    Screencast: Smoothwall offers firewall defense in lean times
    New Cisco IOS bugs pose tempting targets, says Black Hat researcher
    How to implement virtual firewalls in a complex network infrastructure
    How to manage network bandwidth with distributed ISP bandwidth
    Firewall rule management best practices
    Should enterprises be running multiple firewalls?
    What are the disadvantages of proxy-based firewalls?
    IT pros find corporate firewall rules tough to navigate

    Password Management and Policy
    Two-factor authentication, vigilance foil password theft
    Group to shed light on secure identity management threats
    Brute force attacks target Yahoo email accounts
    Best Identity and Access Management Products
    Privileged account management critical to data security
    Making the case for enterprise IAM centralized access control
    How to prevent brute force webmail attacks
    Best practices for a privileged access policy to secure user accounts
    Mature SIMs do more than log aggregation and correlation
    PCI compliance requirement 2: Defaults

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    bastion host  (SearchSecurity.com)
    firewall  (SearchSecurity.com)
    Firewall Builder  (SearchSecurity.com)
    screened subnet  (SearchSecurity.com)
    virus  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts