Quoting from a survey performed by the National Cyber Security Alliance (NCSA):
* While 81 percent have a firewall installed on their computer, only 64 percent actually activated this anti-hacker protection. * While 70 percent of respondents say they have anti-spyware software, 55 percent actually did. * While 27 percent say they have anti-phishing protection, 12 percent actually do.
I once heard that there were two ways to secure a PC: 1) take it apart and lock the pieces in separate vaults, or 2) buy it lots and lots of life insurance. Look. Don’t expect that shiny new PC you just brought home from Wal-Mart to be secure. Security isn’t something you can buy one time, and then when asked, claim you have it. Security is a process, a behavior; it’s vigilance and a knowledge of what’s happening. Security requires that you pay attention. PCs are not secure by design, and I doubt they ever will be. Until we change the way we do business, the software will remain insecure as well (there is little or no incentive for a company to secure their product). That leaves it up to the consumer. Sadly, there seems to be a direct inverse relationship between the malware author’s skills and abilities and those of the consumer (witness the success of the storm worm).
