October 2, 2008 1:18 PM PDT

People can do more to guard against ID theft, says group

by Stephanie Condon
  • Font size
  • Print
  • 3 comments

As the federal government makes efforts to protect citizens online, it is encouraging people to look out for themselves as well.

To kick off its fifth annual "National Cyber Security Month," the National Cyber Security Alliance, an organization of government, academic, and industry representatives, paired with Symantec to release the results of a national poll on Thursday showing Americans do not feel very safe online, yet they believe they are more protected than they actually are.

Just 26 percent of respondents said they felt their computers were "very safe" from viruses, and 21 percent felt their computers were "very safe" from hackers.

"We might be making it too difficult for people to feel safe," said Michael Kaiser, the director of the NCSA. "We need simple tips stripped of the jargon."

The report was released on the heels of a new law signed by President Bush last week that increases penalties for hacking and other cybercrime charges. Rolled in with an amendment to provide Secret Service protection to former vice presidents, the Identity Theft Enforcement and Restitution Act makes it a felony to damage 10 or more protected computers used by the federal government or a financial institution.

It also allows federal prosecutors to bring cybercrime charges against a person without having to meet any threshold for damages caused by the crime. In cases where an identity thief is ordered to pay restitution, the law calls for the victims to be compensated for the time they spent trying to remediate the damage.

The cybercrime provisions in the law "constitute some of the most significant laws so far" to protect people online, said Adam Rak, senior director for public awareness from Symantec. "Ultimately, though, the responsibility falls on all of us."

Rak said the three basic tools critical for keeping the average user safe are antivirus, antispyware, and firewall software.

Yet the NCSA study, which combined a survey of more than 3,000 Americans with an evaluation of 400 personal computers belonging to those surveyed, showed that most people do not have all three components.

"Just having anti-virus software is not enough," Rak said. "Picture a car with antilock brakes, airbags, and seat belts--I doubt any of us would buy a car without seat belts installed."

Just over 80 percent of respondents had antispyware protections enabled, and 95 percent had updated antivirus software. Yet just 50 percent had antiphishing protections.

Even though 81 percent of respondents said they had firewall protections on their computers, only 42 percent of those computers checked were actually equipped with them. As many as 75 percent of respondents thought they had antispam filters installed when, in fact, only 58 percent actually did.

Originally posted at Security
Stephanie Condon is a staff writer for CNET News focused on the intersection of technology and politics. She is based in Washington, D.C. E-mail Stephanie.
Recent posts from Politics and Law
'Don't-be-evil' Google spurns no-evil software
White House appoints cybersecurity chief
U.S. cap and trade looks out of reach in 2010
FTC's new strategy: Kick 'em when they're down
Plurk holding Microsoft's feet to code-copying fire
FTC wants Intel to mend its ways
Biden to unveil $2 billion in broadband grants
FTC pursues Intel on new front: Graphics chips
Add a Comment (Log in or register) (3 Comments)
  • prev
  • 1
  • next
by skswave October 2, 2008 1:59 PM PDT
We also need to get tot he root cause of Identity theft Passwords and it is time to make them go away. With 250 million PCs with ahardware security Chip called a TPM trusted Platform Module it is time to put pressure on the major service providers to enable thier services like Yahoo Mail to support strong authentication. This technology which is similar to the security chip in your cell phone that keeps your cell bill safe from being hacked is capable of securing access to all web sites. The user logs into their PC and then the PC logs you into all of your sites. With a common industry standard technology available it is time to enable this capability for every site.

Steven Sprague
Wave Systems Corp
Reply to this comment
by Solaris_User October 2, 2008 2:24 PM PDT
Ya know, I'm not really ready for a chip that controls what my computer can run and what it can talk to.

Microsoft came out with this idea a long time ago, I think it was called Palladium.. it was a bad idea then and its a bad idea now.

Although I agree on encryption. All websites and all e-mail should be encrypted always.
Reply to this comment
by DanLents October 2, 2008 4:55 PM PDT
Actually collecting restitution from your identity theft would be very satisfying. It may be difficult to realize this benefit but I'm glad the law is in place for victims lucky enough to see their thieves punished in the courts.

The war against identity theft is fought through many small victories.

Knowledge, awareness, and detection are our best defenses.

www.IdTheftAwareness.com
Reply to this comment
(3 Comments)
  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Politics and Law

News at the intersection of technology, politics, and law, ranging from intellectual property to censorship to tech policy.

Add this feed to your online news reader

Politics and Law topics

advertisement
advertisement
Click Here

Inside CNET News

Scroll Left Scroll Right