• On MovieTome: See the villain of IRON MAN 2!
October 2, 2008 1:18 PM PDT

People can do more to guard against ID theft, says group

by Stephanie Condon

As the federal government makes efforts to protect citizens online, it is encouraging people to look out for themselves as well.

To kick off its fifth annual "National Cyber Security Month," the National Cyber Security Alliance, an organization of government, academic, and industry representatives, paired with Symantec to release the results of a national poll on Thursday showing Americans do not feel very safe online, yet they believe they are more protected than they actually are.

Just 26 percent of respondents said they felt their computers were "very safe" from viruses, and 21 percent felt their computers were "very safe" from hackers.

"We might be making it too difficult for people to feel safe," said Michael Kaiser, the director of the NCSA. "We need simple tips stripped of the jargon."

The report was released on the heels of a new law signed by President Bush last week that increases penalties for hacking and other cybercrime charges. Rolled in with an amendment to provide Secret Service protection to former vice presidents, the Identity Theft Enforcement and Restitution Act makes it a felony to damage 10 or more protected computers used by the federal government or a financial institution.

It also allows federal prosecutors to bring cybercrime charges against a person without having to meet any threshold for damages caused by the crime. In cases where an identity thief is ordered to pay restitution, the law calls for the victims to be compensated for the time they spent trying to remediate the damage.

The cybercrime provisions in the law "constitute some of the most significant laws so far" to protect people online, said Adam Rak, senior director for public awareness from Symantec. "Ultimately, though, the responsibility falls on all of us."

Rak said the three basic tools critical for keeping the average user safe are antivirus, antispyware, and firewall software.

Yet the NCSA study, which combined a survey of more than 3,000 Americans with an evaluation of 400 personal computers belonging to those surveyed, showed that most people do not have all three components.

"Just having anti-virus software is not enough," Rak said. "Picture a car with antilock brakes, airbags, and seat belts--I doubt any of us would buy a car without seat belts installed."

Just over 80 percent of respondents had antispyware protections enabled, and 95 percent had updated antivirus software. Yet just 50 percent had antiphishing protections.

Even though 81 percent of respondents said they had firewall protections on their computers, only 42 percent of those computers checked were actually equipped with them. As many as 75 percent of respondents thought they had antispam filters installed when, in fact, only 58 percent actually did.

Originally posted at Security
Stephanie Condon is a staff writer for CNET News focused on the intersection of technology and politics. She is based in Washington, D.C. E-mail Stephanie.
Recent posts from Politics and Law
Report: Guilty verdict overturned in MySpace suicide case
Court: MySpace not liable for offline assaults
New dashboard shows where federal IT tax dollars go
China delays rule for Net-screening software
Amazon positioned to win state tax battle
NY mayor: Info to the people will improve gov't
E-mails indicate EPA suppressed report skeptical of global warming
Pirate Bay judge ruled unbiased
Add a Comment (Log in or register) (3 Comments)
  • prev
  • 1
  • next
by skswave October 2, 2008 1:59 PM PDT
We also need to get tot he root cause of Identity theft Passwords and it is time to make them go away. With 250 million PCs with ahardware security Chip called a TPM trusted Platform Module it is time to put pressure on the major service providers to enable thier services like Yahoo Mail to support strong authentication. This technology which is similar to the security chip in your cell phone that keeps your cell bill safe from being hacked is capable of securing access to all web sites. The user logs into their PC and then the PC logs you into all of your sites. With a common industry standard technology available it is time to enable this capability for every site.

Steven Sprague
Wave Systems Corp
Reply to this comment
by Solaris_User October 2, 2008 2:24 PM PDT
Ya know, I'm not really ready for a chip that controls what my computer can run and what it can talk to.

Microsoft came out with this idea a long time ago, I think it was called Palladium.. it was a bad idea then and its a bad idea now.

Although I agree on encryption. All websites and all e-mail should be encrypted always.
Reply to this comment
by DanLents October 2, 2008 4:55 PM PDT
Actually collecting restitution from your identity theft would be very satisfying. It may be difficult to realize this benefit but I'm glad the law is in place for victims lucky enough to see their thieves punished in the courts.

The war against identity theft is fought through many small victories.

Knowledge, awareness, and detection are our best defenses.

www.IdTheftAwareness.com
Reply to this comment
(3 Comments)
  • prev
  • 1
  • next
advertisement

Making sense of Windows 7 upgrades

faq The basics and the fine print on Microsoft's options for those eyeing the next operating system from Redmond.
• Full Windows 7 coverage

Road Trip 2009: Big Sky Country

CNET News reporter Daniel Terdiman takes his car full of gadgets to the Rockies and the Great Plains in search of tech, science, nature, and more.
• America's Fortress: Cheyenne Mountain

About Politics and Law

News at the intersection of technology, politics, and law, ranging from intellectual property to censorship to tech policy.

Add this feed to your online news reader

Politics and Law topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right