Choosing Security Software

How much security software do you need?

You've undoubtedly read that Windows Vista has improved and enhanced security features. Reviews confirm that, but Vista includes no protection against viruses and offers few of the other protection components found in suites. The one notable exception is parental controls. Vista's protection is similar to what suites offer. Both Vista and Windows XP include rudimentary firewalls. Reviews say they are better than no software firewall, especially when coupled with a hardware firewall (such as in a router). Windows Defender, Microsoft's anti-spyware software, is included in Vista and is a free download for XP users. Experts recommend using several anti-spyware programs, because they each catch malware that others don't, and Windows Defender is far less likely to cause conflicts than third-party applications. However, reviews agree that Windows Defender is not one of the more effective defenses against malware overall. So even if you have a new computer with Windows Vista, experts say you still need at least antivirus software and a supplementary anti-spyware program.

Most Internet attacks used to be viruses, Trojans or worms -- applications that caused problems in your computer system and often spread themselves by sending bogus e-mails to everyone in your address book. Viruses often come from unsuspecting sources; even some music CDs inadvertently inflicted viruses. Antivirus software is designed to deal with these problems by scanning incoming e-mails, attachments and downloads for problems, then cleaning or deleting the offending files. Antivirus software is still essential, but it's no longer enough. When you use the Internet, many sites download adware or spyware to your computer to track your browsing and report data to the perpetrator.

Malicious users, or "black hat hackers," can devise ways to penetrate your computer and search your files for personal and financial information. With identity theft a growing problem, protecting your computer from this kind of threat is urgent. Any file on your computer may be accessible to strangers. This is why you need a firewall.

Most security and privacy threats come from spyware, adware and phishing. According to Consumer Reports' most recent "State of the Net" survey, infection rates by both viruses, and spyware diminished in 2008, but all still present a significant threat to users. Spyware and adware are small programs that can be installed on your computer without your explicit permission (or the permission clause is buried within a lengthy end-user license agreement that you did not fully read). Some spyware and adware can be moderately innocent, reporting which websites you visit or which ads you click. However, these programs are always running, which slows your computer. The worst spyware can hijack your home page or record passwords and keystrokes. Consumer Reports cites statistics showing the damage caused by malware to computers owned by individuals and businesses. The magazine reports that more than half a million people replaced their computers in the preceding six months because of spyware infections.

Phishing commonly takes the form of bogus e-mails from financial institutions, stores or even the IRS. Clicking on a link within the e-mail takes you to a fake website that prompts you to "confirm" your passwords, settings or other confidential information. Phishing-based Trojans, or traffic redirectors, involve malicious code that redirects you to fraudulent sites while you're surfing. Phishing can be used to gain access to your financial and personal information, and it can make you vulnerable to identity theft. According to ScanSafe's latest STAT Security brief, which compares the security situation on the web in May 2007 with that in May 2008, malware is increasingly being hosted on unsuspecting legitimate sites. "In session" phishing -- where a malicious user compromises a legitimate site to mount a customized phishing attack (often through a pop-up window) -- is a growing problem.

Installing and using antivirus software, spam filters, spyware blockers and a personal firewall will protect you from the majority of these Internet attacks. Some of these protections may already be offered by your ISP, so you might not need something as extensive as an Internet security software suite. Some experts recommend buying only a good antivirus program, using your router's hardware firewall in conjunction with the free firewall included in Windows, and relying on free anti-spyware software, such as Windows Defender (though experts also say that some commercial anti-spyware software is more effective). All programs covered in this report are compatible with Windows Vista and XP.