How much security software do you need?

Most Internet attacks consist of viruses, Trojans or worms -- applications that cause problems in your computer system and often spread themselves by sending bogus emails to everyone in your address book. Viruses can come from a variety of sources, but they mostly arrive via the Internet and email. Antivirus software is designed to deal with these problems by scanning incoming emails, attachments and downloads, then cleaning or deleting any offending files.

Antivirus software is still essential, but it's not always enough. Malicious users, or "black hat hackers," can devise ways to penetrate your computer and search your files for personal and financial information. Without a firewall, any file on your computer may be accessible to strangers.

When you use the Internet, many sites upload adware or spyware to your computer without your explicit permission (or the permission clause is buried within a lengthy end-user license agreement that you did not fully read) to track your browsing and report data to the site. Some spyware and adware can be semi-benign, reporting which websites you visit or which ads you click. However, these programs are always running, which slows your computer. And the worst spyware can hijack your home page or record passwords and keystrokes.

Phishing commonly takes the form of bogus emails claiming to be from financial institutions, stores or even the IRS. Clicking on a link within the email takes you to a fake website that prompts you to "confirm" your passwords, settings or other confidential information. Phishing-based Trojans, or traffic redirectors, involve malicious code that redirects you to fraudulent sites while you're surfing. Phishing can be used to gain access to your financial and personal information, and it can make you vulnerable to identity theft. "In session" phishing -- where a malicious user compromises a legitimate site to mount a customized phishing attack (often through a pop-up window) -- is another problem. 

Installing and using antivirus software, spam filters, spyware blockers and a personal firewall will protect you from the majority of these Internet attacks. Some experts recommend buying only a good antivirus program, using your router's hardware firewall in conjunction with the free firewall included in Windows and relying on free anti-spyware software (see our reports on antivirus, firewall and anti-spyware software for some suggestions). However, many users like the simplicity of Internet security suites, which include all the software you need accessible from one control panel. In addition, Internet security software helps reduce the risk of system conflicts, which can be a problem if you rely on programs from a number of different brands.

Important features: Security software

Internet security software combines several of the most important types of security protections -- including antivirus, anti-spam, anti-spyware and firewall programs -- into one unified package. But choosing a security suite is only one component of a good online safety plan. Experts recommend keeping these factors in mind when selecting and using security software:

  • Though you have security software installed, you must still monitor your Internet behavior. Be careful before clicking on ads or unknown links, and don't open emails or attachments that look suspicious. Scan downloaded files before you open them. News reports often have good coverage of the latest Internet dangers.
  • Disable file- and printer-sharing options if you aren't using these features. Remote file sharing is a common vulnerability that hackers use to access the contents of a hard drive.
  • When choosing Internet security software, be sure to check system requirements. Pick the correct version for your operating system. Most current Internet security suites are compatible with Windows XP, Vista and Windows 7.
  • Consider using Firefox, Chrome or Opera web browsers for most Internet surfing. Experts agree that these browsers offer more security than Internet Explorer, though the current versions -- Internet Explorer 9 for Vista and Windows 7, or Internet Explorer 8 for Windows XP -- have better security features than previous ones. See the ConsumerSearch report on web browsers for more information.
  • Update Internet security software regularly. Be sure your software is set to check automatically for updates. Antivirus software needs to be kept up-to-date with frequently downloaded virus definitions; patches are also routinely issued to fix any security holes.
  • Scan email attachments before opening them, and scan outgoing mail. Although it may slightly slow the sending and receiving of mail, the biggest virus threats still come via email. Scanning outgoing mail is additional insurance that you aren't sending along infected mail. Most programs can do this automatically.
  • Allow automatic Windows updates or frequently check the Microsoft website for security updates and patches to the Windows operating system. It doesn't take long for hackers to exploit newly discovered vulnerabilities in Windows operating systems, and keeping your system up-to-date is the best foil.
  • Look for software with a multi-PC license if you have more than one computer to protect. Many Internet security suites are offered in versions that allow them to be installed on more than one computer. If you need protection only for one computer, however, slightly less expensive versions that can be installed only on a single machine are usually available as well.

Back to top