Home PCs are Latest Hacker Targets

Mishawaka, IN. Firewalls and authentication used to be just for big corporate networks.  Home computers were considered unattractive targets for hackers, due to their limited power and infrequent, slow access to the Internet.

Changes in technology, though, are making home PCs prime targets now.  Perhaps the biggest development has been a growing population of home PCs that have continuous, fast internet connections via DSL or cable modems.  Also, home computers are often as powerful as business computers today, making them better candidates for attacking web sites or for other "hijacked" uses.

User factors come into play, too.  Home PCs rarely receive as much attention as corporate PCs in the area of operating system updates, software patches, and security software.  Hence, they are more vulnerable to exploits that are no longer particularly effective in the business world.  In addition, home users are often less cautious about examining e-mail carefully, and may click on attachments that contain viruses or trojan horses.

Less common, but more dangerous, are exploits that compromise a home PC and enable the hacker to steal personal information.  This could enable the hacker to conduct fraudulent transactions in the user's name or even steal his identity.

Wireless Networks: Convenient for Hackers, Too  

A new threat is the increased adoption of wireless networks.  As many homes become multi-PC environments, they are installing wireless networking equipment as an easy and inexpensive alternative to installing network cabling.  The wireless signal doesn't stop at the walls of the house, however, and a hacker with a notebook computer might be able to park outside the home and access the network.  If users fail to enable encryption or other security features (or even leave passwords set at default values), their home network may be easy to penetrate.  Once a hacker gains access to the homeowner's computers, he can install a trojan horse or other software that makes the computers communicate with the hacker over the Internet.

Implications for Business

A few months ago, when Microsoft revealed that the source code for Windows XP had been accessed by an outsider, they also stated that their network had been compromised via an employee's home PC that was allowed to connect to their network.

It's no longer possible for IT staff to assume that employee home computers have nothing to do with them.  In the past, IT personnel may have had to work to fend off requests for free support for home applications.  Now, the situation is reversed - IT may need to press for a more active role in securing employee computers.  

Using a home PC to access the corporate network isn't the only vulnerability.  Confidential company data used by work-at-home employees could be exposed if their home setup is compromised.

Wireless exposure comes into play here, too.  A home wireless network makes it easy for employees to bring notebook computers home from the office and instantly access their printer and home files.  Unfortunately, if a hacker has gained access to the home network, the laptop could then be compromised and used to infect or access the corporate network.

Dealing with Home Users & Network Vulnerability

The steps needed to secure the home environment differ little from those needed for the office, although the environment is usually far simpler.  A few of the most obvious include:

• Installing a hardware or software firewall
• Installing virus protection software (with updating)
• Making users aware of the dangers of clicking on attachments
• Installing appropriate updates and patches for Windows, e-mail, and application software
• Scheduling periodic reviews of currency of all software
• Checking wireless security if appropriate

For users who are connected to the corporate network via VPN or similar setup, or who routinely carry a notebook computer back and forth, the IT staff should review these issues with the employee if they can't perform the work themselves.  This area represents an area of potential conflict.  While ensuring the home network security of a small number of individuals makes good business sense, there is the risk of creating a support nightmare.  One can certainly imagine an employee's spouse calling in to complain that a game isn't working after Windows was patched.  Each IT department will have to draw careful boundaries, and may instead choose to limit employee network access from home, for example, to avoid the need to secure that environment..

 IT Indiana - Home

- - - - - - - - - - - - - - - - - - - - - - - - - - - -

CompStar Technologies is a leading Indiana-based provider of networking, technology, and communications services. With offices in Mishawaka (serving South Bend, Elkhart, Warsaw, Michigan City, Fort Wayne, Niles, St. Joseph, and Benton Harbor, Michigan) and Indianapolis, CompStar provides network design / support, network security, wireless networking, business telephone systems, VoIP (voice over IP), and cctv / video surveillance systems. CompStar is the Technology Division of Direct Line Communications, headquartered in Mishawaka, Indiana.