Security Issues Related to Firewalls.

This article focuses on security issues related to personal firewalls in a windows-based home system. Personal firewalls are tools that can be used to enhance the security of computers to a network, such as the Internet. They are equivalent to a home security system and the owner can set the level of security. Firewalls examine each data packet sent to or from your computer to see if it meets a set of criteria, then selectively passes or blocks the packet.

The website Doshelp.com, which features an intrusion detection system and attack-reporting center, points out that although firewalls have their strengths and are an invaluable information security resource, just having a firewall is not enough. At a minimum you should include an anti-virus program. In addition, you should probably include an intrusion detection system to protect against Trojans and port scans. They have also created a web page with vendor direct links to purchase and download products for the home user.

So how do you make your computer as secure as possible? One could argue that decreasing the vulnerabilities of your computer is largely a matter of staying current and private.

A second website META Group Inc., an information technology research, analysis and consulting firm in the United States, identifies six critical areas that must be addressed by organizations. One could argue that home users should also address each of the six areas noted below and select appropriate solutions. The areas critical to security are:

Data Transport encryption is a necessity.
User Authentication - confirmation of the user's identity should be required to 'unlock' the capabilities of mobile-computing devices - ultimately biometrics will have a very strong presence.
Personal/Home firewalling - The use of always-on Internet connections is driving the market for personal firewall software.
Personal Threat Management - emerging personal intrusion detection products should be viewed as necessary and complementary to firewall products.
Data Protection - Use of file/disk encryption products should be considered. As personal devices are increasingly portable and able to access data/networks, they and their contents must be guarded.
Hardware Protection - Physical locking devices or theft-alert mechanisms especially for portable devices.

Home users should have a security management plan and routinely review the areas critical to online security. Symantec "found 35 percent of computers have unknown or unauthorized Internet communication, 44 percent don't have a recent version of an anti-virus product and 79 percent use Web browsers that release information about the site they last visited without the user being aware." Home users need to have a comprehensive security approach.

Other Security Issues related to Personal Firewalls

Always-on Internet

The use of always-on Internet connections presents the need to block unauthorized access from external sources, which could otherwise conduct malicious activities. An Internet Protocol (IP) address identifies a computer on the Internet. Always-on Internet connections use constant or static IP connections, making it easier to identify a computer. Software on a personal computer creates ports to allow specific networking functions (e.g. web access uses port 80, FTP runs through port 21). Once a computer is targeted, a hacker looks for open ports.

Mobile Devices

The use of various devices that interface with your home computer (e.g. laptop, palm, blackberry, cell phone, pager, or other personal digital assistant) are increasingly portable and able to access data / networks. The contents of these devices must be guarded. The use of file / disk encryption products should be considered. In addition to personal data protection, it may be appropriate to protect personal hardware via physical locking devices or theft-alert mechanisms (such as phone-home capabilities). The home user may be required to support many devices and must understand the unique features of all of them. Users will have to revisit the security of Internet-connected devices frequently and have a security management plan.