Business users of e-speed are encourage to read and understand the security issue of using xDSL. 

Corporate Internet Security White Paper - May 24, 2000 (Microsoft Word File)

Internet Security Issues, March 2000

The recent spate of Denial of Service attacks on popular Web sites like Yahoo!, CNN and Ebay have raised consumers' concerns about Internet security. Shortly, DSL Forum will publish a White Paper on security issues and DSL related solutions. In the meantime, DSL Forum would like to address these concerns specifically for consumers using always-on digital subscriber line (DSL) Internet connections.

DSL offers consumers many benefits such as high-speed connections from 10 to 100 times faster than dial-up, simultaneous voice and data over the same phone line and choice of ISP. DSL also provides consumers with an "always-on" connection, which means consumers can maintain their DSL Internet connections 24 hours a day, seven days a week.

DSL is inherently more secure than other broadband communications, namely cable modem service. DSL is a point-to-point connection between a consumer's home and the telephone company switching office. Cable, on the other hand, is a point-to-multipoint connection that shares network connectivity among homes in a neighborhood, much like a shared LAN. In addition, with DSL each customer has a separate "Private Virtual Circuit," a unique connection that authenticates and secures the communication between the customer's PC and the Internet.

Despite these obvious advantages of DSL, anybody who establishes a dial-up or "always-on" Internet connection incurs some security risk stemming from the duration of the network connection rather than the access method. A number of standard measures are available that users can apply to protect themselves that we list below for reference: 

  • Turn off file and print sharing in Windows
    Turn off the option that lets others look at files and use a printer. To do so, click the Windows ''Start'' button, go to ''Settings'' and select ''control panel.'' In the control panel window, double-click the ''network'' icon. In the network window, click on the ''file and print sharing'' button and uncheck the two checkboxes in the new text box.
  • Set up strong passwords and Virus Scan software
    Make sure that passwords are at least eight characters and include lowercase and capital letters, numbers and special characters such as $@! if allowed by the operating system (e.g. "thisISa$goodpassword!" or even better "d8T$92Erk0" as hackers also can use "word-banks" to construct passwords). Install software that will scan the system for computer viruses that may be received when sharing files with others. Update the virus scan software frequently.
  • Consider a hardware firewall separate from the PC
    Many hardware firewall solutions offered on the market today meet enterprise needs. For consumers, many DSL modems and residential gateways will soon include firewall functionality for protection.
  • Install a software firewall to the PC
    Many quality software firewall programs will effectively protect a PC from hacker attack. Several of these programs are free and others charge a nominal fee. For more information, DSL Forum recommends reviewing Gibson Research's Web site at https://grc.com/x/ne.dll?bh0bkyd2 for information about commercial software firewalls. The site also has a program that quickly checks the security of a computer's connection to Internet. Four common programs are BlackIce Defender at www.networkice.com, ZoneAlarm at www.zonelabs.com, Norton Internet 2000 at www.symantec.com and VirusScan or Guard Dog at www.mcafee.com.

In addition, Windows 98 SE has a feature called "Internet Connection Sharing" (ICS) which allows networked PCs in the home to hide behind a central PC and use its IP address. Thus, with NAT potential hackers cannot see networked devices behind the central PC. Also, shared services (file and print) on the PC running ICS are not accessible from the Internet.

  • Other options: encryption and VPN (Virtual Private Network)
    For protected communication with others over the Internet, consider using encryption software, which will securely encode data and decode it at the receiving end. Also, many companies are beginning to use "Virtual Private Networks," hardware and software solutions that enable corporate users to establish secure tunnels between their homes and their corporate LANs -- perfect for telecommuters.

To sum up, a number of effective solutions protect access to the Internet from unwarranted attacks. But DSL has a number of advantages given the nature of the technology and network architectures developed by DSL Forum. The most important note is that the connection between the user and the Internet is "owned" solely by that specific user: it is secure and provides authentication.

For complete security and firewall solutions for your company, please contact the PC Vendors and System Integrator.

Copyright (c) 2000 by JTB. All rights reserved.