Defensive computing
Defensive computing is a set of practices that computer users can use to reduce their risk of computer security problems. The goal of this method of computing is to anticipate and prepare for potentially problematic situations prior to their occurrence, despite any adverse conditions of a computer system or any mistakes made by other users. This can be achieved through adherence to a variety of general guidelines, as well as the practice of specific computing techniques. Defensive computing includes protecting information privacy. Both defensive computing and cybersecurity awareness are approaches that individual computer users can use to reduce risks.
The term defensive computing is an analogy to defensive driving. It was most commonly used in the 2000s and 2010s, before the software industry shifted to building better user protections into software by default, including by applying the concepts of usable security and secure by design.
01Strategies
Network security
A commonly recommended defensive computing strategy is to implement firewall software that filters both inbound and outbound traffic, as a network security measure that protects a computer from harmful inbound and outbound traffic on the Internet and reduces the risk of the unauthorized access of computer systems. As of 2023, most operating systems include built-in firewall features.
Anti-malware practices
A core strategy recommended for defensive computing was to install and use antivirus software, especially for Microsoft Windows computers. However, recommendations related to defensive computing noted the limitations of antivirus software and suggested additional ways of reducing risk, such as using a user account with limited permissions or a Chromebook. Microsoft Windows eventually built in Windows Defender, an antivirus tool.
Other common recommendations include keeping software up to date. In the 2000s, another recommendation was to disable AutoRun feature from USB flash drives, because some viruses, especially worms, could spread automatically through USB flash drives.
Skepticism
An important aspect of defensive computing is for users to be skeptical. Malicious software can exist in a multitude of different forms and many are misleading to general computer users and even some anti-malware software. Defensive users think critically about the information they can access, to reduce their chances of downloading and spreading malicious software. Strategies include scanning email attachments prior to opening them and manually filtering suspicious emails from inboxes. Users should be aware of persuasive subject lines and headings in emails from any address, as they may actually contain malicious software or spam, which can mislead users into false advertisement resulting in identity theft. Defensive users can scan files they download prior to opening them and can also configure their computers to show file extensions, revealing potentially dangerous files that appear harmless. Skepticism can also be applied to the websites visited by users.
Data backups
Despite the efforts of a defensive computer user, the loss of important data can occur due to malware, power outages, equipment failure and general misuse. Although the loss of data cannot be completely prevented, defensive users can take steps to minimize the amount of data lost and restore systems to their previous state by backing up their data.
Sources and credits
This article is adapted from the Wikipedia article “Defensive computing”, written by its contributors and licensed under CC BY-SA 4.0. Fathomly has changed the layout, removed citation markers, navigation and maintenance notices, and adjusted punctuation. This adapted version is shared under the same license. For references, see the original article.
Fathomly is not affiliated with or endorsed by the Wikimedia Foundation. Spotted a problem? Tell us.