User manual KASPERSKY LAB NTERNET SECURITY 7.0

[. . . ] KASPERSKY LAB Kaspersky Internet Security 7. 0 USER GUIDE KASPERSKY INTERNET SECURITY 7. 0 User Guide Kaspersky Lab http://www. kaspersky. com Revision date: December, 2007 Contents CHAPTER 1. THREATS TO COMPUTER SECURITY. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Sources of Threats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . How threats spread . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] When running, the IDS blocks all inbound connections from an attacking computer for a certain amount of time, and the user receives a message stating that his computer was subjected to an attempted network attack. The Intrusion Detection System uses a special network attack database (see 12. 1. 3 on pg. 164) in analysis, which Kaspersky Lab adds to regularly, and is updated together with the application databases. Your computer is protected at the application level by making your computers installed applications follow Firewalls application rules for the use of network resources. Similarly to the network security level, the application level security is built on analyzing data packets for direction, transfer protocol, and what ports they use. However, at the application level, both data packet traits and the specific application that sends and receives the packet are taken into account. Using application rules helps you to configure specific protection allowing, for example, a certain connection type to be banned for some applications but not for others. There are two Firewall rule types, based on the two Firewall security levels: Packet filtering rules (see 12. 1. 1. 3 on pg. Used to create general restrictions on network activity, regardless of the applications installed. Example: if you create a packet filtering rule that blocks inbound connections on port 21, no applications that use that port (an ftp server, for example) will be accessible from the outside. Used to create restrictions on network activity for specific applications. Example: If connections on port 80 are blocked for each application, you can create a rule that allows connections on that port for Firefox only. There are two types of application and packet filtering rules: allow and block. The program installation includes rules which regulate network activity for the commonest applications and using the commonest protocols and ports. Kaspersky Internet Security also includes a set of allow rules for trusted applications whose network activity is not suspect. Kaspersky Internet Security breaks down the entire network space into security zones to make settings and rules more user-friendly, which largely correspond to the subnets that your computer belongs to. You can assign a status to each zone (Internet, Local Area Network, Trusted), which determine the policy for applying rules and monitoring network activity in that zone (see 12. 1. 1. 5 on pg. A special feature of Firewall, Stealth Mode, prevents the computer from being detected from the outside, so that hackers cannot detect the computer to attack Protection against network attacks 145 it. This mode does not affect your computers performance on the Internet: you are advised not to use Stealth Mode if your computer is functioning as a server. In addition, numerous programs have emerged that are designed to obtrusively deliver advertising content in web browsers, popup windows, and banners in various programs. However, they boost network traffic and consequently waste the user's time and cause financial losses. In addition, Firewall includes two modules: Anti-Publicity (see 12. 1. 3 on pg. [. . . ] Kaspersky Lab's technical support service is also entitled to demand from the End User additional registration for identifier awarding for Support Services rendering. Until Software activation and/or obtaining of the End User identifier (Customer ID) technical support service renders only assistance in Software activation and registration of the End User. (ii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Lab Privacy Policy, which is deposited on www. kaspersky. com/privacy, and you explicitly consent to the transfer of data to other countries outside your own as set out in the Privacy Policy. Support Services will terminate unless renewed annually by payment of the then-current annual support charge and by successful completion of the Support Services Subscription Form again. [. . . ]