Malware prevention
The following are some things that can be implemented to prevent or at least slow down the propagation of malware:
- Disabling autoruns for USBs and CD-ROMs
- Removing unused programs and keeping tight controls on allowed applications
- Pre-scanning websites before access or use; for example:
- Using a system that employs a Real-time Blackhole List (RBL) such as Websense or Blue Coat
- Alternatively, when accessing a web page, your personal machine’s antivirus software, such as Avast or AVG, conducts a preliminary scan. It is important to note that this process can potentially slow down the machine due to the resource-intensive nature of the scan.
- Scanning and patching systems on a regular basis; for instance:
- Deployment of patches on a cycle such as Microsoft Tuesday
- Patches of third-party applications such as Adobe, Java, Chrome, and so on
- Patching disclosed vulnerabilities as they become available and monitoring for attempts to exploit these vulnerabilities...
