User Guide

Product Guide 111
Internet Security and Privacy
Security on the Web
One of the most exciting Web developments is the evolution of downloadable,
executable programs. Java and ActiveX are two tools that help developers
create programs that can “live” inside Web pages, and use your Web browser
to automatically run over the Internet. Java allows Web pages to host small
programs called “applets.” When Java-enabled browsers access a Web page
containing Java, they automatically download and run the applets they find
on the page. This is an intriguing development, since it makes it possible to
download and run programs over the Web. Complete, Web-driven programs
written entirely in Java are on the horizon. ActiveX is a similar technology,
developed by Microsoft.
Java contains an internal security system that addresses security risks. ActiveX
uses a different model, based on certificate authentication. Certificates contain
information about who developed the ActiveX code. The idea here is that if
you know who developed the code, it is safe to run it. Both security schemes
offer a level of safety, but no one can yet promise that executable content is
entirely safe.
Nasty Applets
One possible security threat is a malign Java or ActiveX program that attacks
your computer over the Web. A nasty applet might, for example, thwart Java
security by circumventing its security model, and destroy data on your hard
disk, or grab sensitive information from your hard drive. The latest browsers
have done a good job of fixing these issues. As long as you are using the latest
version of your browser, you are protected. To date, there have been no
legitimate reports of hostile Java or ActiveX harming anyone. However, there
is no guarantee that an attack will not happen in the future.
Can I prevent programs from accessing the Internet?
You can use McAfee Internet Security to specify the applications that are
allowed to access the Internet from your computer. Obviously, your default
Internet browser is one of these applications.
If the McAfee Internet Security Gatekeeper is running in the background
while you work on the Internet, each time an application tries to access the
Internet a dialog box appears to ask if you want to allow this access once only,
always, or never.