US-CERT Cyber Security Tip ST04-024 -- Understanding ISPs

[US-CERT Security Tips <security-tips@xxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


                       Cyber Security Tip ST04-024
                            Understanding ISPs

   ISPs offer services like email and internet access. Compare factors
   like security, services, and cost so that you find an ISP that
   supports all of your needs.

What is an ISP?

   An ISP, or internet service provider, is a company that provides its
   customers access to the internet and other web services. In addition
   to maintaining a direct line to the internet, the company usually
   maintains web servers. By supplying necessary software, a
   password-protected user account, and a phone number to dial into the
   internet connection, ISPs offer their customers the capability to
   browse the web and exchange email with other people. Some ISPs also
   offer additional services.

   ISPs can vary in size--some are operated by one individual, while
   others are large corporations. They may also vary in scope--some only
   support users in a particular city, while others have regional or
   national capabilities.

What services do ISPs provide?

   Almost all ISPs offer email and web browsing capabilities. They also
   offer varying degrees of user support, usually in the form of an email
   address or customer support hotline. Most ISPs also offer web hosting
   capabilities, allowing users to create and maintain personal web
   pages; and some may even offer the service of developing the pages for
   you. Many ISPs offer the option of high-speed access through DSL or
   cable modems, while others may just rely on dial-up connections.

   As part of normal operation, most ISPs perform backups of email and
   web files. If the ability to recover email and web files is important
   to you, check with your ISP to see if they back up the data; it might
   not be advertised as a service. Additionally, some ISPs may implement
   firewalls to block some incoming traffic, although you should consider
   this a supplement to your own security precautions, not a replacement.

How do you choose an ISP?

   There are thousands of ISPs, and it's often difficult to decide which
   one best suits your needs. Some factors to consider include
     * security - Do you feel that the ISP is concerned about security?
       Does it use encryption and SSL (see Protecting Your Privacy for
       more information) to protect any information you submit (e.g.,
       user name, password)?
     * privacy - Does the ISP have a published privacy policy? Are you
       comfortable with who has access to your information and how it is
       being handled and used?
     * services - Does your ISP offer the services you want? Do they meet
       your requirements? Is there adequate support for the services?
     * cost - Are the ISP's costs affordable? Are they reasonable for the
       number of services you receive, as well as the level of those
       services? Are you sacrificing quality and security to get the
       lowest price?
     * reliability - Are the services your ISP provides reliable, or are
       they frequently unavailable due to maintenance, security problems,
       a high volume of users, or other reasons? If the ISP knows that
       services will be unavailable for a particular reason, does it
       adequately communicate that information?
     * user support - Are there published methods for contacting customer
       support? Do you receive prompt and friendly service? Do their
       hours of availability accommodate your needs? Do the consultants
       have the appropriate level of knowledge?
     * speed - How fast is your ISP's connection? Is it sufficient for
       accessing your email or navigating the internet?
     * recommendations - Have you heard or seen positive reviews about
       the ISP? Were they from trusted sources? Does the ISP serve your
       geographic area? If you've uncovered negative points, are they
       factors you are concerned about?
     _________________________________________________________________

     Author: Mindi McDowell
     _________________________________________________________________

     This document can also be found at
 
     <http://www.us-cert.gov/cas/tips/ST04-024.html>

     Copyright 2004 Carnegie Mellon University

     Terms of use

     <http://www.us-cert.gov/legal.html>
 
 
 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBQcCTcRhoSezw4YfQAQJizQf/bvCKALmkT6zbtjT4Ng9GRsodGD+I59fn
mZgujxOT90+5OISN6db8ZKRro87pa8h/had3fT1Pgox5HyXzwEeL5EyKM37l6YME
qSvkI+fxJlnv0Qu1V6m4IavLSRpK5Z24qRVxiM//25XSs5JSq39F/F4xyT60D+SY
+jQ9RQ4DbsSNE2DBUNE5t6r9FzEMm8VUh+e+Cbgv2Adm7Hn9GWhL6zTHrPFHcX9E
Fb4R4aDIniI8QeSsOCjtK6QF6IaJHzGo8103vryz1vHCOHRbpbp6HQ4dF7786GF9
f7LCtg1Lr7iC9nz7v+vwk5Xlc2NsDIf7SGBXlajPmDEBaV5ypY9DiQ==
=QnxF
-----END PGP SIGNATURE-----