US-CERT Cyber Security Tip ST04-024 -- Understanding ISPs

[US-CERT Security Tips <security-tips@xxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

   			Cyber Security Tip ST04-024
			     Understanding ISPs    

   ISPs offer services like email and internet access. Compare factors
   like security, services, and cost so that you find an ISP that
   supports all of your needs.

What is an ISP?

   An  ISP,  or internet service provider, is a company that provides its
   customers  access  to the internet and other web services. In addition
   to  maintaining  a  direct  line  to the internet, the company usually
   maintains   web   servers.   By   supplying   necessary   software,  a
   password-protected  user account, and a way to connect to the internet
   (e.g., modem, phone number), ISPs offer their customers the capability
   to browse the web and exchange email with other people. Some ISPs also
   offer additional services.

   ISPs  can  vary  in  size--some  are operated by one individual, while
   others  are large corporations. They may also vary in scope--some only
   support  users  in  a  particular  city, while others have regional or
   national capabilities.

What services do ISPs provide?

   Almost  all  ISPs offer email and web browsing capabilities. They also
   offer varying degrees of user support, usually in the form of an email
   address  or customer support hotline. Most ISPs also offer web hosting
   capabilities,  allowing  users  to  create  and  maintain personal web
   pages; and some may even offer the service of developing the pages for
   you.  Many  ISPs  offer the option of high-speed access through DSL or
   cable modems, and some still offer dial-up connections.

   As  part  of  normal operation, most ISPs perform backups of email and
   web  files. If the ability to recover email and web files is important
   to  you, check with your ISP to see if they back up the data; it might
   not  be advertised as a service. Additionally, some ISPs may implement
   firewalls to block some incoming traffic, although you should consider
   this a supplement to your own security precautions, not a replacement.

How do you choose an ISP?

   There  are thousands of ISPs, and it's often difficult to decide which
   one best suits your needs. Some factors to consider include
     * security  -  Do you feel that the ISP is concerned about security?
       Does  it  use  encryption and SSL (see Protecting Your Privacy for
       more  information)  to  protect  any information you submit (e.g.,
       user name, password)?
     * privacy  -  Does  the ISP have a published privacy policy? Are you
       comfortable  with who has access to your information and how it is
       being handled and used?
     * services - Does your ISP offer the services you want? Do they meet
       your requirements? Is there adequate support for the services?
     * cost - Are the ISP's costs affordable? Are they reasonable for the
       number  of  services  you  receive,  as well as the level of those
       services?  Are  you  sacrificing  quality  and security to get the
       lowest price?
     * reliability  - Are the services your ISP provides reliable, or are
       they frequently unavailable due to maintenance, security problems,
       a  high  volume  of users, or other reasons? If the ISP knows that
       services  will  be  unavailable  for  a particular reason, does it
       adequately communicate that information?
     * user support - Are there published methods for contacting customer
       support?  Do  you  receive  prompt  and friendly service? Do their
       hours  of  availability accommodate your needs? Do the consultants
       have the appropriate level of knowledge?
     * speed  -  How  fast is your ISP's connection? Is it sufficient for
       accessing your email or navigating the internet?
     * recommendations  -  Have  you heard or seen positive reviews about
       the  ISP?  Were they from trusted sources? Does the ISP serve your
       geographic  area?  If  you've  uncovered negative points, are they
       factors you are concerned about?
     _________________________________________________________________

     Author: Mindi McDowell
     _________________________________________________________________

     Produced 2004 by US-CERT, a government organization.

     Note: This tip was previously published and is being re-distributed 
     to increase awareness. 
  
     Terms of use
 
     <http://www.us-cert.gov/legal.html>
  
     This document can also be found at
 
     <http://www.us-cert.gov/cas/tips/ST04-024.html>
 

     For instructions on subscribing to or unsubscribing from this
     mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBR3Po/fRFkHkM87XOAQJBrAf/WMzewri51wdHYMVWVjimnk1rVd5XAX3P
8n6x7GaSnsiv1SPndC58dob9sGTjv/nHQTyvQZwCOAp9KZeqFJd/NkY15sVoe4HY
0rT9WFPiR1l/o4n6Haiztbz7hqdUmXPfT0UVnw/kYv3ShaNSxoPpv20yIV/4Cm5/
WRU0NO8bmvY5EWpzVaOriu2NpB2MS/hGlAWZ+8WgXK5tUuRNYuigbxGFEoeWtJCP
u7NwMUNGpMtXOfw75bT2Shhc9mWEAKpRBapRqmBYZ2TYh5jE6POgdPYsVcShBZe/
1SGgu6ufIOGxzqcXRGaWiZf/D8zy4a/I27wX0QrBoYGPWFY/BB+z7w==
=5M5m
-----END PGP SIGNATURE-----