# Internet security

> Mediated Wiki article. Canonical URL: https://mediated.wiki/source/Internet_security
> Markdown URL: https://mediated.wiki/source/Internet_security.md
> Source: https://en.wikipedia.org/wiki/Internet_security
> Source revision: 1350816898
> License: Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/)

Branch of computer security

This article needs more citations. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources: "Internet security" – news · newspapers · books · scholar · JSTOR (April 2009) (Learn how and when to remove this message)

**Internet security** is a branch of [computer security](/source/Computer_security) focused on the [Internet](/source/Internet). It includes [browser security](/source/Browser_security), [web application security](/source/Web_application_security), and [network security](/source/Network_security) as it applies to other [applications](/source/Application_software) or [operating systems](/source/Operating_systems) as a whole. Its objective is to establish rules and measures to improve [Internet safety](/source/Internet_safety) and [Internet privacy](/source/Internet_privacy), including to protect against [cyberattacks](/source/Cyberattack) and [cybercrime](/source/Cybercrime). The Internet is an inherently [insecure channel](/source/Insecure_channel) for information exchange, with risk of [intrusion](/source/Hacker_(computer_security)) and [Internet fraud](/source/Internet_fraud), including [phishing](/source/Phishing),[1] [viruses](/source/Computer_virus), [trojans](/source/Trojan_horse_(computing)), [ransomware](/source/Ransomware) and [worms](/source/Computer_worm).

Many [countermeasures](/source/Countermeasure_(computer)) are used to combat Internet security threats and [web threats](/source/Web_threat), including [encryption](/source/Encryption) and ground-up engineering.[2]

## Threats

### Malicious software

Malicious software comes in many forms, such as [viruses](/source/Computer_virus), [Trojan horses](/source/Trojan_horse_(computing)), [spyware](/source/Spyware), and worms.

- [Malware](/source/Malware), a portmanteau of malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems. Malware is defined by its malicious intent, acting against the requirements of the computer user, and does not include software that unintentionally causes harm due to some deficiency. The term badware applies to both malware and unintentionally harmful software.

- A [botnet](/source/Botnet) is a network of [computers](/source/Zombie_computer) that have been taken over by a robot or [bot](/source/Internet_bot) that performs large-scale malicious acts for its creator.

- [Computer viruses](/source/Computer_viruses) are programs that can replicate their structures or effects by infecting other files or structures on a computer. The typical purpose of a virus is to take over a computer to steal data.

- [Computer worms](/source/Computer_worms) are programs that can replicate themselves throughout a computer network.

- [Ransomware](/source/Ransomware_(malware)) is a type of malware that restricts access to the computer system that it infects, and demands a ransom in order for the restriction to be removed.

- [Scareware](/source/Scareware) is a program of usually limited or no benefit, containing malicious payloads, that is sold via unethical marketing practices. The selling approach uses social engineering to cause shock, anxiety, or the perception of a threat, generally directed at an unsuspecting user.

- [Spyware](/source/Spyware) refers to programs that surreptitiously monitor activity on a computer system and report that information to others without the user's consent.

- One particular kind of spyware is [key logging](/source/Keystroke_logging) malware. Often referred to as keylogging or keyboard capturing, is the action of recording (logging) the keys struck on a [keyboard](/source/Keyboard_(computing)).

- A [Trojan horse](/source/Trojan_horse_(computing)), commonly known as a *Trojan*, is a general term for malware that pretends to be harmless, so that a user will be convinced to download it onto the computer.

### Denial-of-service attacks

Main article: [Denial-of-service attack](/source/Denial-of-service_attack)

A [denial-of-service attack](/source/Denial-of-service_attack) (DoS) or distributed denial-of-service attack (DDoS) is an attempt to make a computer resource unavailable to its intended users. It works by making so many service requests at once that the system is overwhelmed and becomes unable to process any of them. DoS may target [cloud computing](/source/Cloud_computing) systems.[3] According to business participants in an international security survey, 25% of respondents experienced a DoS attack in 2007 and another 16.8% in 2010.[*[citation needed](https://en.wikipedia.org/wiki/Wikipedia:Citation_needed)*] DoS attacks often use bots (or a botnet) to carry out the attack.

### Phishing

Main article: [Phishing](/source/Phishing)

Phishing targets online users in an attempt to extract sensitive information such as passwords and financial information.[4] Phishing occurs when the attacker pretends to be a trustworthy entity, either via email or a web page. Victims are directed to web pages that appear to be legitimate, but instead route information to the attackers. Tactics such as [email spoofing](/source/Email_spoofing) attempt to make emails appear to be from legitimate senders, or long complex [URLs](/source/URL) hide the actual website.[5][6] Insurance group [RSA](/source/RSA_Insurance_Group) claimed that phishing accounted for worldwide losses of $10.8 billion in 2016.[7] Attackers may use [AI](/source/Artificial_intelligence) to create more convincing phishing attacks, such as [deepfakes](/source/Deepfakes) with audio or video that seem to be real messages from a trusted person but are actually fake.[8]

### Man in the middle

Main article: [Man-in-the-middle attack](/source/Man-in-the-middle_attack)

A man-in-the-middle (MITM) attack is a type of cyber attack. Cybercriminals can intercept data sent between people to steal, eavesdrop or modify data for certain malicious purposes, such as extorting money and [identity theft](/source/Identity_theft). Public WiFi is often insecure because monitoring or intercepting Web traffic is unknown.[9]

### Application vulnerabilities

Main article: [Application security](/source/Application_security)

Applications used to access Internet resources may contain security vulnerabilities such as [memory safety](/source/Memory_safety) bugs or flawed authentication checks. Such bugs can give network attackers full control over the computer.[10][11]

## Countermeasures

### Network layer security

Internet security protocols Key management Kerberos RPKI PKIX Web of trust X.509 XKMS Application layer DKIM DMARC HTTPS PGP Sender ID SPF S/MIME SSH TLS/SSL Domain Name System DANE DNSSEC DNS over HTTPS DNS over TLS CAA Internet Layer IKE IPsec L2TP OpenVPN PPTP WireGuard v t e

[TCP/IP](/source/TCP%2FIP) protocols may be secured with [cryptographic](/source/Cryptography) methods and [security protocols](/source/Cryptographic_protocol). These protocols include [Secure Sockets Layer](/source/Secure_Sockets_Layer) (SSL), succeeded by [Transport Layer Security](/source/Transport_Layer_Security) (TLS) for [web traffic](/source/Web_traffic), [Pretty Good Privacy](/source/Pretty_Good_Privacy) (PGP) for email, and [IPsec](/source/IPsec) for network layer security.[12]

### Threat modeling

[Threat modeling](/source/Threat_model) tools help people to proactively analyze the cyber security posture of a system or system of systems and in that way prevent security threats.

### Multi-factor authentication

Main article: [Multi-factor authentication](/source/Multi-factor_authentication)

[Multi-factor authentication](/source/Multi-factor_authentication) (MFA) is an [access control](/source/Access_control) method in which a [user](/source/User_(computing)) is granted access only after successfully presenting separate pieces of evidence to an [authentication](/source/Authentication) mechanism – two or more from the following categories: knowledge (something they know), possession (something they have), and inference (something they are).[13][14] Internet resources, such as websites and email, may be secured using this technique.

### Security token

Main article: [Security token](/source/Security_token)

Some online sites offer customers the ability to use a six-digit code which randomly changes every 30–60 seconds on a physical [security token](/source/Security_token). The token has built-in computations and manipulates numbers based on the current time. This means that every thirty seconds only a certain array of numbers validate access. The website is made aware of that device's serial number and knows the computation and correct time to verify the number. After 30–60 seconds the device presents a new random six-digit number to log into the website.[15]

### Electronic mail security

#### Background

[Email](/source/Email) messages are composed, delivered, and stored in a multiple step process, which starts with the message's composition. When a message is sent, it is transformed into a standard format according to RFC 2822.[16] Using a network connection, the mail client sends the sender's identity, the recipient list and the message content to the server. Once the server receives this information, it forwards the message to the recipients.

#### Pretty Good Privacy (PGP)

Main article: [Pretty Good Privacy](/source/Pretty_Good_Privacy)

[Pretty Good Privacy](/source/Pretty_Good_Privacy) provides confidentiality by encrypting messages to be transmitted or data files to be stored using an encryption algorithm such as [Triple DES](/source/Triple_DES) or [CAST-128](/source/CAST-128). Email messages can be protected by using cryptography in various ways, such as the following:

- [Digitally signing](/source/Digital_signature) the message to ensure its integrity and confirm the sender's identity.

- Encrypting the message body of an email message to ensure its confidentiality.

- Encrypting the communications between mail servers to protect the confidentiality of both message body and message header.

The first two methods, message signing and message body encryption, are often used together; however, encrypting the transmissions between mail servers is typically used only when two organizations want to protect emails regularly sent between them. For example, the organizations could establish a [virtual private network](/source/Virtual_private_network) (VPN) to encrypt communications between their mail servers.[17] Unlike methods that only encrypt a message body, a VPN can encrypt all communication over the connection, including email header information such as senders, recipients, and subjects. However, a VPN does not provide a message signing mechanism, nor can it provide protection for email messages along the entire route from sender to recipient.

#### Message Authentication Code

Main article: [Message Authentication Code](/source/Message_Authentication_Code)

A [Message authentication code](/source/Message_authentication_code) (MAC) is a cryptography method that uses a [secret key](/source/Key_(cryptography)) to digitally sign a message. This method outputs a MAC value that can be decrypted by the receiver, using the same secret key used by the sender. The Message Authentication Code protects both a message's [data integrity](/source/Data_integrity) as well as its [authenticity](/source/Message_authentication).[18]

### Firewalls

Main article: [Firewall (computing)](/source/Firewall_(computing))

A [computer firewall](/source/Firewall_(computing)) controls access to a single computer. A network firewall controls access to an entire network. A firewall is a security device — computer hardware or software — that filters traffic and blocks outsiders. It generally consists of gateways and filters. Firewalls can also screen network traffic and block traffic deemed unauthorized.

#### Web security

Firewalls restrict incoming and outgoing [network packets](/source/Network_packet). Only authorized traffic is allowed to pass through it. Firewalls create checkpoints between networks and computers. Firewalls can block traffic based on IP source and TCP port number. They can also serve as the platform for IPsec. Using tunnel mode, firewalls can implement VPNs. Firewalls can also limit network exposure by hiding the internal network from the public Internet.

#### Types of firewall

#### Packet filter

A packet filter processes network traffic on a packet-by-packet basis. Its main job is to filter traffic from a remote IP host, so a router is needed to connect the internal network to the Internet. The router is known as a [screening router](/source/Screening_router), which screens packets leaving and entering the network.

#### Stateful packet inspection

In a [stateful firewall](/source/Stateful_firewall) the [circuit-level gateway](/source/Circuit-level_gateway) is a [proxy server](/source/Proxy_server) that operates at the network level of an [Open Systems Interconnect (OSI) model](/source/OSI_model) and statically defines what traffic will be allowed. Circuit proxies forward [network packets](/source/Network_packet) (formatted data) containing a given port number, if the [port](/source/Port_(computer_networking)) is permitted by the [algorithm](/source/Algorithm). The main advantage of a proxy server is its ability to provide [Network Address Translation](/source/Network_Address_Translation) (NAT), which can hide the user's IP address from the Internet, effectively protecting internal information from the outside.

#### Application-level gateway

An [application-level firewall](/source/Application-level_firewall) is a third-generation firewall where a [proxy server](/source/Proxy_server) operates at the very top of the OSI model, the [IP suite](/source/Internet_protocol_suite) application level. A network packet is forwarded only if a connection is established using a known protocol. Application-level gateways are notable for analyzing entire messages rather than individual packets.

### Browser choice

Main article: [Browser security](/source/Browser_security)

Web browser market share predicts the share of hacker attacks. For example, [Internet Explorer](/source/Internet_Explorer) 6, which used to lead the market,[19] was heavily attacked.[20]

## Protections

### User awareness

As cyberthreats become more complex, user education is essential for improving internet security. Important areas of attention consist of:

- Users should have the ability to spot [phishing](/source/Phishing) emails by looking for odd sender addresses, cliched salutations, and language that seems urgent. Both simulated phishing exercises and real-world examples can be incorporated into training programs.

- Enabling [two-factor authentication](/source/Two-factor_authentication) (2FA) and stressing the usage of strong, one-of-a-kind passwords are essential for protecting personal information. Additionally, users need to understand the dangers of oversharing on [social media](/source/Social_media) and how crucial it is to change their privacy settings.

- It's critical to educate people on how to spot secure websites (search for [HTTPS](/source/HTTPS)), steer clear of dubious downloads, and use caution when clicking links. Also, users need to be aware of the dangers of utilizing open WiFi networks without a [VPN](/source/VPN).

### Antivirus

Main article: [Antivirus software](/source/Antivirus_software)

[Antivirus software](/source/Antivirus_software) can protect a programmable device by detecting and eliminating [malware](/source/Malware).[21] A variety of techniques are used, such as signature-based, heuristics, [rootkit](/source/Rootkit), and real-time.

### Password managers

Main article: [Password manager](/source/Password_manager)

A [password manager](/source/Password_manager) is a software application that creates, stores and provides passwords to applications. Password managers encrypt passwords. The user only needs to remember a single master password to access the store.[22]

### Security suites

Security suites were first offered for sale in 2003 ([McAfee](/source/McAfee)) and contain [firewalls](/source/Firewall_(computing)), [anti-virus](/source/Antivirus_software), [anti-spyware](/source/Anti_spyware) and other components.[23] They also offer theft protection, portable storage device safety check, private Internet browsing, cloud [anti-spam](/source/Anti-spam_techniques), a file shredder or make security-related decisions (answering popup windows) and several were free of charge.[24]

## See also

- [Cybersecurity information technology list](/source/Cybersecurity_information_technology_list)

- [Cyberspace Electronic Security Act](/source/Cyberspace_Electronic_Security_Act) (in the US)

- [Identity driven networking](/source/Identity_driven_networking)

- [Internet Crime Complaint Center](/source/Internet_Crime_Complaint_Center)

- [Internet safety](/source/Internet_safety)

- [Network security policy](/source/Network_security_policy)

- [Usability of web authentication systems](/source/Usability_of_web_authentication_systems)

- [Web literacy](/source/Web_literacy) (Security)

## References

1. **[^](#cite_ref-1)** Rhee, M. Y. (2003). *Internet Security: Cryptographic Principles, Algorithms and Protocols*. Chichester: [Wiley](/source/John_Wiley_%26_Sons). [ISBN](/source/ISBN_(identifier)) [0-470-85285-2](https://en.wikipedia.org/wiki/Special:BookSources/0-470-85285-2).

1. **[^](#cite_ref-2)** ["101 Data Protection Tips: How to Keep Your Passwords, Financial & Personal Information Safe in 2020"](https://digitalguardian.com/blog/101-data-protection-tips-how-keep-your-passwords-financial-personal-information-safe). *Digital Guardian*. 2019-12-16. Retrieved 2020-10-23.

1. **[^](#cite_ref-3)** Yan, Q.; Yu, F. R.; Gong, Q.; Li, J. (2016). "Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges". *IEEE Communications Surveys and Tutorials*. **18** (1): 602–622. [Bibcode](/source/Bibcode_(identifier)):[2016ICST...18..602Y](https://ui.adsabs.harvard.edu/abs/2016ICST...18..602Y). [doi](/source/Doi_(identifier)):[10.1109/COMST.2015.2487361](https://doi.org/10.1109%2FCOMST.2015.2487361). [S2CID](/source/S2CID_(identifier)) [20786481](https://api.semanticscholar.org/CorpusID:20786481).

1. **[^](#cite_ref-4)** Izak, Belarua. ["Welke virusscanners zijn het beste voor macOS High Sierra"](https://web.archive.org/web/20180105071604/https://virusscannermac.nl/beste-virusscanner-voor-mac/). *Virusscanner MAC* (in Dutch). Archived from [the original](https://virusscannermac.nl/beste-virusscanner-voor-mac/) on 5 January 2018. Retrieved 4 January 2018.

1. **[^](#cite_ref-5)** Ramzan, Zulfikar (2010). ["Phishing attacks and countermeasures"](https://books.google.com/books?id=I-9P1EkTkigC&pg=PA433). In Stamp, Mark; Stavroulakis, Peter (eds.). *Handbook of Information and Communication Security*. Springer. [ISBN](/source/ISBN_(identifier)) [978-3-642-04117-4](https://en.wikipedia.org/wiki/Special:BookSources/978-3-642-04117-4).

1. **[^](#cite_ref-6)** van der Merwe, Alta; Loock, Marianne; Dabrowski, Marek (2005). [*Characteristics and responsibilities involved in a Phishing attack*](https://dl.acm.org/citation.cfm?id=1071800). Trinity College Dublin. pp. 249–254. [ISBN](/source/ISBN_(identifier)) [978-1-59593-169-6](https://en.wikipedia.org/wiki/Special:BookSources/978-1-59593-169-6). Retrieved 4 January 2018.

1. **[^](#cite_ref-First_Post_7-0)** Long, Mathew (February 22, 2017). ["Fraud Insights Through Integration"](https://web.archive.org/web/20181020140826/https://www.rsa.com/en-us/blog/2017-02/fraud-insights-integration). RSA. Archived from [the original](https://www.rsa.com/en-us/blog/2017-02/fraud-insights-integration) on October 20, 2018. Retrieved October 20, 2018.

1. **[^](#cite_ref-8)** ["Deepfake Phishing"](https://it.ufl.edu/security/learn-security/deepfakes/deepfake-phishing/). *Information Technology - University of Florida*. Retrieved 2025-09-21.

1. **[^](#cite_ref-9)** Bonné, Bram; Rovelo, Gustavo; Quax, Peter; Lamotte, Wim (2017-07-01). ["Insecure Network, Unknown Connection: Understanding Wi-Fi Privacy Assumptions of Mobile Device Users"](https://doi.org/10.3390%2Finfo8030076). *Information*. **8** (3): 76. [doi](/source/Doi_(identifier)):[10.3390/info8030076](https://doi.org/10.3390%2Finfo8030076). [hdl](/source/Hdl_(identifier)):[1942/23947](https://hdl.handle.net/1942%2F23947). [ISSN](/source/ISSN_(identifier)) [2078-2489](https://search.worldcat.org/issn/2078-2489).

1. **[^](#cite_ref-10)** ["Improving Web Application Security: Threats and Countermeasures"](https://msdn.microsoft.com/en-us/library/ms994920.aspx). *msdn.microsoft.com*. 14 July 2010. Retrieved 2016-04-05.

1. **[^](#cite_ref-11)** ["Justice Department charges Russian spies and criminal hackers in Yahoo intrusion"](https://www.washingtonpost.com/world/national-security/justice-department-charging-russian-spies-and-criminal-hackers-for-yahoo-intrusion/2017/03/15/64b98e32-0911-11e7-93dc-00f9bdd74ed1_story.html?tid=ss_fb-bottom). *Washington Post*. Retrieved 15 March 2017.

1. **[^](#cite_ref-12)** ["Securing the Network Layer Against Malicious Attacks"](https://www.tdktech.com/tech-talks/securing-the-network-layer-against-malicious-attacks/). *TDK Technologies*. October 27, 2020.

1. **[^](#cite_ref-13)** ["Two-factor authentication: What you need to know (FAQ) – CNET"](https://www.cnet.com/news/two-factor-authentication-what-you-need-to-know-faq/). *CNET*. Retrieved 2015-10-31.

1. **[^](#cite_ref-14)** ["How to extract data from an iCloud account with two-factor authentication activated"](https://www.iphonebackupextractor.com/blog/extract-data-two-factor-authentication/). *iphonebackupextractor.com*. Retrieved 2016-06-08.

1. **[^](#cite_ref-15)** Margaret Rouse (September 2005). ["What is a security token?"](https://searchsecurity.techtarget.com/definition/security-token). SearchSecurity.com. Retrieved 2014-02-14.

1. **[^](#cite_ref-16)** Resnick, Peter W. (2001). Resnick, P (ed.). ["Internet Message Format"](https://tools.ietf.org/html/rfc2822.html). *tools.ietf.org*. [doi](/source/Doi_(identifier)):[10.17487/RFC2822](https://doi.org/10.17487%2FRFC2822). Retrieved 2021-05-01.

1. **[^](#cite_ref-17)** ["Virtual Private Network"](https://web.archive.org/web/20130603122059/http://itcd.hq.nasa.gov/networking-vpn.html). NASA. Archived from [the original](https://itcd.hq.nasa.gov/networking-vpn.html) on 2013-06-03. Retrieved 2014-02-14.

1. **[^](#cite_ref-18)** ["What Is a Message Authentication Code?"](http://www.wisegeek.com/what-is-a-message-authentication-code.htm). Wisegeek.com. Retrieved 2013-04-20.

1. **[^](#cite_ref-browser_stats_19-0)** ["Browser Statistics"](https://www.w3schools.com/browsers/default.asp). W3Schools.com. Retrieved 2011-08-10.

1. **[^](#cite_ref-time_to_drop_IE6_20-0)** Bradly, Tony. ["It's Time to Finally Drop Internet Explorer 6"](https://www.pcworld.com/article/191356/its_time_to_finally_drop_internet_explorer_6.html). PCWorld.com. Retrieved 2010-11-09.

1. **[^](#cite_ref-Build_free_security_suite_21-0)** Larkin, Eric (2008-08-26). ["Build Your Own Free Security Suite"](https://web.archive.org/web/20101106132932/http://www.pcworld.com/article/150204/build_your_own_free_security_suite.html). *PCWorld*. Archived from [the original](http://www.pcworld.com/article/150204/build_your_own_free_security_suite.html) on 2010-11-06. Retrieved 2010-11-09.

1. **[^](#cite_ref-PASSWORD_MANAGER_22-0)** ["USE A FREE PASSWORD MANAGER"](https://web.archive.org/web/20160125015536/http://scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf) (PDF). scsccbkk.org. Archived from [the original](http://www.scsccbkk.org/Use%20a%20Password%20Manager%20for%20Security.pdf) (PDF) on 2016-01-25. Retrieved 2016-06-17.

1. **[^](#cite_ref-all-in-one_security_2006_23-0)** Rebbapragada, Narasu. ["All-in-one Security"](https://web.archive.org/web/20101027173353/http://www.pcworld.com/article/125817/allinone_security.html). PC World.com. Archived from [the original](https://www.pcworld.com/article/125817/article.html) on October 27, 2010. Retrieved 2010-11-09.

1. **[^](#cite_ref-24)** ["Free products for PC security"](https://www.comodo.com/products/free-products.php). 2015-10-08.

## External links

Wikimedia Commons has media related to [Internet security](https://commons.wikimedia.org/wiki/Category:Internet_security).

- [National Institute of Standards and Technology (NIST.gov)](https://www.nist.gov/information-technology-portal.cfm) - Information Technology portal with links to computer- and cyber security

- [National Institute of Standards and Technology (NIST.gov)](https://csrc.nist.gov/publications/detail/sp/800-45/version-2/final) -Computer Security Resource Center -Guidelines on Electronic Mail Security, version 2

- [PwdHash Stanford University](https://crypto.stanford.edu/PwdHash/) - Firefox & IE browser extensions that transparently convert a user's password into a domain-specific password.

- [Cybertelecom.org Security](https://www.cybertelecom.org/security/) [Archived](https://web.archive.org/web/20210410120515/http://www.cybertelecom.org/security/) 2021-04-10 at the [Wayback Machine](/source/Wayback_Machine) - surveying federal Internet security work.

- [DSL Reports.com](https://www.dslreports.com/)- Broadband Reports, FAQs and forums on Internet security, est 1999

v t e Information security Threats Adware Advanced persistent threat Arbitrary code execution Backdoors Bombs Fork Logic Time Zip Hardware backdoors Code injection Crimeware Cross-site scripting Cross-site leaks DOM clobbering History sniffing Cryptojacking Botnets Data breach Drive-by download Browser Helper Objects Viruses Data scraping Denial-of-service attack Eavesdropping Email fraud Email spoofing Exploits Fraudulent dialers Hacktivism Infostealer Insecure direct object reference Keystroke loggers Malware Payload Phishing Voice Polymorphic engine Privilege escalation Ransomware Rootkits Scareware Shellcode Spamming Social engineering Spyware Software bugs Trojan horses Hardware Trojans Remote access trojans Vulnerability Web shells Wiper Worms SQL injection Rogue security software Zombie vectorial version Defenses Application security Secure coding Secure by default Secure by design Misuse case Computer access control Authentication Multi-factor authentication Authorization Computer security software Antivirus software Security-focused operating system Data-centric security Software obfuscation Data masking Encryption Firewall Intrusion detection system Host-based intrusion detection system (HIDS) Anomaly detection Information security management Information risk management Security information and event management (SIEM) Runtime application self-protection Site isolation Scrubber Center Related security topics Computer security Automotive security Cybercrime Cybersex trafficking Computer fraud Cybergeddon Cyberterrorism Cyberwarfare Electronic warfare Information warfare Internet security Mobile security Network security Copy protection Digital rights management

---
Adapted from the Wikipedia article [Internet security](https://en.wikipedia.org/wiki/Internet_security) by Wikipedia contributors ([contributor history](https://en.wikipedia.org/wiki/Internet_security?action=history)). Available under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/). Changes may have been made.