Flushing Your Router to Protect Your Identity Online

 In my last Computer Security article, I discussed using a Live CD to protect your identity when banking or making financial or personal transactions Online. Even when using a Live CD, however, there is another point of concern within your computer system that can be exploited by attackers: your Internet and home\office router(s). Most peolpe know their router, also known as a switch, as the device that connects to the outside Internet Service Provider (ISP) to distribute the Internet connection throughout their home or office. Many people also add an additional router, many of which are wireless, to provide more distribution points allowing more computers to use the connection.

 A router is a computing device with memory (storage) and therefore it can be infected with special types of malware. This malware can track or redirect your Internet traffic. If you are banking or conduction financial transactions Online, it could potentially watch all your login user names and passwords and send them to an attacker. How much of a concen should this be to you? Just ask anyone involved in a business level Information Technology field. Many serious attacks against IT infrastrucures have been targeted at switches\routers. IT departments for corporations now spend considerable resources applying up-to-date security patches to address modern switch exploits. Companies such as financial institutions, insurance institutions, payment processing companies, government contractors, etc. are required by regulations such as PCI, HIPPA and FISCA to update and monitor switches regularly. Most average home computer users and small offices do not have the resources to apply updates and monitor the switches\routers within the network. Most home brand routers, also used in small offices, do not release security updates as frquently as the expensive switches used by large corporations and organizations.

So how can the average user protect against these serious potential exploits and dangers? The answer is simple: flush the router. By flushing the router I simply mean turn off the router for a minute or two and turn it back on; this is also known as rebooting. A router\switch uses what is called "flash memory" which means the unit has to have electrical power and be turned on in order to store information in its memory. Even if the unit is infected with malware, it will be erased from memory when you turn it off. When you turn it back on, it will start fresh like the day you bought it. By routinely flushing the router, you can assure that any malware that may have infected it will be cleared. I would especially recommend doing this before and after conducting financial or personal Online transactions.

WARNING - I do want to explicity warn anyone who is going to flush their router to first consult their Internet Service Provider's (ISP's) documentation. There are still some old ISP routers that cannot just be turned off and turned back on and resume Internet service. I had a previous experience with a provider that required you to call customer service every time the router powered off, whether intentionally or unintentionally. If you are not sure about your service, please acquie the assistance of a more experience computer user or contact you ISP.

Martin Connell is an Information Technology Security Specialist and the author and producer of Computer and Internet Security Basics

B.S. Information Technology Security from Western Governors University
Sun Java Associate
CIW Professional
CIW Database Design Specialist
CompTIA A+ IT Technician
CompTIA Project +
CompTIA Network +
CompTIA Security +
Microsoft 70-270 Windows XP - Configuration, Installation and Maintenance
Microsoft 70-298 Designing Security for a Windows 2003 Server Network