Can digital certs fend off Trojan attacks?

Summary:Special Minister of State Gary Nairn this week released a paper entitled 'Responsive Government - A New Service Agenda', which details how e-government services will be "improved" over the next four years.If and when these services are delivered I hope that during a security emergency they will offer better advice than the Australian Tax Office did this week.

Special Minister of State Gary Nairn this week released a paper entitled 'Responsive Government - A New Service Agenda', which details how e-government services will be "improved" over the next four years.

If and when these services are delivered I hope that during a security emergency they will offer better advice than the Australian Tax Office did this week.

On Monday, the ATO restricted access to its Web site for certain users who had been infected by a password-stealing Trojan.

The ATO tells users that if they use a digital certificate to access the site instead of a user name and password, the Trojan is less likely to be able to steal their "portal details".

If you use digital certificates to access the Tax Agent Portal, and you've disabled your user ID and password access, the risk of a Trojan virus compromising your portal details is reduced.

How?

I tried finding out how the ATO thought that using a digital signature could reduce my chances of being infected by a Trojan. Three days and numerous phone calls later all I had was a government spokesperson telling me that they take these kinds of incidents "very seriously".

At the time of writing, the warning and the advice is still online.

If you take your system security seriously I advise you to keep your patches up to date, install a decent antivirus and anti-spyware application and wait for Nairn's 'Responsive Government' to emerge.

Topics: Malware, Government, Government : AU, Microsoft, Security

About

Munir first became involved with online publishing in 1998 when he joined ZDNet UK and later moved into print publishing as Chief Reporter for IT Week, part of ZDNet UK, a weekly trade newspaper targeted at Enterprise IT managers. He later moved back into online publishing as Senior News Reporter for ZDNet UK.Munir was recognised as Austr... Full Bio

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.