This paper will help you configure your web browser for safer internet surfing. It is written for home computer users, students, small business workers, and any other person who works with limited information technology (IT) support and broadband (cable modem, DSL) or dial-up connectivity. Although the information in this document may be applicable to users with formal IT support as well, organizational IT policies should supersede these recommendations.

There is an increasing threat from software attacks that take advantage of vulnerable web browsers. In recent months, the CERT/CC has observed a trend whereby new software vulnerabilities are exploited and directed at web browsers through the use of compromised or malicious web sites. This problem is made worse by a number of factors, including the following:

• Many web browsers are configured to provide increased functionality at the cost of decreased security.
• New security vulnerabilities may have been discovered since the software was configured and packaged by the manufacturer.
• Many web sites require that users enable certain features or install more software, putting the computer at additional risk.
• Many users do not know how to configure their web browsers securely.
• Many users are unwilling to enable or disable functionality as required to secure their web browser.
• Many users are unaware whether or not their computer has been compromised.
• Many users fail to properly “clean” a compromised computer.