Protected Voices: Patching, Firewalls, and Anti-Virus Software
The FBI’s Protected Voices initiative provides cybersecurity recommendations to political campaigns on multiple topics—including patching, firewalls, and anti-virus software—to help mitigate the risk of cyber influence operations targeting U.S. elections.
Hello, I’m Henry, a special agent with the FBI.
If you’re working for a political campaign, it’s critical that you protect your campaign’s network environment.
In this video we’ll cover three specific ways to keep your network safe: software patches, anti-virus software, and firewalls.
Patching is the installation of software updates on computers, routers, and other devices, such as Internet of Things (IoT) devices like wireless printers, cameras and even thermostats.
A patch is issued by the manufacturer to fix known vulnerabilities—and quickly applying patches is critical. The longer you delay applying a patch, the longer criminals have to threaten your operations.
If your systems are not patched, that’s like leaving all of your sensitive campaign documents in an unlocked car accessible to anyone willing to check if the door is open.
You can install patches manually, via a regularly scheduled task. Or you can set up your systems to automatically install patches whenever the manufacturer releases them.
It's worth noting that sometimes, implementing a patch can open new vulnerabilities in your systems, so it’s important to monitor patching activity to make sure it’s done correctly. If you can, take an image of your servers before you install the patches. Have a good rollback plan in case you find significant problems with the patch deployment.
Another tool for protecting your network is the use of anti-virus software.
This tool continuously scans your systems looking for malicious programs such as a virus or worm.
Anti-virus programs are not perfect, but they are good at identifying and quarantining known malware.
Your anti-virus software needs regular updates to identify the most recent kinds of malware.
It’s considered a best practice to set up your anti-virus software to update automatically—that’s faster, easier, and less problematic than manually installing updates. Even better is network-monitoring technology installed at your router level. This will monitor all traffic on your network, and can identify potential malware and threats that anti-virus software sometimes misses.
The last tool we want to address is a firewall.
A firewall is a set of rules that block or allow connections to your environment.
Firewalls shield your computer or network from malicious or unnecessary network traffic.
You can configure your firewall to block data from certain locations or applications while still allowing relevant and necessary traffic to pass through.
As stated by the Department of Homeland Security, “Firewalls primarily help protect against malicious traffic, not against malicious programs, and will not protect you if you accidently install malware on your computer.”
If you’re protecting a single computer, you’ll probably use a software-based firewall, which may even come as part of your operating system software. If you’re protecting a network of computers, you probably use a hardware-based firewall. For example, some routers come with built-in firewall protection.
You can adjust your firewall settings to limit inbound and outbound traffic, to block people from accessing your computers, and to block suspicious activity on your network.
No matter what kind of firewall your campaign chooses, you’ll have to spend some time adjusting your firewall settings.
Make sure you enable regular firewall updates, preferably automatic updates.
Even if you set up your firewall perfectly, it’s not guaranteed that your computers won’t be attacked or infected, because no single tool can give you perfect protection. Ideally, you're constantly monitoring your environment for malware and anomalies and can remove infected devices as soon as they're infected.
By regularly patching your software, using anti-virus software, and using a firewall, you now have multiple layers of protection. This doesn’t mean your campaign’s computers will be safe from every type of threat, but it is a solid starting point in enhancing your campaign’s cybersecurity.
Remember your voice matters, so protect it.
- 11.18.2020 — Highlights from Director Wray's Remarks at World Economic Forum Annual Meeting on Cybersecurity
- 11.18.2020 — FBI San Diego Thanksgiving Message
- 11.13.2020 — Remarks by Sanjay Virmani About IRGC Covert Influence Campaign
- 11.10.2020 — FBI Tampa Veterans Day Message
- 11.02.2020 — FBI Buffalo and U.S. Attorney Remarks on Integrity and Security of Elections
- 10.23.2020 — Zach Gusé: I Wanted to Let the Light In
- 10.23.2020 — Brent Gillespie: Please Come Forward
- 10.22.2020 — Branson Jernigan: It Seems Like People Have Been Forgetting About Her
- 10.21.2020 — Fresno’s Breaking the Chains Receives FBI Director’s Community Leadership Award
- 10.20.2020 — Kole Gusé: She's Probably Dead
- 10.19.2020 — Melissa Gusé: Damaged Family
- 10.18.2020 — Zach Gusé: I Lost My Mind
- 10.17.2020 — David Kaulk: We May Never See Her Again
- 10.16.2020 — Brad Bilderback: Somebody Knows Something
- 10.15.2020 — Proteger Su Voto
- 10.15.2020 — FBI Pittsburgh Remarks on QQAAZZ Indictment
- 10.15.2020 — Richard Eddy: Witness
- 10.14.2020 — Melissa Gusé: Your Mind Wanders
- 10.13.2020 — Chicago FBI Asks Public to Assist on Election Security
- 10.13.2020 — Zach Gusé: My Whole Body and Soul