That darned USB port!

Written by Saran on January 23, 2008

usbport.jpgusbplug.jpgUSB has been around for quite sometime and was designed to replace the interface capabilities of the old legacy standard. Today, most PC’s, Laptops and other peripherals have USB ports or have the capability of connecting to one such as keyboards, mice, digitizing pads, digital camera’s, video camera’s, flash disks and the device types goes on and on. They have become so common that many security experts warnings on their danger have gone unheeded, till now that is. Recent security holes and other problems associated with malware and viruses that have been transmitted through the USB port have risen to the point security people had to listen. These interface ports are quite convenient and easy to use that even the most beginner can plug an infected device such as a flash disk loaded with malware or viruses that they easily get through standard security. They are so small that physically banning them can be next to impossible and I’m sure you’ve read the several articles regarding the iPod which was connected to the corporate network…etc. Expert’s advice that to minimize their use for no good, disable them on-board or do not bother connecting them at all at the hardware level. This would render them truly unusable for some people however innocent of the workings of a PC or other computer type can enable them in the control panel easily. Unbeknownst to many, most devices that have flash memory can be used to store files other than video or pictures for they can be formatted using the operating system’s format utility or the propriety software such as iPod’s iTunes which can have even the most basic iPod Shuffle function as a flash disk allowing transport of say documents and other such files.

Tags: , ,

Categories: Backups, General, IT Security Basics, Malware, Network Security, Operating Systems, Physical Security, Security Policies, Storage, Tips

4 Comments

It Security – Interpol

Written by Saran on December 7, 2007

interpol.JPG
The threat of IT security has reached such a level that even Interpol has gotten involved in the action. Many crime syndicates operate beyond the normal bounds of borders and business organizations that the Policing Agency has information for all concerned regarding the security and intrusion prevention of computer systems.

The said Interpol IT Security document aimed for investigators of crimes related to IT security, highlights the need for an established set of rules that should be enforced for all people in business or other locations such as the home and elsewhere. In the said document, there is an extensive article that deals with information interception which is now becoming the most prevalent form of attack on networked computers. Firewalls are also not that effective if not configured properly and the addition of an internal and other security is needed to increase the level of protection that is needed. File deletion as may of us in the IT community knows deletes only the directory entry of the said file and not the file itself. It can be compared to deletion of a filing cabinet label without actual removal of the folder that contains the document itself. Utilities like Wiperaser Ultra for clearing deleted data are available on the market which routinely scans all tagged free-space on a hard drive and erases all the data contained within. There are also utilities available for the recovery of deleted files like software from Handy Recovery, a data recovery software which can prove valuable in security breach investigations checking for unauthorized files in an employee’s workstation. There are even recovery companies who specialize in recovery of data from tragically destroyed hardware such as those that have suffered fire damage and many more such as SalvageData whose specialty is to recover information from damaged hardware.

Tags: , ,

Categories: General, IT Security Basics, Malware, Network Security, Operating Systems, Real-World Issues, Security Policies, Storage, Tips

Leave a Comment

Credit Card Fraud Peak Season

Written by Saran on December 4, 2007

cards.JPG
True, the holiday’s is the hottest time when credit card fraud runs into the millions of dollars. There are many incidents of fraud out on the market and shopping is a very casual task many take for granted. A leading credit card company from the US reported losses in the millions of dollars that they do not readily publicize for it has an impact on their customers confidence in their systems.
There is no true protective measure for something as small and compact as a credit card which in the wrong hands can cost you a few hundred dollars or even max out your credit limit. Crime syndicates use the said tactic for their illegal activities where they have people who handle these fraudulent transactions. There is still a wide open gap when it comes to credit card which may be covered by newer fool-proof security. The addition of biometrics to the standard card swipe can provide an added level of security along with fingerprinting.
Simple steps can also be taken to prevent these actions towards you such as being careful where and when you use your credit cards. When paying, be sure to have in plain sight the reader or terminal where the card is swiped to be sure they are used only for the intended purchase a card fraud scheme wherein a separate card reader is used to record the information contained within the card has been going on for a long time where the captured information can be used for purchases. Before signing the print-out or receipt, be sure to check all details such as the purchase amount and other such vital information. If you do end up loosing a credit card or your whole wallet, immediately call your card company so the said card can be tagged as stolen so further purchases are not billed to you. If there happens to be any inaccuracies in your card’s statement, call information at once for there may be a problem with your card of worst somebody may have already copied the information from your original card. Vigilance and awareness is the key so be on the lookout for any dubious people around you. Keep safe people and a Merry Christmas to all.

Tags: , , ,

Categories: General, Physical Security, Privacy & Anonymity, Real-World Issues, Security Policies, Tips

Leave a Comment

Disable that Shared Folder

Written by Saran on August 1, 2007

Shared Folders

It would only be normal to find shared folders in the default setup of Windows operating systems. This can be easily seen once a person would go to the explorer option of his computer where shared folders are waiting to be accessed. This is automatically made for access if people connect to a network and would not set the security policies and accessibility on a restricted basis which only allows administrators to access them.

The importance of setting security levels to avoid such access to folders is important. Not al people are aware of the harmful things an unauthorized user may do once he gets the chance to intrude in another person’s workstation. Aside from probable back-ups, a person may lose the files contained in such folders if he is not careful. Hence it is best to do the precautionary measures before hand to avoid unwanted avoidable circumstances would ensue.

[tags]shared folders, security policy, network security[/tags]

Tags: , ,

Categories: Backups, Cryptography, IM, IT Security Basics, Instant Messaging, Network Security, Physical Security, Privacy & Anonymity, Security Policies, Storage, Tips

Comments Off

Defining Security Roles and Administrative Rights Policies

Written by Saran on July 27, 2007

System users are usually granted specific rights with regards to their accessibility options towards the main server. This is why most systems administrators need to identify the licensed users and their rights as defined by their department heads and superiors. Granting rights to all may be a bad decision since it allows the system and the network vulnerable to any form of intrusion at any time without limiting the options of who may be behind it.

security access levels

Such has been an issue that systems administrators must learn to address. It is not mainly about knowing a person but by what he is capable of doing. That is why access rights should be properly labeled as administrators, users or guests. The absence of such tags makes it hard to audit and work backwards in cases where system malfunctions and possible conflicts such as server crashes may ensue. It is best to limit the users at a minimum so that pinpointing the probable suspects can be limited.

[tags]security rights, access levels, accessibility[/tags]

Tags: , ,

Categories: IT Security Basics, Network Security, Operating Systems, Privacy & Anonymity, Programming, Security Policies, Tips, Wireless Security

Comments Off

Keeping Information within Server Walls

Written by Saran on July 11, 2007

Information gathered by a company will always be important and they should not be shared, disclosed or disregarded in any way, since they are the life stream that a company or organization thrives on. Normally, information would be stored in databases and only authorized personnel would have access to them for reference and study on current and probable studies for overall organizational performance.

Rumor Mongers

The security of information is usually left to the jurisdiction of the database administrator and information technology section of companies. While some would consider this department as all computers and no importance, the position they actually hold is important and should be given notice.

Many would consider IT people as expendable, but the truth of the matter is, they bring the secret and the backbone of a company’s information gathering background, and should breaches be experienced, they would be the first ones to know how to do it.

[tags]information security, database administration, servers, network administration[/tags]

Tags: , , ,

Categories: Backups, IT Security Basics, Network Security, Privacy & Anonymity, Storage, Tips

Comments Off

Advantage of Locking Workstations from Inactivity

Written by Saran on June 15, 2007

Consider a scenario when a workstation would be left for a couple of minutes and a person-in-charge would have to go somewhere like a coffee break or the comfort room. Open working spaces are bound to have some person who may find himself by the cubicle and be tempted to see what is behind the screen of the workstation.

Workstation Lockout

For some reason or another, pranksters may want to play jokes or get access to sensitive information. While these approaches may not necessarily be done on purpose to get the person in trouble, it cannot be denied that security of a workstation which is usually set at a certain time limit of inactivity like 10 to 15 minutes is a good way to safeguard work and data.

Some would regard it as annoying but the overall security and avoiding being tampered with is something that is really minor but may be at times crucial. A person can never know the people who may be roaming around and what they may be up to. Also, it would be best not to forget the administrator password, because if so, then the workstation may not be unlocked even by the user!

[tags]workstation, windows, server, passwords[/tags]

Tags: , , ,

Categories: IT Security Basics, Network Security, Operating Systems, Programming, Security Policies, Tips

Comments Off

The Potential Threats of Foregoing Cyber Security

Written by Saran on May 23, 2007

While most of the world relies heavily today on computers and the Internet, safeguarding data and intrusion from malicious hackers and technology advanced individuals should be the main cause for concern.

Cyber Security

It is no secret that most systems that do not have the proper security programs face the risk of potential loss of information or being a cause for downtime for servers that need to be operational 24/7. Without the security perimeter fences installed, a server or workstation is prey to a lot of attacks stemming from hackers, worms and Trojans that are spread all over the Internet today.

The risk is indeed high considering that a lot of personal and business related programs and files are the bloodstream of most operational works today. Without the proper cyber guards to act as assigned protectors to key data, internal operations and key components in systems will surely be facing threats that may not immediately be recovered by back-up systems alone.

[tags] internet security, cyber security, cyberspace, cyberworld, firewall, intrusion[/tags]

Tags: , , , , ,

Categories: Backups, IT Security Basics, Malware, Network Security, Operating Systems, Physical Security, Privacy & Anonymity, Programming, Real-World Issues, Security Policies, Spyware, Storage, Tips, Wireless Security

Comments Off

The Vulnerable Internet Explorer Browser

Written by Saran on April 21, 2007

By default, Internet Explorer is usually installed simultaneously with new installation of Microsoft Windows operating systems. This allows users to immediately access the web and browse websites or check their e-mail online.

Windows Updates

However, it is recommended that the required patch updates for windows components, Internet Explorer included, to ensure that versions are updated and secured to avoid any exposure of vulnerable exploits and issues that unpatched versions would be prone to. Unpatched versions are sure to be lacking in security issues known today, hence the need to acquire such updates and patches a definite must for people using the Microsoft Windows software today.

The patches and updates help ensure the overall safety of the workstation and the network it is connected to. With the rampant amount of exploits and issues that technology has been open to, it would be best to keep software and applications up to date, starting with the operating system in use.

[tags]operating systems, microsoft windows, microsoft vista, patches, updates[/tags]

Tags: , , , ,

Categories: IT Security Basics, Network Security, Operating Systems, Programming, Real-World Issues, Security Policies, Spyware, Tips

Comments Off

Reading Technology Website News

Written by Saran on March 19, 2007

The best way for people to know what the latest threats and mischievous activities that people are up to over the web is to read the websites that specialize as well in network and computer security. There will always be new viruses, spyware and Trojans over the web and while the scope that these sites cover may not be saturated, it also depends on the part of the people on how they are inclined to be aware of such.

News Reading

Unless there is a real outbreak that possesses quite a threat towards every computer, people will not be aware or concerned about technology security today. While the religious practice of keeping track of these threats cannot be readily instilled, it would be best to exhaust all means in being able to do so. Besides, people know for a fact that neglecting such efforts will be at their own risk and network and computer security is something that many would realize when the harm has already been done.

[tags]newspapers, magazines, e-zine, websites[/tags]

Tags: , , ,

Categories: IT Security Basics, Malware, Network Security, Programming, Review, Security Policies, Spyware, Tips, Wireless Security

Comments Off