Please wait while the page is being loaded Skip this advertisement >
Thursday | 4 December, 2008
CIO
The Fragility of Road-Warrior Security
Over the past few months, I have heard one horror story after another about the most obvious and blatant form of security issue — reading a neighbor's laptop screen
Frank Dzubeck (Network World) 21 May, 2007 10:37:46

It is often said that the weakest link in the IT security chain is the human being. In our technological age it is inconceivable to travel without network tethers such as a laptop PC, mobile telephone or e-mail PDA. The road warrior is connected 24/7 to his home, corporate office/clients/partners and the Internet. What has occurred in the 21st century is that all of this technology is taken for granted, and security is never a primary issue or concern.

Over the past few months, I have heard one horror story after another about the most obvious and blatant form of security issue - reading a neighbor's laptop screen. Think about how many times on a plane, at an airport or in a restaurant, you look over and happen to read the display of someone next to you. It's only natural that our eyes wander. Most of the time the images and text are mundane, but every once in a while you recognize something that relates to your personal interest, occupation or company. In all probability, the other person doesn't know who you are or that he is committing a grave security breach.

Stories abound of mergers and acquisitions, leveraged buyout deals, real estate purchases, sales opportunities or job interviews that were successful because the competition's presentation or instant message conversation was viewed on a flight or in a coffee shop. This is not a network problem but a human problem that can be fixed by mandating corporate use on all corporate laptops of a privacy filter/privacy screen/security screen/screen guard that prevents anyone looking over your shoulder at the laptop display. Simple yet elegant.

Remember the old adage: Good fences make good neighbours. This becomes even more of a mantra when we look at road-warrior network security. That earpiece networked to your mobile phone is part of another problem. No only do we tend to talk in public at a volume that brings the entire room into our conversation, but we forget wireless technologies such as Bluetooth can be open to access unless device/user-specific identification is used for connectivity. It is possible to listen to both sides of a conversation in this manner unless the corporate user is mandated to invoke simple Bluetooth security options.

Remember the old adage: Loose lips sink ships. It is a constant source of humour to network-savvy industry analysts how PCs and other devices are open and accessible in a briefing room full of industry analysts. Using off-the-shelf software, one can not only share the connection but also record keystrokes and screen images from a laptop. This type of security issue is becoming more relevant with the proliferation of Wi-Fi public/semi-public hot spots and Wi-Fi telephones. The agreement between the start-up FON and Time Warner Cable will let home and corporate broadband customers turn their connections into public/semi-public Wi-Fi hot spots. Although popular in Europe, connection-sharing is shunned by most other US ISPs.

Connection-sharing is accomplished using a FON router (La Fonera) that splits a Wi-Fi connection into two channels: a secure, encrypted path for the FON user (Fonero) and an open public path for neighbours or passersby.

Nothing is wrong with the road warrior using public/semi-public hot spots for personal purposes. But from a corporate security standpoint, "public" anything is a problem. Personal firewall, antivirus, antispyware and VPN software should not be options for the road-warrior laptop. Use of encryption and identity verification are mandatory. Open, shared-use access should be forbidden, and any non-encrypted VoIP call over the Internet should be banned from corporate use. Draconian as this sounds, the corporate damage that could occur is even worse.

If you thought the Internet gave you some degree of freedom from security paranoia, that false sense of security came to an end on May 14, when all US broadband and VoIP providers were required by the Federal Communication Commission (FCC) to facilitate court-authorized wiretaps by intelligence and law enforcement authorities.

Remember this new adage: Security should never be an afterthought and must always be first and foremost on the mind of the road warrior.

Featured Whitepaper Sponsors
Market Place
 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    US Open used Web filtering to prevent online gambling 03 December, 2008 07:44:00

    USTA took security measure to retain "squeaky clean" image
    The US Open tennis tournament provides network access for the players, guests and media, but this past summer the association running the event took an extra security step to make sure access wasn't too open.
  • +

    CBS website bitten by iFrame hack 02 December, 2008 07:30:00

    Russian malware distributors have launched another iFrame attack on a sub-domain of the cbs.com site.
    TV network CBS has become the latest big name to have it website used to host malware, a security company has reported.
  • +

    Excerpt: Counterterrorism Strategies for Corporations 27 November, 2008 12:36:00

    Mike Ackerman calls terrorism "the skunk at the globalization lawn party." His new book lays out 10 principles for how businesses can prepare and respond.
    Mike Ackerman calls terrorism "the skunk at the globalization lawn party." His new book lays out 10 principles for how businesses can prepare and respond.
  • +

    The 10 Ackerman Principles of Counterterrorism 27 November, 2008 12:43:00

    Consultant and author Mike Ackerman's 10 counterterrorism principles for business.
    Consultant and author Mike Ackerman's 10 counterterrorism principles for business.
  • +

    Survey: Despite Risks, Employees Still Holiday Shop at Work 27 November, 2008 10:02:00

    As Cyber Monday approaches, research suggests a majority of workers will use their work computer to shop this holiday season. But despite the continued growth in online shopping, employees and business still don't understand the risk
    As Cyber Monday approaches, research suggests a majority of workers will use their work computer to shop this holiday season. But despite the continued growth in online shopping, employees and business still don't understand the risk.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

IT Service Management Needs and Adoption Trends: An Analysis of a Global Survey of IT Executives

IT executives face the need to improve service delivery with limited resource increases. Two common strategies for achieving this are network and systems management tools and datacenter consolidation. Read on to disocover how you can make a strong business case for IT Consolidation.