Saturday | 30 August, 2008
CIO
The Fragility of Road-Warrior Security
Over the past few months, I have heard one horror story after another about the most obvious and blatant form of security issue — reading a neighbor's laptop screen
Frank Dzubeck (Network World) 21 May, 2007 10:37:46

Related Features
  • +

    The Declaration of Interdependence 03 September, 2007 15:02:56

    The world has changed. You can’t deny employees the freedom to use consumer applications at work. Here’s how to live with and profit from them
    Digital cameras didn't creep up on the Drees company as much as they pounced. Five years ago a lot of employees at the $US1.1 billion real estate company weren't even using computers. Today, those same employees are responsible for one of the company's more innovative uses of technology
Related Stories
  • +

    10 things we hate about laptops 16 November, 2007 12:40:09

    Sure, laptops have revolutionized the way we compute. That doesn't mean they don't drive IT bonkers.
    Damaged. Lost. Stolen. Too big, too small. Insecure and unreliable. And just plain annoying. If you're in IT, there's just not much to like about laptops.
  • +

    Adobe launches hosted services, adds Flash to Acrobat 03 June, 2008 09:02:44

    Adobe to launch Web site offering users free hosted services for document creation, sharing and storage
    Adobe this week is set to unveil the next version of its Adobe Acrobat software, which adds support for the company's Flash multimedia technology. The company also plans to launch a new Web site offering users free hosted services for document creation, sharing and storage.
Additional Resources
Executive Guides
Whitepapers

Newsletter Subscription

Sign up for our CIO newsletters!
Weekly coverage of the issues that impact corporate and government information
RSS Feeds

It is often said that the weakest link in the IT security chain is the human being. In our technological age it is inconceivable to travel without network tethers such as a laptop PC, mobile telephone or e-mail PDA. The road warrior is connected 24/7 to his home, corporate office/clients/partners and the Internet. What has occurred in the 21st century is that all of this technology is taken for granted, and security is never a primary issue or concern.

Over the past few months, I have heard one horror story after another about the most obvious and blatant form of security issue - reading a neighbor's laptop screen. Think about how many times on a plane, at an airport or in a restaurant, you look over and happen to read the display of someone next to you. It's only natural that our eyes wander. Most of the time the images and text are mundane, but every once in a while you recognize something that relates to your personal interest, occupation or company. In all probability, the other person doesn't know who you are or that he is committing a grave security breach.

Stories abound of mergers and acquisitions, leveraged buyout deals, real estate purchases, sales opportunities or job interviews that were successful because the competition's presentation or instant message conversation was viewed on a flight or in a coffee shop. This is not a network problem but a human problem that can be fixed by mandating corporate use on all corporate laptops of a privacy filter/privacy screen/security screen/screen guard that prevents anyone looking over your shoulder at the laptop display. Simple yet elegant.

Remember the old adage: Good fences make good neighbours. This becomes even more of a mantra when we look at road-warrior network security. That earpiece networked to your mobile phone is part of another problem. No only do we tend to talk in public at a volume that brings the entire room into our conversation, but we forget wireless technologies such as Bluetooth can be open to access unless device/user-specific identification is used for connectivity. It is possible to listen to both sides of a conversation in this manner unless the corporate user is mandated to invoke simple Bluetooth security options.

Remember the old adage: Loose lips sink ships. It is a constant source of humour to network-savvy industry analysts how PCs and other devices are open and accessible in a briefing room full of industry analysts. Using off-the-shelf software, one can not only share the connection but also record keystrokes and screen images from a laptop. This type of security issue is becoming more relevant with the proliferation of Wi-Fi public/semi-public hot spots and Wi-Fi telephones. The agreement between the start-up FON and Time Warner Cable will let home and corporate broadband customers turn their connections into public/semi-public Wi-Fi hot spots. Although popular in Europe, connection-sharing is shunned by most other US ISPs.

Connection-sharing is accomplished using a FON router (La Fonera) that splits a Wi-Fi connection into two channels: a secure, encrypted path for the FON user (Fonero) and an open public path for neighbours or passersby.

Nothing is wrong with the road warrior using public/semi-public hot spots for personal purposes. But from a corporate security standpoint, "public" anything is a problem. Personal firewall, antivirus, antispyware and VPN software should not be options for the road-warrior laptop. Use of encryption and identity verification are mandatory. Open, shared-use access should be forbidden, and any non-encrypted VoIP call over the Internet should be banned from corporate use. Draconian as this sounds, the corporate damage that could occur is even worse.

If you thought the Internet gave you some degree of freedom from security paranoia, that false sense of security came to an end on May 14, when all US broadband and VoIP providers were required by the Federal Communication Commission (FCC) to facilitate court-authorized wiretaps by intelligence and law enforcement authorities.

Remember this new adage: Security should never be an afterthought and must always be first and foremost on the mind of the road warrior.

Market Place
 

2008 CIO Summit

19th August, 2008 Four Seasons Hotel, Sydney Developed in partnership with CIO Magazine, IDC, INTEP and the CIO Executive Council.

The world of the CIO is extremely complex and diverse. Multiple priorities demand attention and decisions are needed instantly. Individual teams need to be driven towards common goals, and businesses strive to become more mobile, agile and responsive. For CIOs, the challenge never ends.

Every year the CIO Summit identifies what is top of mind for CIOs across Australia and New Zealand, and offers insight for CIO benchmarking and vendor strategic planning alike.

Recent IDC research shows that over 59% of CIO's believe that 'to achieve their business strategies, technology should be used more aggressively than today.'

Join us on August 19th to discover how this is possible with the latest technologies including Virtualisation, Web 2.0, IP Surveillance and Software as a Service (Saas).

Click here for registration.

Click here for more information.

Please email Denyse_Robertson@idg.com.au for further information.

  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Best Western forced to play defense on data breach disclosure 29 August, 2008 08:08:00

    Could hotel chain have done a better job of defusing story about system intrusion?
    The headline in this week's Glasgow Sunday Herald -- "Revealed: 8 million victims in the world's biggest cyber heist" -- was a grabber.
  • +

    US Terror threat system crippled by technical flaws 28 August, 2008 09:53:00

    US Congress charges that US$500m project to prevent another 9/11 is a complete failure.
    A US House subcommittee is charging that a US$500 million IT project intended to "connect the dots" on terrorists and help prevent another 9/11 is a failure; it can't even handle basic Boolean search terms, such as "and, or and not."
  • +

    Malware infects space station laptops 28 August, 2008 08:15:00

    Not the first time, says NASA; astronauts load up Norton AntiVirus
    Malware has managed to get off the planet and onto the International Space Station, NASA confirmed yesterday. And it's not the first time that a worm or virus has stowed away on a trip into orbit.
  • +

    Separation of duties and IT security 28 August, 2008 09:40:00

    Muddied responsibilities create unwanted risk. Kevin Coleman says auditors may start labeling poorly defined IT duties as a material deficiency.
    Separation of duties is a key concept of internal controls and is the most difficult and sometimes the most costly one to achieve. This objective is achieved by disseminating the tasks and associated privileges for a specific security process among multiple people.
  • +

    How to recruit and retain the best young security employees 27 August, 2008 08:32:00

    Today's youngest generation of workers, known as Generation Y, have different career goals than their parents did. What do you need to know to get them to work for you?
    The final installment in a series of articles about generational differences and security. Part one looked at managing workers in different age groups. Part two examined the types of security concerns that are most commonly associated with different generations in the general workforce. This article provides recruiting and retention advice for security employees.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Web Security SaaS: The Next Generation of Web Security

Discover the latest web security SaaS solutions. Learn how to increase overall security effectiveness and reduce the burden on your IT department. Uncover the security challenges facing SMB environments today and identify the critical elements that can provide you with lower-cost and easier-to-manage web security solutions.

Sponsored Links