Friday | 9 January, 2009
CIO
Secure in My Identity
Bruce Kirkham 11 October, 2005 10:03:23

"Take security issues into your own hands," the experts told me. Now all I've got are sore hands . . .

I admit it - I'm to blame. I used to think viruses, spam and security breaches were caused by bored students, criminals and Nigerian princes. They were assisted by people in Redmond releasing operating systems with holes in them, ISPs who let spam mail through or education authorities who taught people to spell (I used to pick dodgy e-mails by the poor spelling).

Having read reports by Gartner and others on security, I now know the mistake lies with me. It was me who didn't download yesterday's urgent patch until today, me who didn't turn on all the security protection that the vendors don't turn on in the base product and me who didn't test that the latest mandatory patch would stop my database working.

How could I possibly predict that opening unsolicited e-mails with attachments promising naked tennis player pictures or lengthening tips (in both meanings) could result in a virus attack? Anti-spyware vendor Webroot says the average business computer has 27 spyware pieces, which prompted me to check mine. My laptop had 83, but I've always considered I was well above average.

The real trouble is that hackers appear to read their e-mail more regularly than I do, because as soon as a security update bulletin is released, new viruses exploiting it deluge me while I'm still installing last week's patch.

My other security issue was wireless access. In tracking down what was causing a sudden huge excess in downloads, I discovered a guy parked outside with a Pringles can antenna. While he was engrossed in his laptop, I snuck outside and siphoned all his petrol. Then I blocked his access and watched as he drove away. He only made it 300 metres. These days petrol is worth a lot more than megabytes, so I reckon we're even now.

I have unearthed a valuable shareware tool that eliminates the most insidious virus to contaminate the business world: non-comprehensible corporate speak. Bullfighter (ouch!) analyses documents and presentations to reveal buzzwords empty in meaning. I recommend it highly to other people (clearly I do not require surveillance by a technological device in order to establish clarity in the phraseology within these literary oeuvres).

The biggest security issue today is identity stealing. Viruses are increasingly originating inside company DMZs, credit card identities are being stolen and the spotlight is now on biometric user authentication. The most common method is handprint recognition, although movies tell me iris recognition is the way to go. A more accurate biometric target is the ear, according to groundbreaking work by Southampton University researchers (when will they get a real occupation?). The ear is ideal as it changes very little between birth and old age. The drawback is that hair can obscure the ear, but I'd overcome that by mandating all employees have number three haircuts.

It was while working with health researchers that I hit on the best biometric test. We all know DNA is the most accurate individual marker, and tests have become cheap and rapid. So I've changed my computer keyboard to incorporate a DNA analysis test and have embedded tiny syringes into those little bumps on the keytops between D & G and between H & K. Each time either key is struck, a small blood sample is taken, analyzed and compared to the stored user record. Should the DNA records not match, the system is immediately locked.

As a biometric security device, it has been an outstanding success. The only downside is it causes considerable pain in the index digits when typing large documents.

Which is why, excepting one proper noun that I couldn't avoid, I've not used those two letters throughout this entire article. It's a small price to pay to guarantee accurate user identification (ouch!).

Bruce Kirkham is a veteran IT professional specializing in leading-edge technologies and scepticism, who views the IT industry not so much as "dot com" as "dot comedy"

Featured Whitepaper Sponsors
Market Place
 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Data breaches rose sharply in 2008, says study 08 January, 2009 08:27:00

    More than 35 million data records were breached in 2008, according to the Identity Theft Resource Center.
    More than 35 million data records were breached in 2008 in the U.S., a figure that underscores continuing difficulties in securing information, according to the Identity Theft Resource Center (ITRC).
  • +

    Rogue SSL certificate exploit puts VeriSign on the spot 07 January, 2009 11:04:00

    Wishes "white hat" researchers had notified VeriSign before public demo.
    Following the success of researchers last week in creating a false SSL certificate based on VeriSign's RapidSSL brand, the company is scrambling to explain how it happened, how it's preventing it from reoccurring, and whether its other SSL certificate-generation services are at risk.
  • +

    With Gaza conflict, cyberattacks come too 05 January, 2009 08:03:00

    Pro-Palestinian hackers have defaced thousands of sites following attacks in Gaza.
    The conflict raging in Gaza between Israel and Palestine has spilled over to the Internet.
  • +

    5 ways to secure your Blackberry 18 December, 2008 12:58:00

    What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands
    What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands.
  • +

    Wireless VPNs: Protecting the wireless wanderer 18 December, 2008 11:04:00

    Employees sipping café Java over their wireless laptops may think a VPN makes them safe and secure. With careful configuration, there's some chance they're right
    Employees sipping café Java over their wireless laptops may think a VPN makes them safe and secure. With careful configuration, there's some chance they're right.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Business Intelligence and Enterprise Performance Management: Trends for Emerging Businesses

Hyperion surveyed 163 companies to understand BI and EPM requirements, evaluation processes, and extent of adoption. Top areas of current and future investment for emerging businesses include budgeting and planning as well as management reporting solutions. Read on to discover more.