|
|
Like this article? PLEASE +1 it! |
|
2012 – The Year of Cyber Espionage?
|
| Guest post by: Dovell Bonnett |
Article Overview: Using social engineering attacks are still the best and cheapest way to distribute malware. Spam emails, phishing, spearfishing, etc., all utilize attachments that can hide the malware. It still is amazing that such an and old and simple method is still the most effective. An according to some experts, educating the employees about information security is a waste of time. I disagree since even if one person is helping by being educated and aware it is better than having none. But education alone is not the solution.
![]() |
Free Download - Zappos Data Breach - Customer Safety and Security By Dovell Bonnett |
2012 – The Year of Cyber Espionage?
Lucian Constantin’s recent
article “Expect more cyber-espionage, sophisticated malware in ’12, experts say”
states that cyber-attacks in 2012 will increase with more sophisticated
malware. Certainly companies like MicroTrend, Symantec and others have their
work cut out for them to eradicate these attacks once they are launched. But
taking a step back, the question arises as to how malware is first getting into
the networks.
Answer: employee’s carelessness.
Using social engineering
attacks are still the best and cheapest way to distribute malware. Spam emails,
phishing, spearfishing, etc., all utilize attachments that can hide the
malware. It still is amazing that such an and old and simple method is still
the most effective. An according to some experts, educating the employees about
information security is a waste of time. I disagree since even if one person is
helping by being educated and aware it is better than having none. But
education alone is not the solution.
Technology applications,
networks and operating systems have to incorporate security as one of their key
design components. Stop the patching and all the backward compatibility design
concerns and start create an entirely new OS from scratch. We don’t run DOS and
Windows 98 anymore.
Software applications also
need to incorporate high security standards like integration with multi-factor
credentials. Using a smartcard that first authenticates the user to the card,
then the card to the computer, then authenticates the card and server to each
other, and finishes up with the user to the application can greatly improve a
company’s security.
Public cloud services are
still scary at best. Do you really know how and where your data is being
stored? Plus, when some of the biggest public cloud companies are “sidestepping
security” with protection clauses in their contracts should tell you something.
Private clouds can have more security safeguards but it requires knowledgeable
people to build and manage.
Security is only as strong
as the weakest link and that link is the employee. I would wager that majority
of the employee caused breaches are done through carelessness. Employees have
to get their jobs done and will often circumvent security protocols so as to
increase convenience and efficiencies. That is why any security plan has to
take into account the user. Otherwise, corporate officers are lulled into a
false sense of security. A 25-character random password that has to be changed
every 7 days is super security but don’t be surprised when there is an increase
in Post-it Note supplies because these passwords simply cannot be memorized by
most employees.
Article Tags: cyber attack, identity theft, internet security, password management, smart cards
|
About the Author: Dovell Bonnett RSS for Dovell's articles - Visit Dovell's website Founded in 2005 and headquartered in Ladera Ranch, California, Access Smart delivers Access-as-a-Service (AaaS) solutions by way of a password manager for Windows authentication to reduce the risk of cyber-attacks. Access Smart implements AaaS using contact or contactless smartcards, magnetic stripe or 125kHz Prox technologies. The value that Access Smart brings is to offer more security functions and affordability onto a single employee ID badge. Security does not have to be cumbersome to be affective. That is why our products are designed using state-of-the-art security technologies while focusing on ease-of-use and low cost-of -ownership. Previously, smartcard technology was only available to governments and Fortune 500 companies. Access Smart has turned that model upside down by matching the technology to the needs, no annual subscription fees and fully transferable licenses to keep security affordable to even high employee/student turnover businesses. The Access Smart team has over 50 combined years in the smartcard and security industry. By addressing the very real problems from a systems mindset, Access Smart delivers everything for a company to implement AaaS within hours and not months/years. Please contact Dovell Bonnett at Access Smart as to discuss how best to implement Authentication, Authorization and Non-Repudiation into your business. Access Smart - The Alternative to PKI. Click here to visit Dovell's website Preventing Physical Identity Theft The Growing Threat of Medical Identity Theft AccessAsAService AAAS By Access Smart The Law May Consider Your Business a Bank MORE HACKING WHEN WILL IT STOP |
Related Forum Posts
Share this article with your friends. Fund someone's dream.
Leave a comment below or share on the left and you'll help support entrepreneurs in Africa through our partnership with Kiva. Over $50,000 raised and counting - Please keep sharing! Learn more.
Get advice & tips from famous business
owners, new articles by entrepreneur
experts, my latest website updates, &
special sneak peaks at what's to come!
Stay Employed In A Down Economy
Small Business Internet Marketing
Fighting the Saw-Tooth Affect
Email us your ideas on how to make our
website more valuable! Thank you Sharon
from Toronto Salsa Lessons / Classes for
your suggestions to make the newsletter
look like the website and profile younger
entrepreneurs like Jennifer Lopez.



