Tuesday, 1 May 2007

Home Office to target gadget security?

BCS - 01/05/2007

Apple and Sony could be enlisted by home secretary John Reid in a bid to boost security features in electronic devices, according to reports.

A spokesman for the Home Office indicated that Mr Reid is set to approach the two firms in the next few weeks to join a summit that already includes a number of mobile phone manufacturers, reports Reuters.

Items such as mp3 players and mobile phones could feature more anti-theft specifications as a result of these relationships between the Home Office and manufacturers.
‘During the coming week we’ll be drawing up a list of other manufacturers who will be the best companies to include for the summit,’ the spokesman commented.

Mr Reid told the BBC’s Sunday AM radio show last week that criminals tend to ‘move on’ when it comes to stealing electronic gadgets, with security advances in one area often leading thieves to target other items, he said.

What about Data Security? We have the solution! SecureStix Biometric Flash Drives

Intellitech I.T. Solutions Ltd. - "Your Total InfoTech Provider"

UK data centres ‘in crisis’

BCS - 01/05/2007

The UK’s data centres are suffering from a lack of capacity to cope with increasing IT demand, according to new research.

About 43 per cent of data centres are seeing their physical space dwindle while power density is rising to a record high, the study by the Aperture Research Institute has revealed.

Over a third of the managers surveyed said their average rack uses between seven and 18 kilowatts or more, with the majority of respondents stating that at least three-quarters of data centre space is already reserved for IT hardware.

In addition, the various issues surrounding the use of blade servers mean that human error is increasingly leading to outages, the report warned.

‘There’s a gap between IT and data centre facilities that’s resulting in a rapid increase in high density equipment without thinking about the ability of a data centre to reliably support that capacity,’ commented Steve Yellen, vice president of marketing at Aperture.

Consultancy firm BroadGroup recently issued research findings suggesting that service revenues across European data centres are set to surpass the €3 billion (£2 billion) mark over the next two years.

Intellitech I.T. Solutions Ltd. - “Your Total InfoTech Provider”

Beware of fake security software, warns firm

BCS - 26/04/2007

Hackers are increasingly attempting to trick consumers into buying software that they believe to be genuine anti-spyware applications, according to one firm.
There are currently four fake protection applications on the market for every one genuine product, download site Snapfiles told Vnunet.com.
This fake software can appear to be genuine to users while providing false scan results, failing to clean the system of existing spyware and occasionally installing malware onto the user’s PC itself.

According to Harvard Business School assistant professor and spyware researcher Ben Edelman, fake anti-spyware software is ‘a huge problem’, with another download site, Tucows, also telling Vnunet.com that it believes the bulk of security software to be fake.

Statistics from the Federation Against Software Theft, which was founded in 1984, show that
British firms have paid more than £1.8 million in fines for using unlicensed applications to the Business Software Alliance.

Intellitech I.T. Solutions Ltd. - “Your Total InfoTech Provider”

Survey reveals compliance of company websites

BCS - 27/04/2007

Research reveals that a significant percentage of company websites are not in compliance with some important regulatory demands, subsequently leaving firms at risk of facing cash fines.
In a survey of 106 businesses carried out by ClearPeople 70 were found to be in breach of company law, failing to disclose information such as company number and registered office details, for instance.

In total, only 37 companies polled were in direct compliance with current rules, suggesting that more needs to be done to bring the majority of companies up to speed. It is recommended that companies achieve this by displaying the relevant information on their websites.
‘The majority of companies had neglected to include company registration number while only a few (less than ten) had left out a valid email address or the physical address to the registered office,’ explained Thomas Hageman of ClearPeople to Freelance UK.

‘I would expect the larger listed UK companies to be more compliant and small to mid-sized companies to be, possibly, even less compliant.’

Intellitech I.T. Solutions Ltd. - “Your Total InfoTech Provider”

Virus Protection & E-Mail Fraud

Business Destroying Security Flaws - Virus Protection & Email Fraud

The most damaging viruses are those which you don’t even know are there. “Viruses” come in all shapes and sizes.Some, called “keyloggers” or “Spyware” log every single Keystroke you press on your keyboard, including bank account numbers, passwords, even the information you type into emails.

All of this information is then sent to the receiver who can use this information to access your accounts, purchase items, or worse, sell this information to other like-minded organised groups.

The more painless types of spyware are those which simply record which websites you are visiting so that companies know your habits and can target products for you.

Email attachments regularly contain viruses, so if you’re unsure of the attachment within the email, or of the name of the person who sent you the email, don’t open it. There are also a number of email hoaxes going around which are designed to look like an email from your bank, asking you to click the link and login to your banking environment to verify your details…some even suggest that your details have already been compromised and instruct you to login and change them – never click the links on these types of emails!

Recommendations:

1. Find a good virus protection program immediately. Ensure it has regular virus updates, spyware / Trojan protection and preferably Spam email protection as well.The best kind also have an inbuilt “firewall” protecting your computer from “attacks” from the outside world.

2. Never click a link in an email from a financial institution, ebay, paypal or any other site which requires your username and password for financial authentication.Always type your bank webpage into a new browser window or call your bank or financial institution if you unsure if you should act on an email from them.

Intellitech I.T. Solutions Ltd. - Representatives (UK & Europe) for SecureStix

Wireless Access (WiFi)

Business Destroying Security Flaws - Wireless Access

Are you currently running a wireless network?If so, do you really need it? (eg is there a network point close by which could be used instead?)

Wireless networks are your weakest point of access. If you have, or are considering setting up your ownwireless network, be aware that the default setup in most wireless routers configure the connection with absolutely no security – that is, anyone within range can connect to and use your connection to the internet, or worse, access your confidential files!

Did you know that in many capital cities around the world you will find “chalk” markings on the footpaths outside buildings? These chalk markings tell other like-minded people what wireless networks are available and what security (if any) is enabled – so that person sitting on that park bench with their laptop or in that car outside your office could be accessing your wireless network right now…you might want to take a moment right now to look out your window!
If you must run a wireless network, be sure to turn on encryption and go the next step by setting a list of approved devices to connect to your network.

Recommendations:

1. Turn off wireless networks if they are not critical to your business.

2. Turn on encryption if you must use a wireless network.

3. Lock down your wireless network to fixed MAC addresses.

Each computer has a unique MAC address, it’s like its DNA. These are hard coded into the machines and are difficult (not impossible) to replicate. Once the wireless connection is established, you can instruct most wireless routers to restrict access to only those chosen MAC addresses. This can be a little annoying if you regularly have new users wanting to connect to your wireless network, but is worth the investment in time.

Once setup, I also recommend you turn off the “broadcast” option in your wireless router - this will ensure that your network is not “advertised” to anyone else within wireless range.

Intellitech I.T. Solutions Ltd. - Representatives (UK & Europe) for SecureStix

USB Keys (Memory Sticks / Flash Drives)

Business Destroying Security Flaws - USB Keys (Memory Sticks)

These are a fantastic device as they are portable, can hold ever-increasing amounts of information and are the quick and easyway to store all of your important files in a neat little package.

Most people use these to backup important documents and files. Many people transfer their current projects to it so they can take them out of the office to work on from the comfort of their homes. Other people keep all of their personal and secret information on them, like their resume’s, personal photos and emails or latest proposal, etc.

Although very convenient, the majority of these devices are NOT SECURE in any way!

Should you drop this in the street, or have it stolen from your office, home, car or handbag, all of your information will be instantly available to the finder/thief upon insertion in their computer. What will they find out about you, your business, your clients or your next big secret product launch? All unsecured USB keys should be banned immediately.

If USB keys are required in the business, use a USB Stick with a Fingerprint Indentification built-in to ensure no-one can access your sensitive information.

Recommendations:

1. Ban all USB Key (Memory Stick) devices within your company if they do not have Fingerprint recognition technology installed

2. For those employees who must have a USB key, supply them with a secure key which uses fingerprint recognition technology to authenticate the user, available from SecureStix. (www.securestix.co.uk)

I trust you found this reading useful and hope it gives you some strategies you can put in place to immediately minimise the risk, inconvenience and potential loss of business you would otherwise encounter through the loss or theft of your personal and company confidential information.

If you have found this report useful and you are not already a member, why not join the “Secure Me” club. www.securestix.co.uk It’s completely free of charge and as a member you’ll get monthly ideas, tips and strategies that you can use in your business to help you reduce the risk of theft or loss. Not just that, but you’ll also be the first to hear about the newest products as they’re being created and will even get to have input on their final design and pricing structure.
Also, why not tell your friends and colleagues too so that they can share the benefits?

Intellitech I.T. Solutions Ltd. - Representatives (UK & Europe) for SecureStix