Weak Passwords Major Problem for Data Security
Even in the wake of warnings and increased awareness about passwords being weak, the problem continues. This was evident in a recent data breach that exposed the Social Security numbers of over 280,000 people in Utah. The breach of a Utah Medicaid network server was hacked via a default administrative password. This allowed the cyber thieves to bypass the perimeter, network, and application level security controls that were built into the health agency's systems.
With such mistakes fairly easy to avoid, it continues to surprise experts that these aren't the first thing taken care of when attempting to secure a computer network. But many examples exist. The U.S. Department of Energy said after a security audit at the Bonneville Power Administration, the agency identified 11 servers that were configured with easily guessable passwords. Having usb and flash drive encryption will help a great deal.
Four of the power administration servers allowed remote users to access and modify shared files. Another server hosted an administrator account was only protected with a default password. The agency reported and urged stronger password protection, especially within national security critical infratstructure such as power plants.
The recent Global Payments data breach that exposed about 1.5 million credit card account holder's information was likely accessed via weak authentication mechanisms. And it is also believed that Chinese hackers got into the U.S. Chamber of Commerce's website via weak password protection.
Gartner analyst John Pescatore said the Anonymous hacking collective takes advantage of the very human tendency to use the same password for multiple accounts. "A lot of Anonymous' recent success has been in attacks where they have obtained users' passwords to external services and then found the same passwords in use at sensitive internal applications or in email systems," Pescatore said. That is "the curse of the reusable password," he added.
"The truth is, anyone trying to protect nontrivial assets should be using multifactor authentication and/or complementary controls to protect themselves," said Peter Lindstrom, an analyst with Spire Security. "The password has too many weaknesses, including the obvious human ones. At this stage of the IT game," he added, "there is really no excuse for using default passwords."
Oliver David writes articles for publications on subjects like hardware type of authentication and usb supported protection.
Corporations Not Confident in Personal Information Security
nside a new survey, 70% of organizations storing third-party information aren't "very confident" that the sensitive information stored inside their corporation is safe. More than 80% from the organizations that responded towards the survey had been really storing sensitive information from their clients, customers, vendors and company partners. About 50% had been ?fairly confident? that the info was protected. About 20% had been "not confident at all" that sensitive information was protected. And 5% had been "unsure."
It is disconcerting that a lot of businesses are nonetheless complacent with regards to information protection. It indicates that these organizations could have some severe concerns to answer ought to they suffer a breach. Actually, regulators like the SEC, ICO and EU would most likely deem that they failed within their obligation to supply suitable security protection to stop sensitive information breaches and impose a hefty monetary penalty.
Additional info gathered from the survey included much more insight into those that identified as "not confident" that information was protected -- only 10% didn't know exactly where the information is stored and 0% didn't monitor all information access. These extra information points make it clear that the lack of self-confidence in protection most likely stems from the ever-changing skills for cyber thieves to locate methods to access and steal information.
The Ponemon Institute's Price of Information Breach Study - which focuses exclusively on U.S. information breaches, also has shown that the price of information breaches has been declining as much more attempts are place into reaction and response. Probably the most substantial becoming that each the organizational price of information breach and also the price per lost or stolen record have declined. The organizational price has declined from $7.two million to $5.five million and also the price per record has declined from $214 to $194.
The survey states, "This decline suggests that organizations represented in this study have enhanced their efficiency in each preparing for and responding to a information breach". Nevertheless, it appears that as information breaches continue to happen and also the efforts of information hackers improves, companies really feel as although they by no means are ready and start to lack the self-confidence that they are able to manage and shield information security. Having secure usb flash drive review will add some confidence when selecting such devices, products and vendors for a company's data protection needs.
Oliver David writes and contributes articles for websites on topics like usb protection and usb encryption.
Web Enabled Tv sets: New Target for Hackers?
Internet connected Tv sets and set-top boxes are a little percentage from the a huge selection of an incredible number of American households. A brand new report from the study firm, NPD In-Stat is predicting that 100 million houses in each Canada And America and Europe will personal a tv which has Web content material capabilities by 2016. At this point, you will find restricted issues about info security regarding these connected TVS - like these within the Roku or Apple Television networks. Nevertheless, current revelations are raising fears these connected TVs will probably be a brand new security hole.
Roger Grimes, a blogger has discussed his exploits operating as a security advisor for an unnamed CATV service provider. Grimes wrote in InfoWorld about his function as a part of a team which was given the job of penetrating the CATV's network. The team was in a position to bypass the protection functions from the CATV provider's set leading box, redirecting the service's Disney channel to a porn website. These shenanigans had been on leading from the team's capability to get into the CATV provider's internet servers.
"Our objective was to determine if we could hack in to the set-top box, steal consumer individual info, pirate solutions, and incur denial-of-service circumstances." Roger Grimes wrote inside a current post. Adding, "we not just owned the box, but wound up taking root from the whole cable method."
The way forward for Web-connected Television is certainly going to become just like today's globe. There's a possible that this globe might see malware takeovers of TVs, DoS attacks, and all of the other hacker associated activity that's observed in present pc networks within the always-connected globe. Perhaps things like usb encryption and other forms of encryption will help.
Probably the globe might find hackers perform the following with Web connected TVs:
-- Present fake bank card types to fool customers into giving up their private info.
-- Intercept and redirect Web visitors back and forth from the HDTV, which might be utilized fool customers into convinced that "imposter" banking and commerce web sites had been reputable.
-- Monitor and report on consumers? private Web usage habits with out their information.
Oliver David writes and contributes articles for websites onissues like flash drive reviews and secure flash drives
Are Firms and Government Vulnerable to Data Breaches
A current survey showed that a majority of businesses as well as government organizations are blind towards the reality that they have a problem with their data protection. These organizations are at an excellent risk and do not even realize it.
Also, the companies may be unaware that they've currently lost data or had the private information stolen from their databases or computer systems by cyber thieves. This blindness implies that they're unaware that they've lost useful information or that their operations have been compromised by some means.
Here are some suggestions to help keep your data safe and your reputation sterling:
1. Remember that one of the worst errors would be to think that it's the responsibility from the IT division to safeguard customer and sensitive data. Security ought to have the attention of C-level management and it should be a part of the overall corporate strategy with both an outside and more importantly internal threat.
2. It is suggested from sources online which you control the core operations and make certain which ones are priorities for the organization. Then defend these operations through layering of protection. Monitor the flow of business interactions to be able to know exactly where the weak intersections and exactly where vulnerabilities are. Use usb encryption and other technologies.
3. Leading management of each organization should chair a cross-functional security compliance committee. The committee ought to manage determining what the essential information assets are that need to be protected and what the right mixture of internal and external protections are and putting them into place.
Governments, organizations and businesses can take a strong stance in securing data after which utilizing this to strengthen their reputation and trust from the public. Taking the extra steps beyond complying with regulations, organizations that do greater than the minimum to shield data and information will offer a increase in protection of information. A company can turn a strong corporate objective to secure and shield private information into a increase to corporate reputation and branding.
Oliver David contributes articles for websites on issues like usb flash drive review and usb protection.
Automation will be the New Greatest Friend of Hackers
Because the tools of security networks from cyber burglars improve in sophistication so do these tools utilized by the particular thieves themselves. Groups like Anonymous as well as other cyber crime groups are now favoring totally free automated tools to rapidly exploit web site vulnerabilities. What tends to make current incidents fascinating will be the speed and effectiveness from the hacks. The speed and ease had been accomplished through automation. 
Actually newer crime ware toolkits such have enabled individuals with minimal personal computer expertise to learn from cybercrime. This really is simply because these cyber crime tools automate the otherwise labor intensive procedure of making hard-to-spot malware. This malware that's created to find and steal sensitive individual information like bank account numbers and passwords and to make use of infected PCs as a part of a higher crime network of infected computer systems Nevertheless the sophistication level has been increased and these types of automation are becoming applied to make much more advanced web site hacking tools.
Automated hacks aren't new but now they've elevated sophistication. This really is even truer with regards to tools for exploiting SQL injection flaws. Higher attack tool sophistication can produce worrisome attack volume capabilities. Automation is really a important indicator that somebody desires to attain an economic climate of scale. Inside a current information breach in Europe the suspect admitted to exploiting 259 websites in 90 days an typical of 3 web sites each day. The suspect was the teenager and he had conducted web site reconnaissance to catalog bugs in applications and Internet-connected databases then returned to these websites to exploit them. Automated attacks might also display telltale signs that organizations can use to assist spot and block such attacks whilst they are in progress.
Utilizing encrypted flash drives is one way that businesses may avoid the attack of hackers. Automated attacks have a tendency to be launched against a sizable quantity of websites more than a brief time period which means that much better attack intelligence and info sharing could assist organizations spot these kinds of attacks as they are taking place.
Oliver David writes and contributes articles for websites on issues like usb flash drive review and usb protection.
How to Keep Your Personal Data Private in a Growing Digital World
There have been concerns over privacy of personal data ever since the internet became more ubiquitous for personal and professional use. These concerns have been on the rise as more high profile data breaches are discovered and reported. As well, companies like Google, Facebook and Twitter battle with governments over data privacy, the time to be concerned seems to be here and now.
Google recently upgraded and began to implement its new privacy policy. This took place despite strong opposition from the European Union and French authorities. The new privacy policy give Google the right to consolidate what it knows about users across all of its services (Google+, YouTube, Picassa, etc), something it had never done before. Google argues that this new policy will provide a "simpler, more intuitive Google experience."
These popular online sites aren't the only digital companies that are under scrutiny for their privacy policies and use of customer data. This spring, it was discovered that Path and Hipster (mobile apps) had been uploading user address books to their servers. Also, Apple and Android phones were also found to be providing access to an owner?s photos, even without permission from the user/owner.
The question has to be raised both in the U.S. and Europe about who actually owns the data. Is it the user and should be safeguarded by the service, to be removed upon an account cancellation. Or is this data that of the application/company to be monetized and used in ways that put individuals at risk for privacy invasions and data theft. Utilizing usb protection is a great way to protect privacy.
Recently it was announced that many advertising networks and leading Internet companies such as AOL, Google, Microsoft, and Yahoo had agreed to implement the Do not Track feature: essentially, it stops websites (and advertising networks) from tracking users. This blocks certain practices used by advertisers, such as personalized advertising.
This move was in line with a White House call for a "Consumer Privacy Bill of Rights". The whitepaper suggest that user's online data should have the same set of protections that they should have offline. Fundamentally, the US approach calls for Internet companies and industries to voluntarily adopt regulations with enforcement by a regulatory agency. This hasn't been implemented but it is clear that steps are finally being made to give online data the privacy protections needed in an ever-increasing digital world.
Oliver David writes articles on data security on topics like encrypted flash drive and secure flash drive
Monetized Info 1 of 3 Threats to Security
At a current security conference, 1 from the leading security professionals pointed out his views from the 3 greatest information security risks for the coming year. This professional feels that the rise of large information (e.g., the monetization of user information), ill-conceived regulations and laws and also the prospect of a cyber-war.
The expert's opinions had been as opposed to other specialists who cited issues about cyber criminals, terrorists and hacktivists. In common, all specialists agreed that these individuals or organizations which are taking benefit of technologies to additional their very own company or profit motive threaten the general viability from the Web.
This shift toward taking a look at user information as a commodity is inevitable as affordable information storage increases. Businesses like Apple, Amazon and Google are basing their companies on the prospect of monetizing user information, like pictures, documents, video, search background, buying behavior as well as other on-line activity.
Information is no longer becoming kept separate, but aggregated to ensure that customers may be shown targeted advertisements or directed to customized services. Marketing is only just 1 way information may be collected, aggregated and monetized. Organizations can assess credit-worthiness, evaluate workers or perhaps take the step toward linking with government or other legal information.
The risks to security arise simply because customers need to relinquish manage more than their information. Large Information cares about creating cash from advertisers. IT or user privacy aren't priorities.
Ill-conceived regulations from authorities are the second greatest danger. Legislators are listening to law enforcement officials requests to pass laws that permit eavesdropping to catch cyber-criminals. These types of laws don't make the web much more secure for the vast majority of customers. Companies are manipulating the government to propose problematic laws to be able to additional their company objectives. These businesses are lobbying lawmakers to pass laws that benefit their very own companies, rather than what would possess a universal benefit.
The final threat will be the technological arms race presently going on in between nations. Because the hysteria concerning the prospect of a cyber-war escalates, nations like the Usa, China, Russia and also the United Kingdom are creating defensive and offensive technologies and developing up cyber-military capabilities.
Check out articles of secure usb flash drive review.
Oliver David contributes for Data Security Weekly and other blogs on subjects like encrypted flash drive and usb protection.
China Releases Personal Data Protection Recommendations
China has published a draft for new recommendations on personal data protection. The document
"Personal Data Protection Guidelines for Public and Commercial Service Information Systems" was developed by a panel of experts and submitted for review prior to becoming a national standard for the country.
The China Software Testing Center, a government institution that is affiliated with the Ministry of Industry and Information Technology (MIIT) coordinated the efforts to draft the guidelines and release them for review. The document involved more than 30 various government agencies, organizations and commercial entities.
With the release of the draft guidelines, Ouyang Wu, Deputy Director General for Information Security at MIIT, explained that the current situation for personal data protection in China is "very concerning". Criminal organizations have been exploiting the data they obtain from government and commercial databases for personal gain. China, like other countries has had a spate of high profile data breaches in the past year. This has raised public concern and awareness of the issue.
The draft guidelines provide procedures for the gathering, processing, transmitting and destruction of personal data. Ouyang says that organizations following the guidelines will need to follow eight principles: a clear purpose for data collection, collect the minimum amount of personal data possible, prior notification of the collection to the individual, user consent for collection, strong security, trust and finally, accountability. When the use of a secure flash drive then often times data protection and personal protection are afforded in China.
The guidelines are not mandatory. Currently, there are more than 200 laws and regulations, which touch upon the area of personal data protection. However, there is no comprehensive legal framework governing this area.
In 2009, the revised penal code added a new category of crimes on "selling or illegally provisioning of citizens" personal data. However, the articles do not define what would qualify as criminal activities in this category.
Oliver David writes articles on topics like usb encryption and usb protection.
5 Methods to Avoid Data Loss: a Information Security Checklist
Numerous monetary institutions are creating plans to meet their security requirements in light from the high profile information breaches which have been front and center within the news. Every bank should make their very own personalized strategy, nevertheless you will find some fundamental actions that may be taken to enhance and improve general information danger management.
Based on a study by the Ponemon Institute, criminal information breaches are on the rise, accounting for 31% of breaches in 2010 -- a seven-point improve from 2009. The institute also discovered that the typical organizational price of a information breach climbed to $7.two million in 2010, whilst the price per compromised record averaged $214. General, total breach expenses have grown each year because 2006.
Certainly one of the very first issues that any bank ought to undertake would be to comprehend the information life cycle in the institution and at branches. Taking the time to investigate and determine how monetary information is collected, how it's utilized, how it gets transmitted from 1 place to an additional, how it's stored and lastly how it's destroyed. Following this analysis, it's significantly simpler to determine exactly where the holes or vulnerabilities are within the information chain.
The fundamental rule for managing sensitive monetary information would be to 1st determine in the event you require it, if not, then do not gather it. In the event you do require it, gather what you'll need after which manage and encrypt it. Following you no longer require it, then destroy it securely (whether or not digital, or paper).
Listed here are a couple of suggestions for securing bank information:
1. Protect bank waste. Yes, you do not wish to randomly throw out paper files. It's important to take the additional step of shredding paper files.
2. Identify sensitive information. Make certain supervisors know what kind of information may be utilized by cyber thieves and that they know how you can secure it.
3. Secure the ATM. All as well frequently information hacks are putting unauthorized skimming devices as well as little cameras close to the ATMs to be able to acquire account numbers and pins.
4. Keep an eye out for unattended consumer information. Create a method to verify that consumer information is stored when workers are away from their desks, whether or not that's a policy that it should be locked up when not in use or that computer systems should be turned off when the employee is away from their desk.
5. Finally, wipe clean the memory on difficult drives. Make certain the memory is cleaned on all devices like copiers, computer systems, fax machines as well as mobile devices. Working with encrypted flash drives is a key way to avoid data loss.
The price of complacency is as well high to not take these as well as other actions to become particular monetary information doesn't wind up within the incorrect hands. This really is some thing that no monetary institution can afford in these digital occasions.
Oliver David writes and contributes articles on subject matter like secure usb drive review and usb protection.
Finders Peekers Losers Weepers The Case of Misplaced SmartPhone
Symantec researchers intentionally lost 50 smartphones in New York, Washington, D.C., L . A ., the S . F . Bay Region, and Ottawa, Canada in public locations like elevators, park seats and food courts. The lost devices included corporate and individual information like passwords and e-mail.
Prior to the phones had been left behind, every 1 had been furnished with logging software program to record what files and apps ended up being accessed and GPS tracking switched on to keep track of the device's physical place.
The Symantec researchers discovered inside a current smartphone study. What is even worse, whoever finds it'll most likely snoop about taking a look at pictures, emails as well as other private info, Symantec stated.
Individuals had been most likely to access delicate individual and company information stored on them, like password data files, private pictures and e-mail messages, Although 50% from the finders attempted to send back the devices towards the owners listed within the get in touch with file, they nonetheless succumbed towards the enticement to spy about beforehand, Symantec stated. About 89% from the finders viewed individual information and 83% accessed business-related information stored on lost smartphones, Symantec discovered.
None from the smartphones within the study had any type of password or other security controls enabled to shield the information. About 57% of individuals who discovered the phones viewed personal files named "saved passwords". About 60% checked individual e-mail inboxes and accessed online community tools on the telephone, and 72% opened a folder marked "private pictures."
Thinking about that only half from the devices had been ever returned, customers require to think about that if they ever shed their phones, they would end up exposing all of their info, accounts and company information to strangers. Having usb protection could help secure the data.
Organization need to put a guideline in place to address the best way to wipe data before a device is replaced and to work with their employees to have their old deviceswiped before they are disposed of in the secondary market.
Oliver David writes and contributes articles for Data Security Weekly and other blogs on secure usb drive review.
Posts
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « May | ||||||
| 1 | 2 | 3 | 4 | 5 | ||
| 6 | 7 | 8 | 9 | 10 | 11 | 12 |
| 13 | 14 | 15 | 16 | 17 | 18 | 19 |
| 20 | 21 | 22 | 23 | 24 | 25 | 26 |
| 27 | 28 | 29 | 30 | 31 | ||
Blogroll
Twitter Updates
- Encrypted Flash Drive, Encrypted USB Flash Drive, Encrypt USB encrypted flash drive,encrypted usb flash... http://ff.im/t5lDD 2010-11-03
- http://www.lok-it.net/usb-protection/ Organizations now require a high level of USB protection. LOK-IT is a secure... http://ff.im/rkISJ 2010-09-30
- http://www.lok-it.net/usb-protection/ http://ff.im/riuVx 2010-09-29
- More updates...
Powered by Twitter Tools