New Technology Reviews!.: Changing

Vulnerability Management - The Changing Nature of Attacks

Attacks on users of the Internet have been noted for many years by the press and other observers but only recently have the attacks become more frequent and more deadly. Since almost every business and organization of any size relies on an open and accessible internet to remain competitive, cyber attacks are becoming more universal.? Increased effectiveness, adaptability and aggressiveness of malicious and destructive cyber attacks.? Increased attacks through trusted sites and botnets (a recent study shows that most cyber attacks come from IP addresses in the United States and it has been estimated that up to one quarter of all personal computers and servers connected to the internet may be part of a botnet.).? An increase in simultaneous and coordinated attacks at all levels of the internet? Attacks on U.S. government networks, critical infrastructure and increased frequency of localized attacks.? Infrastructure attacks with wide ranging and potentially long term effect.? Convergence of attacks using wolf pack like tactics.All level of internet users are affected and networks are being subjected to daily breaches of security. It doesn't matter if you are a small company or part of a large organization unless preventative steps are taken, your network is increasingly vulnerable to attack.The nature of Cyber Attacks is becoming More DestructiveInitially, cyber attacks were more nuisance than danger. Hackers originally released malware in the form of viruses/worms and spyware usually for the thrill of bringing down a selected network or site. Disgruntled employees utilized hacking tools to disrupt the business of their former employers. Eventually criminal used penetration techniques to steal credit card and other passwords.But recently, cyber terrorism has emerged which, in addition to attacks on corporate networks, posed a direct threat to U.S. military and civilian agencies and critical infrastructure. Because of the problems with attributing the attacks to the actual source, this threat has become difficult to contain.Cybercrime is becoming more aggressive, organized and effective as a transnational/multinational business. High technology online skills and techniques are now available to all interested parties, including hostile nation states, criminal elements and individuals and groups that covertly represent terrorist groups.The development and spread of automated attack and botnet tools and their use by cybercriminals has overwhelmed many current methodologies used for vulnerability management and the tracking of and defense against cyber attacks. In addition, vulnerabilities of the U.S. critical infrastructure (power, water, transport and communications) tend to attract cyber criminals to extort money, or damage the U.S. economy in a way that eventually affects national security.The result of this dangerous trend is the risk of losing proprietary knowledge that gives our country its competitive and military edge, loss of command and control of military assets and denial of service attacks that can shut down military bases and critical infrastructure like the power grid and energy plants.The transnational nature of cyber terrorism is also thriving in a culture of ineffective regulation and suspicion over allowing domestic network access to potential adversaries. Multilateral treaties, until recently, have not addressed the problem.What is the Solution?There are a number of areas that need to be addressed:? AwarenessAwareness of the threat is critical in all aspects of the economy including media, government, and corporate and the real, changing nature of the threat is mandatory.? Development of TechnologyTechnology that is available, easy to use, and adaptable to new threats would contribute towards containment of many attacks? More Effective and Adaptive Vulnerability Management Tools and TechniquesVulnerability management is continuous process that is never completed. Easy to use software tools are required as well as a dedication of real resources and management commitment to address the problem. Constant monitoring and remediation is required.? Government ActionRecently the present administration has taken steps to streamline and focus energy of the cyber security problem in civilian, defense and intelligence agencies. The Department of Homeland Security (DHS) has received additional authority to fight cyber terrorism and the cyber functions of defense and intelligence have been merged under one command - Cyber Command.These steps are but necessary first steps and much more work is required.? International TreatiesThe United Nations has recently taken steps toward the drafting of an international cyber agreement with the United States and Russia agreeing to enter negotiations. Since the United Nations is notoriously slow, much more action is required.These steps form a template and outline for future action. The threat is real and growing and must be addressed.	 	 		 			 				 					 						Jon M. Stout is Chief Executive Officer of Aspiration Software LLC. Aspiration Software LLC is an Information Technology/Cyber Security services provider focused on the Intelligence Community (IC). For more information about <a href="http://aspirationsoftware.com/core-capabilities" target="_new">Cyber Security and Information Assurance</a> and Employment Opportunities in the Intelligence Community go to <a href="http://aspirationsoftware.com" target="_new">http://aspirationsoftware.com</a>

Vulnerability Management - The Changing Nature of Attacks

Attacks on users of the Internet have been noted for many years by the press and other observers but only recently have the attacks becom...

The Alternative Workplace - Changing Where and How People Work

I was visiting with an agent recently, and he was talking about losing a key employee that was moving because their spouse was transferred to California. He was talking about not wanting to deal with the hassles and challenges of replacing someone he had finally trained to do a great job. Their responsibilities in the agency included office manager and Account Manager for large Commercial accounts.My suggestion was to keep the person, and allow them to work from California. His first response was to point out that the person was not licensed in California. However, the idea was not to write new business in California but to continue their current job from a remote location. Although it took some time, this owner came to realize what is becoming a national trend - the migration to Alternative Workplaces. When, where and how people work is changing on a daily basis.If your agency is considering Alternative Workplaces, here are 6 questions you will need to answer as you make your decision.Question #1Do You Have A Business Reason For Considering An Alternative Workplace? Working virtually is not "benefit" or a "perk". Creating an Alternative Workspace is no different than any other decision regarding the operation of your agency. Moving to a virtual way of doing business requires a business decision that supports how your agency does business. Here are some valid reasons to consider virtual staff:o	Difficulty in finding qualified staffo	Alternative to brick and mortar due to limited workspaceo	Desire to retain qualified staffAs with any business decision, "do the math" and determine potential revenue (such as new/retained business), anticipated expense (such as the cost of expanding workspace or building a new office) and projected ROI (based on income earned or expenses saved). If you don't have a definite business decision that will make the agency money - do not consider an Alternative Workspace at this time.Question #2Does Your Agency Have An Open Culture and Proactive Management? Rigid agency cultures will have a difficult time adjusting to the transition to an Alternative Workplace. Even though you explain why some staff are able to work from home and others must come to the agency every day, your decision can still create resentment. If your agency is considering an Alternative Workspace, a good time to begin is immediately. Agency culture is not changed overnight. Having a flexible culture is essential to working virtually. Here are some milestones that indicate an open culture and proactive Management:o	Staff feels safe approaching Management with suggestions and concernso	Staff has a strong level of trust in Managemento	Management feels safe confronting staff with areas of needed changeo	Management has created a consistent method of communication with the staff such as regular staff meetingso	Management informs staff of their plan to introduce new ways of doing business, such as changing to Alternative WorkplacesQuestion #3Are You Willing To Establish Clear Ways To Monitor Staff Productivity? One of the first questions I am asked is, "How do you monitor performance for staff that work from home?" The answer is actually quite simple. Every staff position needs, and deserves, a clear job description that includes measurable requirements, expectations and boundaries. The old stand-by where owners want staff that "are mature enough to know the right thing to do and just do it" is an excuse for leadership that is not willing to lead.When it comes to virtual staff, job descriptions and expectations are even more critical. Looking over their work during the day is not possible. Instead, Alternative Workplaces require structures such as:o	Well defined job descriptions that include measurable expectations and productivityo	Well defined consequences that includes both positive and negative resultso	Scheduled reports to Management that provides accountabilityo	Regular communication with the virtual staff so they have regular feedback on the quality of their workQuestion #4Does Potential Virtual Staff Have A Home Office Environment Suitable For A Professional Way Of Doing Business?Just as an Alternative Workspace needs the right person, it also requires the right work environment. A clean desk and professional workspace is important in the agency; and it is even more essential for virtual staff. The kitchen table is not an appropriate work environment. Before implementing an Alternative Workspace, Management will want to establish clear guidelines for working virtually. Some of these guidelines might include:o	A dedicated workspace with a desko	No indoor pets, such as dogs, that can create distractions and inappropriate interruptions during business phone callso	Adequate lightingo	No young childrenQuestion #5Is Management Willing To Invest In Tools, Training and Technology Required For Alternative Workplaces? Alternative Workplaces require a considerable investment in tools, training and technology. Some agencies may try to limit their expenses by asking staff to use their own computers. However, privacy laws and computer liabilities such as viruses and hacking make it essential for an agency to have equipment it can monitor and control its use.Here are some investments needed to implement successful Alternative Workplaces:o	Computer/Monitor (If dual monitors are used in the agency, it should also be part of a virtual office)o	Printero	Dedicated Phone Lineo	Web Camo	Internet Accesso	A virtual private network (VPN) is a private communications network often used by companies or organizations, to communicate confidentially over a public network. A VPN can send data e.g. voice, data or video, or a combination of these media, across secured and encrypted private channels between two points.o	DSL: DSL stands for digital subscriber line. It uses ordinary telephone lines and a special modem to provide an Internet connection that can transmit high-bandwidth information to a user's computer. A DSL line can carry both data and voice signals. The data part of the line is a dedicated connection to the Internet and does not interfere with use of the telephone. DSL is high speed and is always connected to the Internet.o	Cable Internet: Cable Internet uses your local cable TV line to receive broadband Internet content. This data rate far exceeds that of modems and is about the same as DSL. Your local TV cable company is typically the cable Internet service provider.o	Dial-up access: Although Dial-Up may be available and reduce expenses, it is not recommended for an Alternative Workplace. Slow performance will affect the quality of work provided by your staff.o	Satellite Internet: If cable or DSL aren't available in your area, or if the slow dial-up access speeds are not acceptable, consider using satellite internet. It's available to you if you live in the Northern Hemisphere and have an unobstructed view of the southern sky. The service is expensive and the data rate is not as fast as a direct line, but it is a good connectivity alternative if you live in an isolated location.You will also want to consider additional resources such as:o	Online Agency Management System (such as TAM Online or AFW Online)o	Computer Trainingo	Cell Phoneo	Soft Skills Training Including:o	Effective Letter Writingo	Email Etiquetteo	Public SpeakingAn important consideration for any agency is consistency in how files are stored, applications are configured, etc. The reason is so that, if a staff member is out because of illness, termination, etc, any other member of the staff can easily slide into their position. This is also true with your virtual staff.Some items to establish consistent methods include:o	Outlook - How folders and signature is set upo	Paper Port - If your agency uses Paper Port, the folders should be set up the sameo	Voice Mail messageo	How activities are recordedQuestion #6Is Agency Management Aware Of Legal Implications Of An Alternative Workplace? Tax laws are always a consideration when dealing with changes in how you manage staff. But Alternative Workplaces have created new considerations for staff working offsite. Many of these changes have been brought about by the Gramm, Leach, Bliley Privacy Act (GLBA). Some areas to consider include computers, cell phone, PDAs and other electronic devices:o	Protection of NPI (Non-Public Information) and other client datao	Method of destroying data stored at the Alternative Workplaceo	Method of backing up and restoring dataBecause of the legal aspects of Privacy Laws, you are advised to consult with your attorney and E&O carrier to determine your risks and resolutions.Tips For Staying FocusedYou may have up-to-date technology and training, but you must have also effective strategies that help your employee stay focused. Here are some tips that will help them:o	Start working at the same time. Treat telework days like regular workdays: get up, get dressed, and be "at your desk" at the usual time.o	Establish a schedule. Keep work hours similar to the ones you would keep if you were working at your office. Your manager and your co-workers will appreciate knowing when you'll be available.o	Limit distractions. Be careful not to replace office-based interruptions with home-based ones (such as children, neighbors, and friends).o	Plan ahead. Take the appropriate work home. Some work may be better suited for the home office than other work, so be sure to plan the telework a day ahead.o	Take breaks. Plan time to get up and move around. Consider going for a walk or a run during your lunch break to keep your mind fresh.o	Focus on objectives. Work with your manager and colleagues to define clear goals and objectives against which your performance can be objectively measured.o	Consider using instant messaging. Similar to a chat room, IM is a fast means of communicating with one or more people in real time over the Internet. IM gives you a way to show and update your communication status throughout the day. For example, when you need a couple of hours of undisturbed concentration, set your status as "Busy" and let everyone know that you'll be slower than usual to reply to e-mail messages and phone calls.	 	 		 			 				 					 						Ted Baker is the president of Advanced Automation, which for 17 years has offered agency consulting services addressing a variety of management and agency development issues. He also is an author and frequent conference speaker. Ted can be reached at <a href="mailto:questions@advancedautomation.com">questions@advancedautomation.com</a>

The Alternative Workplace - Changing Where and How People Work

I was visiting with an agent recently, and he was talking about losing a key employee that was moving because their spouse was transferre...

Some Things to Be Considered Before Changing IT Support

Maybe you are training a new staff member for your work or are you switching to a new vendor? Do you want to change your IT support staff which could mean threat to your business? Consider asking yourself why do you want to do so? What you need to understand more is the ways to maintain your technical support and technology systems such that it requires less documentation.Lots of experience in service at times of technical backup can keep the Internet Technology services running without glitches.Take the following factors into consideration before switching to another IT department.1) Know in detail what you have.Make a list of hardware and software you possess. Or maybe you can convince your IT Support person to help you with the documentation. Make a note of everything, including networking devices, software applications and operating systems.2) Ensure you know everyone in your company.Make a list of all business relationships including vendors and keep this updated. Making changes to your IT network is like inviting surprises. Keep all important information of vendors like phone numbers, website, data services, email hosting company and any other services managed by the support provider. Keep current service at a place where it is easily accessible and keep them updated. You need to understand each and every service they offer to the company. Information like the response time for a customer service call is useful.. 3) Keep backups.Database backups are one of the important factors to be maintained in business. A person should be curious about this and should ask many questions viz. Who keeps our backup? How often are the backups updated? What is the software used for keeping backups? Which hardware is used for it? Who verifies the backup? At what time? Do we include laptop computers in this? When did we last test this?4) Maintaining passwords.The person knowing all the passwords can leave your company. Hence, you have to know the passwords for each and every software and hardware at the business. You also need to know what the person can access via these passwords. You must also know the place where password records are kept. Change your passwords all over again if you are changing your IT support solution.5) Keeping the documents and disks at a safe place.Collect all the software and hardware configurations and install disks and place them in a systematic order and keep them at a central area. You will also need the license keys associated with the products along with the price, date and day of purchase for each and every application that is operating on the network. This is very important for network troubleshoots. It is also important to produce the license if an audit by the BSA (Business Software Alliance) is conducted or else it can be a big problem. If they fail to produce the license then the company might end up paying fines along with the replacement costs.6) Maintenance must be scheduled.One has to regularly maintain the Internet Technology systems just like a person keeping auto tuned system for optimal performance. This prevents big breakdowns and helps in smooth functioning of the system. Important thing like keeping a checklist is a must. Keep a checklist by day, week or month especially during the time of transition.7) Have your system inspected by experts.Another pair of eyes is absolutely a great idea to inspect the network. If you have a neutral expert from an outside firm or an individual looking after your technology systems then you can ensure that your investments are protected and the expert service provider could detect the problems even before they begin. This could cost well under a hundred bucks but could save big money, recovery efforts, legal expenses or maintenance fees.8) Security.When we talk about security, we are definitely talking about protection from virus, spam and threats from hackers. But these types of threats are only half of the threat - IT systems are usually hacked from within. Keep a record of all the security products and procedures used so that you are sure about your company's protection.9) Where is the key data kept?Where are the data of customers, finance, legal documents stored? Who is the person who can access it?	 	 		 			 				 					 						Philips Taylor Brown offers IT support in the Nottingham area, tailored to suit the needs of any business. Visit their website now for more information if you are looking for <a href="http://www.phillipstaylorbrown.com" target="_new">IT Support Nottingham</a>.

Some Things to Be Considered Before Changing IT Support

Maybe you are training a new staff member for your work or are you switching to a new vendor? Do you want to change your IT support staff...

Technology and the Changing Language

New vocabulary accompanies the march of the technological development of computers, mobile phones, and more. The sheer size and volume of our technological vocabulary, new and old, is notable. As the impact of computers on our lives is tremendous, computers naturally impact on our language too.But lest we forget, access to the Internet varies from country to country and within each country. Only 2.5 percent of the population in Uganda have access to the Internet; in Nigeria the figure is 11 percent; in Brazil the figure is 50 percent; in Ecuador 1.1 percent; in South Korea the figure is 77.3 percent; in Nepal those with access is 1.4 percent; in Germany 67.7 percent of the population has access; the figure is 45.9 percent in Greece; in Yemen 1.4 percent of the population has access while 72.8 percent in Israel have access (Figures from Internetworldstats on the Web). People traveling in cyberspace remain the few in some places, while in others, they are the many. Given that only some of the global population has access, it is unlikely that those without access use the same vocabulary that those with access do.In the United States, approximately three quarters of the population has access to the Internet at home. Only 38 percent of Americans in rural areas have broadband. That is compared to 57 percent in cities and 60 percent in suburbs (Figures from Cetfund on the Web), and this distinction between those with and those without access has generated a new term, the digital divide. The digital divide may be a specific term relating to the gap between those who have computer and Internet access and those who do not, but the term is only one in a series of terms that has been used for describing the haves and the havenots and the insured and the uninsured.A significant number of technical terms, such as digital divide, are not newly coined words. These terms are words with new meanings such as spam, download, vaporware, surfing, zip and virus. Spam, for example, is the name of a canned Hormel meat product, which I suspect many avoid as if it carried the plague. According to Wikipedia, Spam is made of chopped port shoulder meat with ham, salt, water, sugar and sodium nitrite, and sales of Spam have increased in the current economy. The bottom line for computer spam is something you do not want, junk, something to trash.Technical language can be subdivided into term categories. We could talk about Internet, hardware, software, and technical terms. We could also have a list of technical acronyms and the non technical acronyms that abound in email messages. I imagine that many of the Internet, hardware and software terms would be familiar to computer users.Suppose we look at the term multitasking. The term originally referred to a computer that could perform several tasks at the same time. As words are apt to do, multitasking soon morphed from one meaning to another. From a computer term, multitasking became a general term that was applicable to individuals performing more than one task at a time. The ability to multitask is generally a prerequisite for getting an office job in today's offices.One of my favorite terms is motherboard, which is the main circuit of your computer. From what I know about technical terminology, using either the word mother or father is not the norm. Motherboard first appeared in a 1971 British article with the term daughterboards, which were secondary boards. These daughterboards have disappeared from technology, and fatherboards, sonboards and auntboards have not been generated. What I find intriguing is that the that the term has stayed and remained central to the computer. This "mother" functions well and is in command of our systems.Technological terminology is a gold mine of words and language change, and we hope to present more ideas in the near future.	 	 		 			 				 					 						At <a href="http://aaronlanguage.com/personnel.html" target="_new">Aaron Language Services</A>, we provide Japanese to English and other translation, proofreading, and online English coaching to a primarily Japanese client base. Our site also offers many resources to ESL students, including Japanese language support and our sushi pages with many pictures of different kinds of sushi and explanations. If you are interested in editing texts in medicine and the hard sciences and have expertise, please click the link above to find out about working with us.

Technology and the Changing Language

New vocabulary accompanies the march of the technological development of computers, mobile phones, and more. The sheer size and volume of...