New Technology Reviews!.: Professionals

Getting Schooled in Security - Campus IT Professionals Protect Against Hackers

During recent years, data thieves have compromised computer systems at a myriad of universities, including Ohio University, Notre Dame University, Georgetown University, Western Illinois University and University of Alaska-Fairbanks, leaving many questioning the vulnerabilities of campus networks, and challenging college Information Technology (IT) personnel to find new approaches to securing the personal data of students, faculty and alumni. While a slew of hacking incidents in corporate America have gained recent national attention, experts say that academic institutions are in many ways more vulnerable than corporations to security breaches because universities engender a culture that emphasizes openness and information sharing, not firewalls and threat prevention. "Even though most colleges and universities employ a professional IT staff, each campus department or office might run its own computer system on the school's network," said Clete Rickert, director of information systems at Villanova University, and a Nuesoft Xpress client. "While this decentralized approach to managing information helps to contribute to the collaborative, open environment that universities foster, it also detracts from IT's ability to effectively secure all of the computers on the network at any given time." To counter this security challenge, IT professionals are beginning to look for ways to house sensitive data - such as patient information in a health or counseling center - off site, instead of storing it on a campus server that may or may not be sufficiently protected. One option for many IT staff is the application service provider (ASP) model. ASPs host data and manage software programs for a wide variety of users from a secure, centralized data center. Some ASP applications are delivered via a Web browser. Others, like Nuesoft Xpress, avoid the browser environment altogether, and are delivered by a secure Internet connection between the user's desktop and the ASP's data center. With so much to think about when considering how to deliver mission critical applications and keep data safe, Rickert advises decision makers to take their time and consider options carefully. "The notion of handing over your data to an ASP provider might be a little daunting to some people," he said. "And, if you do decide to move toward an ASP model, you then have to consider which type of ASP will best suit your needs. When Villanova's health center staff came to (the IT department) for input during a search for practice management software, we chose Nuesoft Xpress because we felt more comfortable with the security and audit features that an Internet-based system has to offer." Nuesoft Technologies Chief Technology Officer Shahram Famorzadeh elaborates: "The fact that the Xpress application is written in Java code adds a second layer of security that a browser-based system can not provide," he said. "Most hackers are very familiar with the addresses of the ports and the protocols that browsers use to send and receive data. That information is standard, and so is commonly known. Additionally, the theft of the users' security credential, one of the most common security vulnerability risks, via 'phishing' techniques is not applicable in non-browser systems. "By avoiding browsers, Nuesoft Technologies can use proprietary protocols and ports that are not commonly published, hence minimizing intrusion risks. Nuesoft strictly controls not only what gets sent, but how it is sent." And an added layer of protection might not be a bad idea in a university environment where the prevailing philosophy is to allow most everything into the network, rather than keeping most everything out with a firewall. "Until colleges move away from their current open network approach to security, keeping hackers away will continue to be a challenge, and IT professionals will need to turn to ASP models or other options to provide secure solutions to the campus departments that depend on them," Rickert said.

Getting Schooled in Security - Campus IT Professionals Protect Against Hackers

During recent years, data thieves have compromised computer systems at a myriad of universities, including Ohio University, Notre Dame Unive...

Trained Information Security Professionals - the Need of the Hour

According to a Deloitte Survey, more than 50% of companies surveyed admitted to having a data loss in from June 2005 - June 2006, with roughly 33% of those incidents directly resulting in financial losses. It is estimated information security breaches in the U.S. are reported at a rate of one every three days.Information Security - A Never Ending WarGovernment sites are bearing the brunt of this spurt in hacking activities. Recently the U.S Department of Agriculture website was attacked and defaced by cyber terrorists who stole critical personal information of 26,000 employees in the Washington D.C. area, including names, social security numbers and photos.Even everyday consumers are not safe. In one of the most serious cyber-crimes of recent times, more than 65000 user's personal information including names, addresses, passwords and encrypted credit card information were stolen from gaming website SecondLife.It is estimated that consumer and business identity theft contributed to losses of $2 trillion in 2005 (ComputerWorld).Perimeter Security - The best defense is a good offense.In today's world, no business can operate without securing its computers. In order to secure your system you need to know the methods & tools used by hackers. In short, you must think like a hacker.IDC expects IT security spending to grow twice as fast as IT spending over the next several years, surpassing $116 billion by 2007. Companies across all industries place a high priority on safeguarding their data and systems. Growth in these areas is expected to fuel demand for specialists who are knowledgeable about network, data, and communications security.Knowledge - The Only SolutionAppin Knowledge Solutions, technology leaders in Information Security and Ethical Hacking have launched courses Information Security and Ethical Hacking Course focusing on this emerging field of information security.The Information Security course from Appin Knowledge Solutions provide an in-depth coverage of this field - starting from the basics to the most advanced topics like VPN security, BS 7779 procedures etc. From start to finish, the focus is on action: what information security is, how to test security as well as it's counter measures.The objective of the course is to master the current trends in information security methodologies and tools. The "think like a hacker" approach encourages students to test the security vulnerabilities of their own networks. Students also learn about intrusion detection, policy creation, social engineering, open source intelligence, incident handling, and log interpretation.Whether you're a sys-admin, infosec professional, an ethical hacker or a student of IT - This course equips you will all necessary skill-sets to protect the system and illegal data extortion. These courses also act as a stepping stone for higher certifications like CISSP, GIAC, CISA etc.Learn from the experts in the field of Information Security: Information Security & Ethical Hacking Course - An Overview(Course contents may vary from course to course) Module- 11. Introduction to Information Security & Ethical Hacking Hacker Vs Cracker, Ethical Hacking Challenges for a Hacker2. Desktop and Server Security How to Look for Vulnerabilities?, Securing Windows, Windows Security Center, Windows Updating 3. Viruses, Worms, Spywares Viruses and Worms Introduction, Modes of Spreading , Countermeasures like Norton Anti-virus4. LAN Security Encryption, Authentication and VPN, Wireless LAN Policies, Intrusion Detection and Protection5. Firewalls & Security Types of Firewalls, Packet Filters, Proxy Gateways, Network Address Translation , Intrusion Detection6. Internet Security Tools and methods of safeguarding against Internet Security threats.Module-21.	Information Gathering Detection of TCP Port Scan, TCP SYN Scanning Detection of SYN Scans, SYN/ACK Scanning, Detection of SYN/ACK Port Scan2. Attacking the System-1 Network Infrastructure Attacks, Operating System Attacks, Application & Other Specialized Attacks, Technical Attacks, Denial of Services attacks (DOS Attacks), Distributed DoS attacks (DDos), Key Logging, Trojan AttacksModule-31. Attacking the System-2: Phishing, Phishing Prevention, , Sniffer Attacks, Detection of Sniffers Running, Stopping Sniffing Attacks.2. Data Backup Reasons for Data Backup, Strategies for Data Backup, Tools & Methods3. Art of Googling Terminologies, Advanced Search TechniquesModule -41. Penetration Testing Definition, Methodology, Basic Approaches, External and Internal Views2. Catching CriminalsCyber Terrorism, Forms of Cyber Terrorism , Factors & Reasons , Countermeasures 3. Cryptography and ForensicsIntroduction to Cryptography, Private Key Encryption , Public Key Encryption, Computer Forensics, Digital Evidence. Proactive security procedures & policies across networks, desktops and servers are an absolute must. The needs of the hour are trained information security professionals who can take care about the function and administration of networks.The demand of certified professionals is skyrocketing and very soon they'll become indispensable for corporates and governments alike.If you need region specific contact details, click here.	 	 		 			 				 					 						The author is a practicing Information Security consultant and contributes literature on network security [http://www.appinlabs.com/articles-on-security.php] issues. For more information, please visit =><a href="http://www.appinlabs.com/" target="_new">www.appinlabs.com/</a>

Trained Information Security Professionals - the Need of the Hour

According to a Deloitte Survey, more than 50% of companies surveyed admitted to having a data loss in from June 2005 - June 2006, with ro...

Cyber Security Professionals - Necessities In The 21st-Century Computing Environment

The vast network of cyber-space presents - or, can harbor -- major threats to the security of personal computers; LAN and WAN networks; and wireless Internet networks. Trained computer networking specialists who are experts in cyber-security are needed to secure networks and computer systems for effective data storage and retrieval. Just as importantly, they are needed to secure the privacy and integrity of personal and corporate identities. These professionals can find work in private firms, in consulting, or at the state and federal government levels. Most individuals complete at least a bachelor's degree before working in the cyber-security field.Hackers pose special threats to computer network security. These technology and networking experts use their insider information to grant themselves access to computer networks, without permission. Our modern computing environment is an open one, and individuals with systems and software knowledge - or, even, persons with the gumption to steal data or computing devices - can easily get their hands on very sensitive information.Much information should be kept private, and serious damage can ensue if this information falls into the hands of hackers. One of the greatest risks to business computer and personal computer users who are working on unsecured networks is identity theft. A cyber-thief can use a personal or company address; financial and credit card information; or even a personal social security number to steal money from individual or corporate accounts. This is a serious crime - one with far-reaching consequences, including ruined credit records -- and increasingly easy to commit in today's open-computing, technology-heavy environment. Cyber-security professionals who are adept at designing secure, hack-proof information systems and networks are needed to win the fight against identity theft.Spyware and viruses pose another threat to the integrity and security of computer data. Spyware is installed on a computer without the user knowing, and can collect personal data or interfere with computer applications or run-time. Viruses are computer programs that replicate themselves to infect the machines, often damaging files or even hard drives in the process. There now exist several types of anti-virus and anti-spyware software that can be installed on a personal computer or on networked office computers for low or no cost. Security professionals on IT repair teams might be trained in the use of this software. Some professionals might provide security consulting services to businesses and individuals, as well.Skilled cyber-security professionals also know how to install and maintain firewalls. These pieces of software or computer appliances are security devices that monitor activity between networks - usually, networks with different levels of security and access. Firewalls might restrict permissions to various Internet activities or Web sites. The level of security firewalls provide on large business networks can be changed or altered by security administrators. There exist many types of firewalls, including network layers and proxy servers. Understanding what each type of firewall does, and when it should be applied are main responsibilities of a cyber-security student; typically, he or she will take several classes about firewalls to complete a network security degree.Design and evaluation of secure computer network systems are special skills, in which cyber-security information systems professionals must be proficient. Secure network architecture is imperative in preventing hacking and threats to information integrity. Some cyber security professionals will be employed as business consultants, routinely evaluating system security software, and creating and testing secure network systems.Finally, some cyber-security professionals might be employed to work on major projects and contracts where information privacy and integrity is vital. The U.S. Department of Defense or the Office of Management and Budget (OMB) in Washington, D.C., for example, need cyber-security specialists to create networks that will protect highly sensitive or classified data. Similarly, cyber-security specialists are needed in biology and scientific research centers, such as those found in universities and hospitals, to make sure data and findings remain secure. Specific federal regulations outline how these findings should be secured, so specialists can help these research centers stay compliant.The field of cyber-security is a constantly evolving and important area of information systems science. Individuals pursuing an education in this challenging and lucrative field will be sure to find fascinating work and a lifetime of learning throughout their careers.	 	 		 			 				 					 						Potomac College, an adult learning school [http://www.potomac.edu/articles/adult-learner-college.php] with campuses in Washington, DC and Northern Virginia, offers a <a href="http://www.potomac.edu/degree_programs/bach_info_manage.php" target="_new">bachelors degree program in information systems</a>, with a concentration in cyber-security. For more information, visit the school's Web site, <a href="http://www.potomac.edu/" target="_new">www.potomac.edu</a>.

Cyber Security Professionals - Necessities In The 21st-Century Computing Environment

The vast network of cyber-space presents - or, can harbor -- major threats to the security of personal computers; LAN and WAN networks; a...

Used Computer Technology Products - Helping IT Professionals Manage Better

Used computer technology products have taken on greater importance in recent months as IT professionals seek to tighten their budgets while maintaining the service levels their organizations need.A recent report by Gartner Research underscores the challenges faced by IT managers.IT Budgets Require InnovationGartner is a leading global IT research firm. Their annual studies of the computer industry, and the market for used computer technology products, have made Gartner the source for IT professionals looking for advice about managing their hardware infrastructure better.When Gartner speaks, people listen. In late 2008, they released their projections for IT budgets in 2009. Their projections are a strong indicator of how healthy the IT industry will be. As reported in a blog post on ZDNet, Gartner is forecasting:o	IT budget growth of 2.3% to 0%, a drop from their original estimate of 3.3% growth. o	In the worst case, IT budgets could drop by 2.5%.The senior VP of research at Gartner, Peter Sondergaard, believes that IT professionals are well-suited to handle any turbulence from the shaky economic situation. Why? They've been through it before (2001) and, while IT can be cut back, it has become essential to the operation of a business and cannot be cut too much, lest services start to suffer.Songdergaard recommends that IT managers get creative and "focus on disruptive technologies" that can cut costs, including:o	multicore and hybrid systems o	virtualization and fabric computing o	social networking o	cloud computingWhile his advice is sound, there are other, simpler things an IT manager can do to rationalize costs.Used Computer Technology - Cut Costs and Maintain StandardsWhile newer technologies, like those described above, can help reduce costs, they are not the only solution. Two concepts that have existed for a long time can also help manage costs: appropriate technology and platform maintenance. Both of these concepts are possible with used computer technology products. Let's look at each one briefly.o	Appropriate technology means using only the machine you need for the job. Should an admin assistant have a top-of-the-line desktop when his or her job consists mainly of word processing and emailing? Should a financial professional have a computer designed for high-end graphics work when his or her main function is number crunching? Of course not. Appropriate technology means analyzing the real needs of your users to ensure that they have hardware that is appropriate to the tasks they perform. That may mean an older computer. But old does not mean obsolete. An older model may be perfect for a lower-demand user, and with the support of parts and accessories from the secondary computer market, that machine can last for many years to come. o	Platform maintenance means keeping your existing infrastructure for longer. The technology life cycle is about six to nine months. There is no way most companies can keep up with this pace, especially in trying economic times. With used computer technology products, you can maintain and troubleshoot your existing systems, delaying costly upgrades and saving your company money.Peter Sondergaard asked IT managers to innovate in order to manage through our current tough times. With used computer technology products, you can do just that - get creative and obtain the options and accessories you need to keep your existing network running longer.	 	 		 			 				 					 						For more information on <a href="http://www.itxchange.com/itxchange/prodServ.asp" target="_new">Used computer technology products</a> visit <a href="http://www.itxchange.com/itxchange/" target="_new">ITXchange</a>

Used Computer Technology Products - Helping IT Professionals Manage Better

Used computer technology products have taken on greater importance in recent months as IT professionals seek to tighten their budgets whi...