New Technology Reviews!.: Risks

USB Ports - Risks and Safety Precautions

USB might be termed as the latest craze in the industrial computer components industry, but this fashionable accessory can also be a root cause of disaster, if proper precautions are not adhered to. These thumb nail size marvels might be considered as one of the most convenient computer accessory, but it can be a great threat to Internet security as well.The threat involved with the USB ports are the cyber criminals that are writing viruses and worms and thus infecting the USB ports. As soon as the user enters this infected port in the home PC, they can load the bug which can result in crippling the computer hardware. Their small size is one reason that makes them easier to lose and if some important data contained in it is not encrypted, there is chance that the USB ports can be tampered with, resulting in identity theft and other types of cyber crime.This write up throws some light on this sensitive issue, which otherwise gets unnoticed. Following are some of the precautionary measures that can prevent the occurrence of these crimes to a large extent. Follow these tips to minimize the risk of your USB being hacked.1. One of the most reliable way to prevent identification theft is to make sure that you do not load or carry any kind of personal information on the USB products.2. Encryption is an important aspect to be taken care of if you are to put any personal or sensitive data in your USB's. Various reliable encryption programs are available and one only needs to download them. By encryption, one can be sure that the information on the USB cannot be read without being decoded first.3. Using secure devices is another option. Various technologically advanced USB drives have added features like fingerprint authentication and built-in encryption that proves great in making this device hacker-protected. Invest in one of these USB ports that are much more user friendly and safe at the same time.4. Keeping these computer components in a safe place is the most important tip of all. As they are very small, they are at a greater risk of being lost. Choose a USB drop spot which is easier to access and remember. This will ensure that you do not lose them easily.5. If possible, try to keep separate devices for home as well as office purpose as there is a chance that you can accidentally introduce a virus to you home computer courtesy to one of the infected systems at office. As per the New York security consultant, Scudder, it is important to know the norms of any company before plugging your USB to the network.

USB Ports - Risks and Safety Precautions

USB might be termed as the latest craze in the industrial computer components industry, but this fashionable accessory can also be a root...

The Risks and Rewards of Overclocking

Overclocking the components within your computer can be a lot of fun, but you really need to realize the ramifications of your actions along with the benefits that you stand to gain. Don't take this article to mean that you shouldn't overclock your computer, just that you should completely grasp what the end results can be. Cons of Overclocking: - It will void your warranty: By tinkering around with your systems components in a fashion other than what it was meant to do, chances are you've voided the warranty. While this may not be that serious to some, fact is that you won't be able to return that product or even get support on it anymore. - Your system has to deal with added stress: Even with the proper cooling and management of your components, you still risk damage to them and a shorter lifespan by opting to overclock them. While this doesn't always mean you'll end up burning out your components, you need to understand that it is very possible for it to happen. - Your system runs a lot hotter: While frying an egg on your system may be appealing, you'll need to do something about the heat your overclocked components will be giving off. Unfortunately, this means spending money. Higher voltage means more heat, and that heat can effect all the components in your system, not just the overclocked ones. - Overclocked? Yes. More efficient? No. Instruction sets dictate what a CPU can do. You can't add new instruction sets to your CPU, so overclocking can only do so much. Don't think that overclocking will turn your $200 CPU into a $500 CPU. - It isn't for everyone: Hope you don't mind the chances of your system just not working without any indication as to why. Many times when you overclock a system, you'll end up running into a series of oddities that you can't always explain. Thus, the process isn't always cut and dry and can become very time consuming. Advantages of Overclocking: - Improved performance: You may not get the same efficiency as the CPU $200 more expensive then the one you bought, but you'll definitely see a jump in performance over the default speeds that it currently operates at. - Your bank account will thank you: New components are outdated the second they hit the shelf, so why would you want to keep buying new hardware when you could tweak your old one? Overclocking can give you more life and versatility and leave a lot more money in your pocket. - In-depth system knowledge: Whether you have previous experience with computers or this is the first time you've opened one up, you'll gain a good grasp on how your system operates and what you may need to do to troubleshoot any issues. - Flaunt your stuff: People don't mod their cars to keep in their garage. Gamers don't overclock their computers to not show off at the next LAN party.

The Risks and Rewards of Overclocking

Overclocking the components within your computer can be a lot of fun, but you really need to realize the ramifications of your actions along...

Handling Security Risks With Web Appliance Firewalls

Everyday you are at risk of getting viruses from a variety of sources. From the e-mails attachments that you open to the files you download, the constant threat of viruses is a dreadful reality. If you run a Web site, then you have another avenue with which viruses can attack your system. What is more, having an unprotected Website can pose a lot of security risks both for you and the users of your Web site.What are the common security risks associated with Web sites?Your Website is your store front to the world. It becomes your online store and the interface with which you interact with potential customers and buyers alike. As such, it is the first thing that the world sees. Sadly, this includes hackers. Hacking attacks can easily be initiated by exploiting vulnerabilities in your site. These vulnerabilities could open a door for any hacker to get into your system and steal anything of value, including your customer's records, financial and personal information. If you think that this is the furthest that could happen to you, with other larger Websites around you would think that hackers would not pay you attention. The reality is hackers prefer smaller online businesses where security is laxer. Besides big companies and retailers have an army of security experts that they pay to secure their Websites, making it more impregnable.Another big concern is a denial of service attack wherein your server gets overwhelmed and stops working, thereby bringing your site down.Web application firewall: What Is It?A <a href="http://www.applicure.com/solutions/web-application-firewall" rel="nofollow" target="_new">Web application firewall</a> is a type of firewall that analyzes incoming packets of data that are transmitted via your Web site. Sometimes called deep packet inspection firewall, they take a look at each HTTP or HTTPS request made to your server and determine if these have questionable content.A web application firewall could very well be your first line of defense against viruses and denial of service attacks. It can effectively block out viruses sent via your Web site, or stop abnormal behaviour by tracing attack signatures. In short, anything that goes out of the typical Web traffic pattern is dropped or blocked.Be sure to get a Web application firewall installed on your Web hosts. If your Web hosting service does not provide one, then it might be time to look for another that does. In this time when Web site security is very important, you just cannot go without this valuable countermeasure!	 	 		 			 				 					 						For more information about <a href="http://www.applicure.com/solutions/hacking-attacks" rel="nofollow" target="_new">Hacking attacks</a> please visit here.

Handling Security Risks With Web Appliance Firewalls

Everyday you are at risk of getting viruses from a variety of sources. From the e-mails attachments that you open to the files you downlo...

Desktop Security Software Risks - Part 1

This is the second in a series of articles highlighting reasons why we need a new model for anti-virus and security solutions.Reason #2: the Desktop Security Software RisksThe risks of placing software on the desktop are such that I will be breaking this article into two parts.Fundamentally we think of having software on our desktops as a good thing. I love downloading or installing new packages and seeing what new creative things people do to the user interface or what they do to make certain aspects of my life easier or more fun.But there are problems inherent with software that resides on the desktop, especially security software. All developers will know what I mean. First and foremost, desktop software can be reverse engineered. What's that mean? Have you ever inadvertently double-clicked on a file and had garbage show up or seen something that looks similar to this?<a href="http://www.checkinmyemail.com/Articles/image001.jpg" rel="nofollow" target="_new">http://www.checkinmyemail.com/Articles/image001.jpg</a>The old hex dump. Programmers will know it well. We actually spend a good deal of time trying to read this stuff. Basically, if there are programs that can (and do) turn instructions like the followingIf UserBirthDateinto something like the picture above, then the reverse is true: people have developed software that can take that gobbeldy-gook in the picture above and turn it somewhat into the if-statement I wrote out. The reversing software won't know that I had an item called UserBirthDate, but it will know I was testing for a value of January 1, 1960 and it will be able to say that based on that value I set another item to Yes or No.So now we install our fool-proof anti-virus software on our desktop (or our firewall for that matter). Well, so too can a virus author. And that virus author or hacker will also have gotten a copy of the latest reverse-engineering software from his local hacking site. He now goes upon his task of reverse-engineering the software and then trying to decipher the results. It's not easy but it can be done. Unfortunately, vendors know this and understand this as an acceptable risk.The problem here is that your security software is at risk. If your vendor codes an error, the virus author can and will detect it. For example, if your vendor should exclude a file from scanning, it's possible the virus author will figure out which file (or type of file) that is and bury his code there. If the vendor excludes files from scanning or heuristics, it's possible that virus author will figure out a way to corrupt that file.That being said, there are other risks. As we have said, once software is on the desktop it affords virus authors an opportunity to reverse-engineer security software. The knowledge that reverse-engineering provides is invaluable to a virus author when building his next software attack. Third, virus authors can learn where the anti-virus vendors put there software and put the links to their software (directory folders, registry entries, etc.). This too is invaluable information. In fact, in some ways it teaches people intent on writing malicious software clues as to how to infiltrate the computers' operating system, where registry entries need to be made to force software to be loaded every time a computer is started, etc.This information is generally available all over the web and in manuals for operating systems, especially manuals on such subjects as the Windows Registry. But having the software teach you where things belong to be effective is powerful knowledge.Lastly, and perhaps most significantly, is the issue of forebearance. The anti-virus vendors usually know more about the potential exploits inherent in programs than virus authors but they are bound by the fact that should they try to prevent them before the exploits occur, they could be branded as irresponsible for teaching virus authors about these very exploits.For example, when Microsoft first released the macro capabilities of Word, anti-virus vendors immediately realized the potential for danger in macros, but they were handcuffed. If they released software that disabled macros before the first macro virus was ever released, they would signal to virus authors the inherent destructive powers of macros. They chose instead to wait, handcuffed by the limitations of desktop software.Until the Internet there really has been no better medium for delivering virus solutions than desktop software. It was relatively inexpensive to deploy (either market the software and sell it in stores or provide free downloads on bulletin boards and web sites). It is, however, expensive to keep updated in terms of time and effort, even with automated update systems.The Internet caused several things to happen: by becoming a powerful medium for sharing files, whole families of viruses disappeared practically overnight (boot sector viruses, for example); by becoming the option of choice for sharing files, it was easier to infect a single file and have thousands download it.A better solution is to place the security software in an offsite appliance of its own making. All Internet, intranet, networking connections flow through the appliance.Selling off the shelf hardware appliances with built-in security software is better than a desktop software solution but it still suffers -to a lesser extent- from the pratfalls that desktop software falls prey to.Even better is to create a service that a 3rd party vendor manages in a secure environment. In such an instance both the software and the hardware are away from the prying eyes of the malicious software authors. This further reduces the opportunity for malicious authors to discover the tricks and techniques employed by the security vendors to protect you.

Desktop Security Software Risks - Part 1

This is the second in a series of articles highlighting reasons why we need a new model for anti-virus and security solutions. Reason #2:...

Spyware - Understanding and Addressing the Risks

"Spyware" is no longer simply a nuisance to enterprises. It is estimated that 90% of desktop PCs are infected with some form of "Spyware" (Source : US National Cyber Security Alliance). According to Gartner between 20 and 40% of enterprise helpdesk calls are now related to unwanted "Spyware" programs.There are different classes or types of "Spyware". These are summarised below. · Tracking Cookies. Cookies are text files saved by the browser that allow tracking of user activity on a website. Users typically allow cookies as some sites won't work without them or they are useful in that they store information about personal preferences, IP addresses, login information, user options and date and time stamp of the last time the site was visited. Cookies may also contain any information provided by a user during a particular visit - including any personal information provided in the course of completing forms. Cookies are at the most benign end of the "Spyware" spectrum.· Adware. This form of "Spyware" is responsible for generating the by now familiar pop-up, pop-under, banner, floating and animated advertising seen whilst surfing the web. Adware typically uses advanced scripting that manipulates the browser by exploiting flaws in Java, ActiveX, the operating system and the browser itself. Adware may collect information for cookies and report information directly to sites on the Internet. On clicking-through ads additional cookies or utilities may be installed silently. Some adware makes changes to browser settings - resetting the homepage for example - or to the user system (including Windows registry changes). Often clicking on 'No' or 'Cancel' buttons within the advert result in the same code executing as if the user had clicked on 'Yes' or 'OK'. Adware is the greyest area of "Spyware" - some Adware certainly should be considered as malicious 'malware'.· Scumware. Scumware modifies the contents of a web page adding hypertext links and alternative text. Scumware can also position competitive ads over the originals. Scumware can also install hidden or background processes and services and should therefore be considered as malware.· Malware. Originally malware referred to viruses, worms and Trojan horses. The term also applies to the more disruptive forms of "Spyware". Such programs might enable third parties to take control of microphones and web cams installed on a particular client, make changes to browser and systems settings, launch Web activity even when all browser sessions are shut down, install hidden or background processes and services. Keyloggers fall into this category. Malware is the most damaging of all types of "Spyware" from a risk perspective. It should be noted that this form of "Spyware" is increasingly being spread through Instant Messaging applications.1.1 Different Variants, Different Risks The different types of "Spyware" present different risks to enterprises. Cookies raise privacy concerns but are relatively low risk.Adware can begin to impact heavily on productivity. Orthus are aware of several instances where close to 200 different pieces of Adware were present on a single client degrading performance to the point where the client was unusable. In addition to user productivity, productivity is affected through increased help desk calls and the time spent by help desk staff in cleaning up or re-building infected machines - which in turn further impacts user productivity whilst the infected machines are unavailable.The risk of data leakage - of both personal and corporate information - is a very real threat with the most malicious type of "Spyware".Mitigating the Risk The main technologies available to mitigate against the risks associated with "Spyware" within the enterprise environment are discussed below.Mitigation techniques are two-tiered or two-part - at the gateway and at the desktop level.Desktop Protection At the desktop or client there are notably three technologies available to mitigate against the risks posed by "Spyware". These are personal firewalls, dedicated anti-spyware programs, and traditional desktop anti-virus (AV) tools.AV In some respects forms of "Spyware" strongly resemble viruses. They are uniquely identifiable, can be detected by scanning the client machine and are sometimes packaged as a set of files that can be removed to clean up the infected system. However many forms of "Spyware" do not reside on disk as persistent files - such as hostile ActiveX and Java applets. The motives, delivery mechanisms and often the removal of "Spyware" is different however from the protocols followed for viruses and worms."Spyware" is also different in that there is no one definition agreed on what constitutes "Spyware". Some programs that might be classed as "Spyware" - such as Microsoft's Windows Update Notifications - are useful, disclose their tracking capabilities, do not disrupt desktop operation impacting user productivity, and are distributed by responsible companies. "Spyware" therefore needs to be classified and identified by the actions it performs and the level of risk - complicating detection and removal, as the users must be given a choice over what is permitted. AV vendors - notably Trend Micro, McAfee and Symantec - already have software that is very good at scanning files before they execute. The software also has mature enterprise management suites and the vendors have support teams in place to handle enterprise customers' needs.Independent reviews and tests show repeatedly that AV tools are not as good at catching "Spyware" as dedicated anti-spyware programs. Whilst AV tools may detect 99% of viruses this number falls considerably to perhaps 70% - when considering "Spyware" programs.Using the next releases of desktop AV tools to protect desktops against "Spyware" is extremely attractive to enterprises. There is no need to deploy yet another software agent on every machine within the desktop population, there is no need to monitor yet another 'console'. AV already incorporates the management features that enterprises require - such as 'headless operation' and centralised reporting. Enterprises achieve greater consistency with standardisation on a smaller number of vendors, leading ultimately to cost efficiencies.Dedicated Anti-Spyware Programs There is an ever-increasing list of dedicated anti-spyware programs available from vendors including Ad-Aware from LavaSoft which is the most popular product with some 128 million downloads to date. Other notable products include SpyBot Search and Destroy, CounterSpy and Spyware Eliminator. Microsoft has also entered the market with Windows Antispyware following their acquisition of Giant Company Software.Whilst dedicated anti-spyware programs are more effective today at detecting and removing Spyware than AV products this will change over the forthcoming quarters. Most of the dedicated anti-spyware offerings are available as free downloads aimed at consumers / individual users and not at large enterprises. Site licensing is rarely available for example. Some of the emerging vendors have enterprise offerings on their roadmaps. However these companies are small, lack corporate / financial stability in some cases, and typically do not have the support teams and infrastructure in place to handle large enterprise customers.Orthus are of the view that many standalone dedicated anti-spyware programs will cease to exist in the relatively near future and the dedicated anti-spyware market will not be significant in years to come as established vendors offer integrated AV/anti-spyware/personal firewall products.Personal Firewalls Just as AV tools now include some "Spyware" protection so many of the personal firewalls available offer a level of protection as well. These include McAfee, Check Point and Internet Security Systems (ISS) with the release of Proventia Desktop in March 2005. Sygate is following a similar path to Check Point and ISS.Personal firewalls are recommended for particularly mobile clients that are regularly taken outside of the corporate perimeter and used to access corporate systems from DSL connections in the home and public WLAN hotspots, where typically direct Internet access is also allowed. They are also recommended for fixed desktop and mobile clients in smaller locations where there is little or no gateway level protection in place and where again direct Internet access is available from those locations.Gateway Protection Desktop protection is only half of the story when it comes to "Spyware" protection. Gateway level protection is also available.Blue Coat offer a range of proxy appliances that, in conjunction with popular URL filtering solutions, offer a strong defence against "Spyware". "Spyware" often secretly installs via "drive-by" installers, which install "Spyware" in the background without any user interaction. Blue Coat combats this with anti-spyware policy controls that inspect, filter and block web content associated with "Spyware" installation software. This preventive approach is critical when "Spyware" originates from an unknown web site - not yet categorised within URL filtering solutions - and when there is no known signature available to detect the malicious program.Gateway protection incorporating a strong URL filtering solution is particularly good in preventing programs on infected systems from sending information back to "Spyware" sites, mitigating against the productivity impact of Adware but also the more serious privacy and data leakage concerns associated with more malicious code. URL filtering solutions also offer some protection from infection in the first place by preventing users from visiting known infected sites.Gateway solutions typically incorporate logging and reporting features that can be used to identify infected systems thus facilitating a targeted "Spyware" clean-up periodically. This capability is also useful to target mobile clients (notebook PCs) that are not protected with Personal Firewalls that become infected whilst outside the corporate perimeter.Recommendations In light of the above Orthus suggest that enterprises take the following approach to mitigating the risks posed by "Spyware" today :* deploy gateway "Spyware" protection to prevent back-channel communication by infected systems augmented with a leading URL filtering solution.* use granular reporting capabilities from gateway solutions to identify infected systems and choose a dedicated anti-spyware tool to clean-up infected systems on a case-by-case / ad hoc basis.* do not deploy dedicated anti-spyware programs across the desktop population - instead wait for AV vendors to add strong anti-spyware capabilities in future releases.* force remote office branch office based systems to access the Internet via the corporate gateway (where gateway anti-spyware protection exists).* for remote and mobile clients, in addition to AV, install a recognised personal firewall to increase protection.	 	 		 			 				 					 						Penny Reyes is an analyst at Orthus limited (<a href="http://www.orthus.com" target="_new">http://www.orthus.com</a>). Orthus is a leading provider of information risk professional services, helping orgnisations globally to measure, minimise and manage the information risks they face. Orthus provide end to end services for clients to comprehensivly address risk in their environments including Insider Threats, addressing issues including data leakage, sabotage and fraud; External Threats (<a href="http://www.orthus.com/dr_overview.htm" target="_new">http://www.orthus.com/dr_overview.htm</a>) including wireless security, penetration testing, virtualisation security, vulnerability management and Secure Software Development Life-Cycle; Supply Chain Threats including securing cloud services and data processed by third parties; and Legal and Regulatory challenges including Payment Card Industry (PCI) Data Security Standard (DSS).

Spyware - Understanding and Addressing the Risks

"Spyware" is no longer simply a nuisance to enterprises. It is estimated that 90% of desktop PCs are infected with some form of...

USB Ports - Risks and Safety Precautions

USB Ports - Risks and Safety Precautions

USB might be termed as the latest craze in the industrial computer components industry, but this fashionable accessory can also be a root...