New Technology Reviews!.: attacks

Does The Industry Really Want To End Computer Virus Attacks?

OK, show of hands: Who out there has spent loads of money on a nifty antivirus solution for their company-you know, the kind that makes all sorts of promises as to the safety you will enjoy, the effectiveness of their antiviral software, the fieriness of their firewall, so on and so forth-only to be infected a short time later? I think it is safe to say that most of us have been there, furiously trying to figure out how to clean the virus off our machines-a virus that our new super anti-viral solution can't seem to handle-without having to reformat the hard drive, reinstall Windows and then reinstall everything else. The question is, why?   The answer, of course, is that antivirus solutions work in much the same way as medicinal vaccines: They only work on known viruses. In other words, a given antiviral solution will protect you against an old virus, something the solution has a definition for. That can be useful, since once a virus is "released into the wild" it can linger on the Internet for years, posing a potential hazard for new machines coming online. The real hazard comes from the viruses that are being released today, viruses that have not been isolated, studied and defined.   The Failure of Traditional Antiviral Solutions   Antiviral software began its rise to prominence back in 1993, when viruses were passed from one computer to another via infected floppy discs. With the advent of the Internet to general use in 1995, the development of virus forums and kits, spyware and adware, worms and trojans; and the move from viruses being experiments or vandalism to being a big-money criminal activity, the scene has changed dramatically. Now, 15 years later, the traditional antiviral approaches are simply not effective. They just can't keep up.   Yet we rely on this technology, always hoping that this latest version will do the trick and yet, more frequently than we'd like to think, that latest version fails. It has to fail, the odds are simply overwhelming. In 1989 there were about 30 known viruses, today there are over 200,000 with more coming online every day. To make matters worse, new viruses are tested against the latest antiviral software to make sure it can get through. Not all of them, perhaps, but certainly the major ones like Norton and MacAfee.   Given that the approach of antiviral solutions has traditionally been to close the barn door after the horse escapes, it makes sense to try an alternative way of dealing with the problem that closes the door before the horse gets out.   The Alternative: Whitelisting   The traditional antiviral (and anti-malware solutions in general) approach is to blacklist suspicious programs and keep them from working. In other words, it is supposed to identify and kill the virus. As we have seen, this only works when the solution can see the virus for what it is, a fact that leads to a high failure rate.   To address this shortcoming, a switch should be made from blacklisting suspicious software to whitelisting trusted software. In this scenario, new programs (and viruses and other malware are programs) are either entirely prohibited from operating or are placed in quarantine until they are considered trustworthy. By maintaining a strict whitelisting strategy, you could easily reduce your malware threat to next to nothing.   Lumension Security came up with this in 2000, when it became clear to them that no matter what antiviral solutions businesses were using, they were still being hit by viral attacks in ever increasing numbers. Designed to protect networks, their Sanctuary Application and Device Control suites, which were previewed at the 2004 InfoSecurity tradeshow, are proven, end-point security solutions that control both applications and peripheral devices through the use of whitelists.   Sanctuary operates by calculating a cryptographic hash for each approved executable file. This 20-byte signature, generated using the state-of-the-art SHA-1 algorithm, serves to identify the file itself instead of weaker attributes such as a file name or date. Each and every time a user wishes to open an executable, Sanctuary performs an instantaneous signature check on the file to ensure its authenticity. If even one bit is incorrect, the file will not be allowed to automatically execute.   That means a file piggy-backed to an e-mail or smuggled in on a downloaded image from a website will be prevented from running since it is not on the whitelist of acceptable applications. It also means that the sales manager's teenage son can't install something he downloaded onto his mother's computer or plug an unauthorized peripheral device into the machine. This enhanced end-point security and IT policy enforcement are two additional reasons why whitelisting technology is something to consider.   The Weakest Link: People   The sad truth is that the majority of data losses come from within the company firewall, from employees. This isn't a big surprise; it has long been known that people are the weakest link in any security-related situation. According to the FBI, 15% of people are totally dishonest, 5% are totally honest and the rest fall somewhere in between. Honesty, however, does not always translate into responsible, much less intelligent. Yep, people do foolish and irresponsible things.   From an IT security point of view, these foolish and irresponsible things are usually done in complete innocence. They include downloading unapproved software or installing such software from a disc, plugging strange devices, such as a USB thumb drive, into their computer, just to see what it is; and other, similar activities. By employing a whitelist solution that covers both hardware and software, you mitigate problems caused by well-meaning but irresponsible employee activities.   It will also protect against those with a plot to steal information. If an intruder, whether they come from within your company or from the outside, cannot plug in the media they brought to copy data-thumb drives are the most often implicated technology here-then they cannot easily steal the data. True, there are other ways of stealing data but none that leave so little evidence.   The Bottom Line   Considering the amount of money that is lost to malware and physical data loss each year, it makes sense to get serious about getting rid of this kind of threat once and for all and protect yourself with technology that does not have to play catch-up with the malware it promises to stop. Whitelisting, as demonstrated by Lumension, is a very effective way to accomplish this and an approach you should consider for your business.

Does The Industry Really Want To End Computer Virus Attacks?

OK, show of hands: Who out there has spent loads of money on a nifty antivirus solution for their company-you know, the kind that makes al...

Wikileaks: 'We neither condemn nor applaud DDoS attacks'

<img src="http://cdn.mos.techradar.com///classifications/computing/internet-and-broadband/images/Wikileaks_3-200-200.jpg"> Wikileaks has issued a statement regarding the recent spate of DDoS attacks on companies who are blacklisting the whistle-blowing site, distancing itself from what is happening. In the statement Wikileaks says it has no relationship with the people behind the attacks, <a href="http://wikileaks.ch/articles/2010/Statement-on-DDOS-attacks.html">noting</A>: "These denial of service attacks are believed to have originated from an internet gathering known as Anonymous. "This group is not affiliated with Wikileaks. There has been no contact between any Wikileaks staffer and anyone at Anonymous. "Wikileaks has not received any prior notice of any of Anonymous' actions." Wikileaks hit worldwide infamy in November with the publication of <a href="">250,000 US Embassy Cables</A>. Reflections of public opinion Online group Anonymous has targeted Mastercard, PayPal and State.gov in recent days with DDoS attacks on their websites. One of the 'hacktivists' involved said about the attacks: "It is definitely an information war. The core principle behind it is [that] information is free, governments keep information to themselves, Wikileaks releases them to the general public and the war occurs." Kristinn Hrafnsson from Wikileaks said: "We neither condemn nor applaud these attacks. We believe they are a reflection of public opinion on the actions of the targets."

Wikileaks: 'We neither condemn nor applaud DDoS attacks'

Wikileaks has issued a statement regarding the recent spate of DDoS attacks on companies who are blacklisting the whistle-blowing site, dis...

A Primer on Security Attacks - Computer Security Issues

It is very important to educate ourselves about different types of security attacks. A computer can be attacked for many reason like gain control over the computer system, to spy the activity of a user on the internet, to rob highly important personal data such as credit card details, SSN, passwords, etc; to access Wi-Fi internet, to malign the performance of a computer, etc.Such attacks that are mentioned above can be done through various ways. Let us learn about some of the different types of security attacks that a computer may encounter. One of the well known security attacks are physical attacks such as stealing data or any hardware parts from the computer, disrupting the normal performance of the computer. Attacks can also be aimed at running the proper functioning of any service on the computer such as changing the TCP/IP settings and breaking the access to the server. A system can be hacked by means of backdoor programs that allow other malicious programs to enter the system. Usage of Virus/Spyware infected pen-drive on a computer system can all sorts of unwanted problems. Activity caused by user can also cause attacks on the computer. Downloading e-mail attachments from unknown sources and submitting username and passwords on unsecure login pages. Bounce attacks are attacks done on oneâEUR(TM)s computer by means of someone elseâEUR(TM)s hacked computer. Port scanner software searches for any open hosts present on a computer network and is then attacked. Spyware, malware, virus attacks are one of the most well-known types of attacks. A hacker can only look for an open Wi-Fi connection that he can make use of to carry out his practices. Such attacks are very common these days as many are going for wireless internet connection. Different types of security attacks can be solved by upgrading the security of your computer. Your computer may be prone to the above mentioned attacks because defense mechanism of your computer is slow. Security programs such as antivirus and firewall can help you overcome such attacks.	 	 		 			 				 					 						The author of this article, Silki Garg, has written many high rated articles on Online Security and <a href="http://webtoolsandtips.com/pc-security/malware/get-warning-alerts-to-protect-your-website-from-malware-attacks/" target="_new">computer security</a>. She advices on how to avoid <a href="http://thepcsecurity.com/prevent-malware-and-phishing-with-long-url-please-firefox-security-addon/" target="_new">Internet Security Attacks</a>, virus, trojans, worms and other types of malware from your PC.

A Primer on Security Attacks - Computer Security Issues

It is very important to educate ourselves about different types of security attacks. A computer can be attacked for many reason like gain...

How to Avoid Web Security Attacks

Web security is a wide field that encompasses many aspects. These include, but are not limited to, protection from viruses, spyware, ad-ware, key-loggers, mail or IM spam, social engineering attacks designed to force the user to make irrational decisions, spoofing, fraudulent websites, malicious tracking cookies, phishing attacks and computer hacks. As you can see, the field grows vast if you delve deep into it. This article will briefly describe some of these aspects.The importance of web security cannot be understated. A virus attack may make your office/home PC inoperable. You may even lose important data which can never be recovered. Imagine losing an important office document or some cherished images of friends and family. Spywares, ad-ware, malicious cookie and key-loggers may track your internet usage and steal personal information from your PC which may include credit card details and passwords. Hacking, spoofing and email spam may do the same. To protect from all these attacks, many commercial/free products are available. Given below is a brief overview of what security software is available.The most well known web threats are viruses and thanks to their very nature, they can spread through removable media and local networks too. To put it simply, viruses are pieces of code which harm your computer and/or make it vulnerable to more malicious attacks. Many anti-virus solutions from various vendors exist today in the market. These may be available as complete security suites or as stand-alone products. These products also may detect other malicious programs like spyware and ad-ware.Another important piece of software is a firewall/program checker combination. Basically a firewall checks data that is sent or received by your PC from the Internet or LAN. The program checker component of the firewall checks/authorizes applications that access the internet. This component also monitor's system level changes made by the said applications.Other important types of web security software include:Phishing filters: that checks for fraudulent websites as you surf the internet and warns you when such a site is detected. Anti-Spam filters: these check your emails and detect fraudulent, inappropriate and/or other unwanted content in your mail and block them. Ad-Blockers: Ads may be malicious (or may lead to malicious sites). They also hog bandwidth due to their flash based and/or image based nature. Other tools: These mainly rate sites based on user reviews and provide a statistical average of the overall "trustworthiness" of the site. Mostly available in the form of addons to web browsers.However, the most effective way of safely surfing the web can simply be summed up as follows:Never visit un-trusted websites. Secure websites usually have a certificate to prevent data from being spoofed. Never download software and/or other files from un-trusted sources. Software from reputable companies is also digitally signed. Emails from un-trusted sources should be opened with caution. An email that is most likely spam should never be opened. Install the appropriate software as described above to further increase your PC's security. Always keep the above mentioned software up to date. Unless required, keep your computer offline.However, even after following all these steps, no computer will be 100% secure. There will always be a new virus or an ingenious method that can be used to break into or harm a PC. Backing up your data is the final and the most important step that can be taken.	 	 		 			 				 					 						We recommend App Secure Labs, who are an <a href="http://www.appsecurelabs.com" target="_new">application security consultant</a>

How to Avoid Web Security Attacks

Web security is a wide field that encompasses many aspects. These include, but are not limited to, protection from viruses, spyware, ad-w...

Virus Attacks the Swiss Foreign Ministry

Security researchers stated that attackers have hacked the computer network of the Swiss foreign ministry which led to the network's shutdown for many days. A professional virus attack was launched enabling the attackers to hijack network and collect unspecified data. The scope of the attack is still unknown and the officials have not revealed what data did the hackers targeted.According to reports, the attack was really planned enough that the attackers involved were able to get away with it without being detected. Microsoft and specialists from the ministry discovered the attack on October 22, 2009. Allvoices reported that the network was shut down after the hack has been discovered last October 27, 2009. The specialists tried to find where and how the attack started, and if there are any data that has been stolen. The staff have been prohibited to use the Internet for security purpose.Unfortunately, the Swiss Interior Ministry and Finance Ministry also experienced some problems on their systems on the same month. It is not clear if the same incidences are related to the latest attack. Reports imply that maybe a spyware from a foreign country was spying the Swiss systems. Security specialists warn that the virus authors are starting a secret rebel technique to make a massive virus outbreaks happen hoping to be successful in compromising a significant network prior to any response from the anti-virus agencies.On the contrary, the Swiss external affairs ministry isn't the only entity that has been victimized by a virus attack. In 2007, hackers has successfully attracted employees at the foreign ministry and at the State Secretariat for Economic Affairs (SECO) to be part of a phishing scheme where there are around 500 workers who received e-mails that contains a link on a photo contest. Employees who clicked the link to vote for the said photo contest have been infected with a Trojan virus. Too bad, the government's security software was not able to recognize the threat. The said attack was traced to come from Africa. United States had also accused China for using secretly-copied data to hack into the Commerce Department computers. Chinese were also accused for hacking computers that belongs to the computers of the Dalai Lama. In February 2009, a computer virus struck UK and French defense computers. A virus was also discovered hitting German military networks. To prevent the virus from spreading, several websites of German armed forces were disconnected from the country's military network.Hackers have been increasing nowadays attacking many organization and government websites in various nations. Anyone can be a victim of these online attacks especially if your computer is not protected.	 	 		 			 				 					 						Contact Techie Now for your computer's protection. Techie Now offers PC support services: virus and spyware removal, performance optimization, installation and configuration, and general repair. With Techie Now, your PC is safe and protected.If you want your PC to be protected, Techie Now is ready to provide you flexible, quick and safe services when it comes to virus and spyware removal, performance optimization, software installation and configuration, and other general repair. Feel free to visit us, <a href="http://www.techienow.com" target="_new">http://www.techienow.com</a>

Virus Attacks the Swiss Foreign Ministry

Security researchers stated that attackers have hacked the computer network of the Swiss foreign ministry which led to the network's ...

Web 2.0 Hack Attacks Terrorize Social Media Platforms

Hacker attacks on Web 2.0 social media networking sites are likely to come more often and be more creative and complex. Hackers and cybercriminals' commando skills are increasingly leveraging the Web. Their aim is to maim Web 2.0 applications and social networking sites. Organizations waddling into the Web 2.0 stratosphere need to listen up and re-assess their defensive mechanisms to protect users from hidden threats lurking on legitimate sites.Hackers are driving and distributing unrelenting malware perpetrating identity theft, financial fraud, and corporate espionage. As a growing number of Web 2.0 applications are routinely adopted into the business world they bring with them confronting security concerns.Almost two-thirds of businesses use at least one Web 2.0 application while in constant dread that Web 2.0 could lead to data loss from hackers gaining access through the back door. Easy and inexpensive Web 2.0 applications implementation make it a natural shortcut to high consumer demand for more transparent and smoother on line experiences.The tremendous popularity of Web 2.0 social media networking has virus writers and hackers crazed with hunting down and claiming popular and valuable Web 2.0 sites, targeting the greatest number of users as their own. With so much money at stake Web-based attacks are becoming more lethal, malicious, and crushing. The challenge to protect confidential information will become the greatest threat to enterprise security.Hungry hackers and malware developers have 'drive them insane' tactics ready to compromise and devour popular Web 2.0 sites and install intimidating code to dupe personal and business confidential information out of users and systems alike.Likewise spam, combining spyware, viruses, and other malware are on the rise. Web 2.0 social networks are further threatened with the chilling use of encryption to gain access through the back door without being detected. Seeds of doubt around security grow like weeds as spyware flourishes as constant security and management threats. Improvised and focused theft of private information, disarmed desktop, increased downtime, chewed up bandwidth and fanatic help desk calls are overwhelming call centers and IT departments.On the other side, security companies are riding the wave of Web-based attacks into greater market share for their white knight services. Cynics are even citing that these attacks are originating from security companies themselves as a way of pocketing easy money. Don't laugh. Who's to say it's not true. After all, who would be more equipped to put out fires than those guarding the matches? Everyone has budgets.Businesses eager to simplify security and all the associated costs of hardware, administration, management reporting and call center headaches may soon abandon 'old ways' and run to 'cloud' technology without fuss or fanfare if they can finally figure out issues around cost, security and delivery and before they're totally unhinged by hackers.	 	 		 			 				 					 						Christine McVeigh is author of 'Web 2.0 Traffic Demolisher - How to Dominate Your Niche Using Web 2.0'. Go now to get free access to an information packed strictly limited 5 part course on how to get traffic, dominate and make money using Web 2.0 and other free stuff on marketing Web 2.0 by going now to <a href="http://www.Web20TrafficDemolisher.com" target="_new">http://www.Web20TrafficDemolisher.com</a> See you on the other side!

Web 2.0 Hack Attacks Terrorize Social Media Platforms

Hacker attacks on Web 2.0 social media networking sites are likely to come more often and be more creative and complex. Hackers and cyber...

Vulnerability Management - The Changing Nature of Attacks

Attacks on users of the Internet have been noted for many years by the press and other observers but only recently have the attacks become more frequent and more deadly. Since almost every business and organization of any size relies on an open and accessible internet to remain competitive, cyber attacks are becoming more universal.? Increased effectiveness, adaptability and aggressiveness of malicious and destructive cyber attacks.? Increased attacks through trusted sites and botnets (a recent study shows that most cyber attacks come from IP addresses in the United States and it has been estimated that up to one quarter of all personal computers and servers connected to the internet may be part of a botnet.).? An increase in simultaneous and coordinated attacks at all levels of the internet? Attacks on U.S. government networks, critical infrastructure and increased frequency of localized attacks.? Infrastructure attacks with wide ranging and potentially long term effect.? Convergence of attacks using wolf pack like tactics.All level of internet users are affected and networks are being subjected to daily breaches of security. It doesn't matter if you are a small company or part of a large organization unless preventative steps are taken, your network is increasingly vulnerable to attack.The nature of Cyber Attacks is becoming More DestructiveInitially, cyber attacks were more nuisance than danger. Hackers originally released malware in the form of viruses/worms and spyware usually for the thrill of bringing down a selected network or site. Disgruntled employees utilized hacking tools to disrupt the business of their former employers. Eventually criminal used penetration techniques to steal credit card and other passwords.But recently, cyber terrorism has emerged which, in addition to attacks on corporate networks, posed a direct threat to U.S. military and civilian agencies and critical infrastructure. Because of the problems with attributing the attacks to the actual source, this threat has become difficult to contain.Cybercrime is becoming more aggressive, organized and effective as a transnational/multinational business. High technology online skills and techniques are now available to all interested parties, including hostile nation states, criminal elements and individuals and groups that covertly represent terrorist groups.The development and spread of automated attack and botnet tools and their use by cybercriminals has overwhelmed many current methodologies used for vulnerability management and the tracking of and defense against cyber attacks. In addition, vulnerabilities of the U.S. critical infrastructure (power, water, transport and communications) tend to attract cyber criminals to extort money, or damage the U.S. economy in a way that eventually affects national security.The result of this dangerous trend is the risk of losing proprietary knowledge that gives our country its competitive and military edge, loss of command and control of military assets and denial of service attacks that can shut down military bases and critical infrastructure like the power grid and energy plants.The transnational nature of cyber terrorism is also thriving in a culture of ineffective regulation and suspicion over allowing domestic network access to potential adversaries. Multilateral treaties, until recently, have not addressed the problem.What is the Solution?There are a number of areas that need to be addressed:? AwarenessAwareness of the threat is critical in all aspects of the economy including media, government, and corporate and the real, changing nature of the threat is mandatory.? Development of TechnologyTechnology that is available, easy to use, and adaptable to new threats would contribute towards containment of many attacks? More Effective and Adaptive Vulnerability Management Tools and TechniquesVulnerability management is continuous process that is never completed. Easy to use software tools are required as well as a dedication of real resources and management commitment to address the problem. Constant monitoring and remediation is required.? Government ActionRecently the present administration has taken steps to streamline and focus energy of the cyber security problem in civilian, defense and intelligence agencies. The Department of Homeland Security (DHS) has received additional authority to fight cyber terrorism and the cyber functions of defense and intelligence have been merged under one command - Cyber Command.These steps are but necessary first steps and much more work is required.? International TreatiesThe United Nations has recently taken steps toward the drafting of an international cyber agreement with the United States and Russia agreeing to enter negotiations. Since the United Nations is notoriously slow, much more action is required.These steps form a template and outline for future action. The threat is real and growing and must be addressed.	 	 		 			 				 					 						Jon M. Stout is Chief Executive Officer of Aspiration Software LLC. Aspiration Software LLC is an Information Technology/Cyber Security services provider focused on the Intelligence Community (IC). For more information about <a href="http://aspirationsoftware.com/core-capabilities" target="_new">Cyber Security and Information Assurance</a> and Employment Opportunities in the Intelligence Community go to <a href="http://aspirationsoftware.com" target="_new">http://aspirationsoftware.com</a>

Vulnerability Management - The Changing Nature of Attacks

Attacks on users of the Internet have been noted for many years by the press and other observers but only recently have the attacks becom...

The Inevitability of International Cyber Attacks - Are We Ready?

The problem of International Cyber AttacksGeneral Keith Alexander, Director of the National Security Agency (NSA) and the man in charge of Cybercom, the U.S.'s new cyber security command, issued a warning recently of massive increases in the number of attempts by hackers and foreign countries to breach the nation's internet security.What had originally started as virus and malware attacks by amateur hackers and disgruntled employees against computers and networks have now morphed into worldwide penetration by criminal enterprises and state sponsored terrorists.The world of information security attacks and threats are growing in power and sophistication with nation backed Cyber attacks emerging. Although constituting isolated attacks so far, the new wave of Cyber attacks are more prevalent and dangerous. And, with the advent of (often hostile) national involvement in Cyber offensives, the risk to our nation's National Security is real and potentially devastating.At risk are our tremendous advantages in military power, intellectual capital and industrial wealth.Assets the United States has spent tremendous human and intellectual capital on to develop are now at risk of being stolen by clever cyber thieves that exploit weaknesses in our cyber security. The fact that cyber thieves can now operate across international borders and in safe have third countries with impunity only increases the threat. The threat affects government and industry alike.Although most experts have predicted that this day would arrive, online infiltration could cause huge damage to the U.S. military and the nation's infrastructure, and the government and industry is not presently prepared to secure itself against such attacks.The Obama administration is promising to spend billions to upgrade cyber defenses, and has already hired hundreds of specialists with doctorates in computer technology to work at the Cybercom and start building better security measures.But the problem is one of huge proportions complicated by the rapid advance of technology, lack of clear concept definition, failure of adequate international cooperation and distrust between government and the private sector.The 21st century battlefield is comprised of many components that include the Internet and all things that connect from a computer to the Internet. The terrain also encompasses information systems like the electrical grids, telecommunication systems, and various corporate and military systems.In addition, although both defensive and offensive measures are required to fight the war on cyber terrorism, the cyber protective world is clearly operating in a reactive manner. Compounding this is the fact that the international networks of data are growing at a technological pace that outstrips cyber security development.Although new technologies and processes are emerging to fight hackers and cyber terrorist, there is little uniformity in their use and adoption. In addition, international standards and cyber threat protection laws are not yet in place.Is the Threat Real?Although there is not yet a universal outcry against International Cyber Terrorism, recent events like the hacking of strategic Pentagon databases and the withdrawal of Google from internet operations in China are symptomatic of the magnitude of the problem. Many experts equate the complacent attitude toward International Cyber Attacks as that seen before the Japanese attack on Pearl Harbor that started World War II for the United States or the attacks on September 11, 2001 that started the War on Terror.Cyber attacks are often classified as low probability, high damage events similar to major natural disasters or fatal airplane crashes. When they happen, the level of public concern is high. And the number of occurrences, the frequency and magnitude of attacks are increasing rapidly.Developments in Cyber Security solutionsThere is a growing awareness of the problem of International Cyber Attacks although the pace of development is slow and irregular. The Federal Government has tasked two agencies (National Security Agency - NSA for international cyber terrorism and the Department of Homeland Security- DHS for domestic cyber attacks) but there are problems with coordination and funding. More attention, a clear vision, definition of terms and significant increases in funding are required in order to develop effective solutions.In addition, infrastructure assets are required in the form of the development and use of critical information and other databases. Each infrastructure development needs to be marketed to and adopted by the entire cyber defense community in order to enhance and leverage all available development in technology, law and standards. Universal evaluation of research and use of centralized data is an important first step in the war against International Cyber Attacks.Until government and industry recognize the problem and cooperate in search of a solution International Cyber Attacks will grow and increase the threat to our Cyber Security.	 	 		 			 				 					 						Jon M. Stout is Chief Executive Officer of Aspiration Software LLC. Aspiration Software LLC is an Information Technology/Cyber Security services provider focused on the Intelligence Community (IC). For more information about <a href="http://aspirationsoftware.com/core-capabilities" target="_new">Cyber Security and Information Assurance</a> and Employment Opportunities in the Intelligence Community go to <a href="http://aspirationsoftware.com" target="_new">http://aspirationsoftware.com</a>

The Inevitability of International Cyber Attacks - Are We Ready?

The problem of International Cyber Attacks General Keith Alexander, Director of the National Security Agency (NSA) and the man in charge ...

Cell Phone Attacks

There are both simple and sophisticated ways to protect cell phones from attackers in the U.S. Since phones with Bluetooth connections and data capabilities are the main targets of malware, it is generally the Smartphone that must be secured against vulnerabilities. Cell-phone threats are primarily spread in three ways, Internet downloads, Bluetooth wireless connections, and multimedia messaging service (MMS).Many protections are built into devices, such as allowing users to set a strong, five-digit PIN code for Bluetooth devices so that access is harder to crack, and most digital phones have encryption capabilities, which reduce the chance of someone latching onto a conversation. Mobile anti-virus software is also becoming more available, which is used for various device platforms.Cell phone use varies around the world. In Japan, cell phones are used for financial transactions similar to a credit/debit card. Other uses include watching live TV, gaming, picture enhancement, and GPS navigation. On average, Japan is approximately five years ahead of the U.S. in regards to cell phone technology.With the advanced use of cell phones in Japan, security capabilities are advanced as well. For example, NTT DoCoMo's P903i includes security features such as face recognition and password protection in order to make financial transactions. Another protection has the owner of a cell phone keep a security chip in their pocket or purse, and anytime the cell phone is out of range, it will lock and prevent usage. These methods, plus the protections mentioned for the U.S. above, can provide greater security, however, the risk of using the Internet and data being hacked during transmission is still high. Additional protection by cell phone service providers and manufacturers need continuous improvement because the wireless technology, and threats against it, is here to stay.Cell-phone viruses downloaded from the Internet spread the same way as a computer virus. Infected files are downloaded using the phone's Internet connection, or downloaded to a computer and then synchronized or transferred to the phone. In order to protect a cell-phone from this type of exploit the user should verify the authenticity of downloads to make sure they are from trusted sources. In addition, users should consider using mobile antivirus software and synchronize files selectively since frequent synchronizing gives the maximum opportunity for transferring infected files.Bluetooth wireless connection threats occur when a user receives a virus via Bluetooth while the phone is in discoverable mode, thus the user should turn off Bluetooth and discoverable mode until it is needed. In order for a virus to spread via an MMS message it must be included as an attachment. In order to stop a virus propagated in this manner, the user should not open unexpected attachments.Users should be vigilant in keeping their software current by regularly checking for new versions of operating system and applications. In addition, they must exercise caution towards suspicious attachments, downloads, and activity.Multiple levels of defense create the most effective protection. The first layer should secure the cellular infrastructure, including transmission towers and the mobile telecommunications switching office. The second level of protection resides with phone manufacturers and software developers. The third level of protection is the end user's responsibility.A simple step end users can take is to monitor their battery usage, since one telltale sign of active malware is a quickly drained battery. Also, users should lock their keypad when not in use to prevent unauthorized access and change passwords frequently.	 	 		 			 				 					 						The author is a computer security professional with experience protecting small business and home networks. He also teaches the basics of computer network security at 365 Computer Security Training where he blogs regularly and creates video training and educational materials related to information security. Learn more at <a href="http://www.365ComputerSecurityTraining.com" target="_new">http://www.365ComputerSecurityTraining.com</a>

Cell Phone Attacks

There are both simple and sophisticated ways to protect cell phones from attackers in the U.S. Since phones with Bluetooth connections an...

Teufel attacks hi-fi market with new UK website

<img src="http://cdn.mos.techradar.com//Review%20images/TechRadar/Home%20Entertainment/teufel-200-200.jpg"> Teufel has launched a UK-specific retail website for the first time. The German hi-fi company's unique selling point is that, like Dell in the computing market, its products are only available direct from its website. But until now, there was one centralised website for all European markets. This has now changed, as <a href="http://www.teufelaudio.co.uk/">Teufel has launched a UK specific website</A> which has all prices in lovely pounds sterling as well as offering other UK-centric features. Teufel says that by cutting out the middlemen in the retail sector and buying direct, you could save up to 60 per cent compared to buying big-brand hi-fi products from traditional retailers. "With Teufel you get better quality at the same price," Teufel's Florian Szigat told TechRadar. "We have the best price-to-quality ratio and this is the crucial point. Customers get good service and native language support and they get the chance to listen to the speakers in their home where they're meant to be played and if they keep them they get a 12-year warranty on any speaker. "We get a lot of requests from German and international companies saying 'we like your products and we'd like to sell them in our stores' and we ask them 'what margin would you want?' and they say 30 per cent, 40 per cent, 60 per cent, and we say we can't do this because our margins are not that high. "Our high end speakers would cost maybe twice the price through a traditional retailer." <img alt="teufel uk website" src="http://mos.futurenet.com/techradar/Review%20images/TechRadar/Home%20Entertainment/teufel-420-90.jpg" width="420"></IMG> Because Teufel aren't stocked in any stores, it allows customers an eight-week home trial in order to evaluate the products. "We cut out the middle man by selling directly and this saves for the customer the margin that the middle man would take," said Szigat, "we either take this saving and pass it on to the customer to offer them the product at a far better rate or we take it, put it into development and offer them a far better product at the same rate. "This is the advantage. The obvious disadvantage is that we're not to be found in the stores so you cannot touch the product yourself or listen to it before you buy it. And this is what we try to cope with by granting all customers an eight week right of return. "You are granted two weeks anyway by law but we grant them an extra six weeks to set the product up at home where it's going to be used, which might have a heavy effect on how it sounds compared to how it would sound in the store, and at any time in the eight weeks customers can pack it up again, call us and we'll collect the product and give you your money back."

Teufel attacks hi-fi market with new UK website

Teufel has launched a UK-specific retail website for the first time. The German hi-fi company's unique selling point is that, like Dell ...