Archive | Security RSS feed for this section

Keeping Your Computer Virus And Malware Free

December 2, 2012

Comments Off

computer security

Two common types of virus are as follows:

    * Worms (can spread between computer systems by using network links)
    * Trojans (can install themselves on computer systems without a user’s knowledge and offer backdoor access to hackers, but cannot spread between computers)

Both types of virus can be difficult to remove unless antivirus is installed on your computer system prior to its infection. This is due to the fact that a lot of viruses nowadays attempt to disable any new antivirus programs that are installed after virus infection of a computer has already taken place.

The best way to keep your personal information and computer virus-free is to have an up-to-date security program that includes both anti-virus and anti-spyware capabilities. Keeping your chosen program up-to-date is crucial as new viruses and spyware are being detected every day.

There are a number of ways in which malicious software can be transmitted to a computer system. Whilst the most common method is via networks such as the Internet, it is important to remember that, although increasingly rare these days, CDs, as well as other types of external media, can also contain viruses and spyware.

Whilst external media from trusted companies does not usually contain malicious software, home-made CD’s, i.e. those containing personal files or backed up data, can contain viruses and therefore should only be inserted into computers with up-to-date security software.

This is especially important for business users, as loss or corruption of data can have serious consequences for these users, due to the fact that such organisations are largely reliant on computers in order to trade with customers.

It is also important to have a working firewall somewhere on your system. This can be either a hardware firewall such as a router device, or for those users who are connected directly to the Internet, a software-based firewall program.

This is mainly because there are some viruses, a well-known example being the MSBlast worm, that can spread by probing unsecured computers and installing copies of themselves on there, often without the user’s knowledge.

The first signs that users often get of such viruses, assuming that they have no anti-virus software, is either corrupted files, or in the case of MSBlast, a shutdown dialog box giving the user a certain amount of time before their computer automatically shuts down.

Due to the fact that software can be compromised far more easily than hardware, the best thing to do is to have hardware firewall protection wherever this is possible. Fortunately, most ISPs issue their users with routers, meaning that they are protected from some security threats without having to adjust settings or install software programs on their computer systems.

Although most of these viruses are several years old, there are still copies roaming the Internet, which means that it is highly inadvisable to plug an unsecured computer directly into the Internet, i.e. not behind any sort of router or software firewall program.
 

Continue reading...

Top 5 Tips For Cloud Computing Security

December 1, 2012

Comments Off

computer security

Are you hesitant about adopting cloud computing services into your IT infrastructure? You are not alone. Data security is the leading concern for IT professionals when it comes to cloud computing. Services like Amazons EC2 are simply not equipped to address the security and privacy needs of data-sensitive organizations. Because public cloud services offer server instances for many clients on the same hardware, your data can get literally “lost in the clouds” when you have very little control over where your data lives.

Private cloud computing allows for the control that most PCI and HIPPA-sensitive organizations require over their data. When it comes to security, the importance of control over your environment cannot be overstated, and leads most IT professionals to adopt private cloud hosting over the public cloud.

When comparing cloud options, here are 5 security tips to consider:

How can you secure your data if you don’t know where it is? Sure, firewalls and intrusion detection and prevention can keep out most intruders, and data encryption keeps the data safer, but how do you know where your data goes when you terminate your service or when the cloud provider goes out of business? Being able to point to a machine and say your data and only your data is on that machine, goes a long way in the security of your data in the cloud. Dedicated hardware is the key that allows for cloud computing services to pass the most stringent security guidelines.

One of the most overlooked aspects of cloud computing and one of the easiest way to increase the control of your data is to make sure that whatever happens, you have a secure backup of that data. This is more about securing your business than your actual data but provides the same type of peace of mind. We have seen big companies like T-Mobile lose its customers data, by not having a backup, leaving them with nothing.

By knowing which server and data center your data is being stored at, you can probe them for all applicable security measures that are in place. You can see if they are SSAE 16 or SAS 70 audited, and if they have clients that are HIPAA or PCI certified. Managed services can also add a great deal of benefit and expertise to making your applications, data, and business more resilient. Services like managed firewalls, antivirus, and intrusion detection are offered by reputable data center or cloud providers, and allow for increased security measures for managed servers.

When in doubt, ask your cloud provider for client references that require stringent security measures. Financial, healthcare, insurance, or government organizations are a good start. While references don’t guarantee anything, chances are if other companies that have similar security goals are using the provider, you may be a good fit as well. Be sure to contact these references directly when possible to see what these companies are using the cloud services for, and the steps they have taken to secure their data.

The only way to make sure something is secure is to test it. It is not uncommon for highly data-sensitive organizations to hire a skilled ethical-hacker to test their security provisions. Vulnerability scanning and assessments are just as important inside the cloud as they are outside the cloud. Chances are that if you can find a way to get unauthorized access to your data, someone else can as well.

Achieving sufficient security assurances in the cloud is possible but it is not guaranteed. Just like any other IT project, you have to do your homework and in the case of security, it is better to be safe than sorry. The private cloud hosting model can certainly provide a more secure framework than the public clouds.

Continue reading...

Computer Security in 3 Steps

November 26, 2012

Comments Off

computer security

The majority of households today have a family computer that connects to the internet for checking email, news, games, and school work. The internet has allowed us to stay in contact with friends like never before, but there is a downside. The internet is full of criminals who are looking to steal your financial information, identity, and credit card numbers. Here are 3 simple steps to protect your computer from these threats.

Step 1: Install all Microsoft Critical Updates
Microsoft releases updates for Windows software every second Tuesday of each month. These updates are designed to close security vulnerabilities in the Windows operating system. The updates are free of charge to Windows users and only need to be downloaded and installed. If you are using Windows 98, 2000/XP, or Vista you need to install these updates every month.

Step 2: Install Antivirus Software
The internet is full of viruses, worms, Trojan horses, and other nasty programs designed to crash or take over your computer.

Antivirus software provides a shield around your computer to protect you from these threats.

Step 3: Install Spyware Software
Spyware is actually becoming the biggest threat against computers on the internet. Spyware installs on your computer without your knowledge or permission. This software is designed to track what web sites you visit, create pop-ups, and slow your computer down. Spyware software removes these programs from your computer.

If your computer is connected to the internet you must follow these 3 simple steps to secure your computer. The internet is a great resource for news, games, and entertainment but also contains dangers.

If you follow these 3 simple steps you can be assured a safe and secure internet experience.

Continue reading...

Computer Security is Data Security

November 23, 2012

Comments Off

computer security

Three-quarters of information security incidents are “inside jobs” – resulting from employee negligence, carelessness, or just ignorance.(1) Your IT Department, whether a contracted provider, an employee or the company owner has a significant task that will only continue to grow. The objective of computer security varies and can include protection of information from theft or corruption, or the preservation of data availability, as defined in a security policy. Physical security is directly related to information security, as 57% of data theft is directly related to physical theft of equipment.

Researching a physical security solution for a client resulted in our opportunity to work with Advanced Systems International, SAC the last four years assisting in the development of a formidable software solution designed to limit the ability of accidental or criminal uploading viruses and provide administrative control over memory storage devices.

The exhaustive software engineering devoted to the development of USB Lock RP and associated add-on’s has resulted in an utility that significantly reduces the ability of data theft or corruption. A simple customer inquiry in to how one could control the use of built-in CD-WR players led to our original involvement with USB Lock RP, with the introduction of the newest release Version 4.05. This simple solution has become an indispensable IT security tool without becoming a product that only experienced IT personnel can implement.

Anyone with basic computer knowledge and skills having administrative rights can have USB Lock RP up and protecting your company’s assets in minutes. Do you need this security tool? Simple Security Test – Using a USB Stick or any memory storage device.

e.g.: CD-WR, DVD-WR, SD Card, Flash Card, MP3 player or even some cell phone. Connect your device of choice to any computer logged onto your network without administrative privileges. If you can move a file from the network to the memory drive you need to take a serious look at USB Lock RP Enterprise at AdvanSysUSA.com. Some of what USB Lock RPE provides: (USB Lock RPE includes all available add-on features)
Administrative real-time control over Memory Storage Drive use
Protects against uploading malware/viruses
Support of your Written Security Policy
Unrestricted use of non-memory USB devices e.g. mouse, keyboard
Reports: files transferred by authorized memory devises
Enforceable USB Stick File Protection for data in transit
View real-time *seat system information- (*All PC’s connected to your network)
USB Lock RPE includes-USB Lock RP, USB Lock Aware & USB Personal Protector

Many small businesses are not aware of all the required security levels necessary to properly protect their IT equipment and information. Most have worked hard to provide their businesses the necessary software to keep things running smoothly. Network systems have grown with the company in a patch quilt fashion, a massing accounting software, e-mail systems, word processing, office production, engineering software, anti virus software and so on as it is needed. The biggest issues the small business IT manager has concentrated on has been making sure that all of these programs work together and are kept updated. This is why we have attempted to collect a selection of computer security products that help the IT manager protect his equipment and information.

(1) NSI.org

Continue reading...