Discussion on:

On the road? My seven tips for keeping hackers at bay

That arguably the most important piece of advice -- to use a security proxy service or VPN -- was not mentioned.

Michael Kassner = Arguably - but I don't know of any scientific studies that give a 'pecking order' to all these threats...Peter

Not sure what pecking order has to do with the fact that a VPN/Proxy server is the only true way to be secure while traveling.

Using a VPN or proxy server really requires connecting to a corporate network and usually entales working. For average use I think these are a good start.

Bill

Also forgot to mention WHERE you connect if you do use Wi-Fi. Watch out for those ad-hoc networks.

There are people who will duplicate the SSID for a known network and rebroadcast it. Then if people connect, they can sniff packets and man-in-the-middle traffic very easily. Just another thing to worry about.

Bill

Gisabun = I certainly see plenty of those - mostly other people error...but still to be avoided that's for sure. Automated wifi/3G connection software can be a bummer in this regard! Peter

Peter ??? great post; I enjoyed reading it and appreciate your insight. We at Symantec completely agree with your recommendation of implementing security software and ensuring that software is updated. Organizations cannot expect to maintain their security posture with old or outdated security products, particularly in this era of constantly-evolving cybercrime. Security vendors do not release new versions of technology just to generate revenue; they do so in order to provide companies with the tools needed to effectively arm themselves against cybercriminals ??? this effectiveness is significantly hindered when old technologies are used. Staying ahead of the curve in terms of technology updates is not just smart, it???s a crucial defense strategy in the current threat landscape.

In addition to your list of recommendations, we would also like to highlight the importance of creating a security-aware culture within an organization. We recently conducted a poll with CSO Magazine and found that 71% of CISOs agree that people/employees are their ???weakest links??? in defending against targeted attacks -- which is why it is critical that organizations adopt a defense-in-depth strategy in addition to building a security-aware culture across all levels and departments. This approach is the only way to ensure organizations are truly mitigating the risk of a cyberattack ??? be it in the office or on the road.

--- Jason Nadeau, CISSP
Sr. Director, Endpoint Security & Suites Product Management
Endpoint & Mobility Group, Symantec Corporation