Security

Ask something
Discussion Locked

Internet security: Where do we go from here?

0 helpful
3 replies

by debate

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Do you agree with Jonathan Yarden that Internet security requires a combination of service restrictions and active monitoring? How do you think companies can more proactively approach security? Share your comments about the direction of Internet security, as discussed in the Oct. 25 edition of the Internet Security Focus newsletter.

If you haven't subscribed to our free Internet Security Focus newsletter, sign up today! Click this link to subscribe automatically:
http://nl.com.com/MiniFormHandler?brand=techrepublic&list_id=e044

3 replies

by tarquin_finknottle

"Many companies still don't have a solid understanding of what Internet
and computer security entails."

Of course not! In SmallCo (say < 20 people) the in-house expert is simply an employee who is more confident with a PC than most - perhaps slightly more knowledgeable than the average home user. We need to distinguish between these companies and the BigCo outfits, who have dedicated staff and can spend money to figure out what suits them.

BigCo has influence - they may be able to direct (and audit) the security policies of their small suppliers, which would help. They could invest/support ISP startups specialising in security (i.e. filtering/blocking everything from spam to specific ports or addresses, according to the client's requirements [does anyone do that affordably??]) and demand that their suppliers' ISPs deliver these capabilities.

SmallCo probably needs a (set of) checklist(s), which the industry should develop. It/they should focus on practical measures for non-technical users. An example when "The Internet's Not Working" would include:

Restart your PC
Turn off the power to all network and Internet connection devices for at least one minute
Call your Internet provider
...add your favourites

Ultimately, education is the key (I met a SmallCo owner today who didn't realise that his kids music downloads were illegal - he thought this stuff is just free!). Kit suppliers should do more - most SmallCos buy boxed retail. The packaging for a wireless router will tell you it does WEP/WPA/etc. but rarely emphasises that you MUST use it. The instructions tell you how to do it but not why you would want to (or why you should bother - you just want to connect stuff).

I'm currently installing an OEM XP with SP2. I know what lies behind the questions it asks but home user/SmallCo will not have a clue because it's not even clear that these are *Windows* updates rather than some virus trying to sneak in!

by tarquin_finknottle

"Many companies still don't have a solid understanding of what Internet
and computer security entails."

Of course not! In SmallCo (say < 20 people) the in-house expert is simply an employee who is more confident with a PC than most - perhaps slightly more knowledgeable than the average home user. We need to distinguish between these companies and the BigCo outfits, who have dedicated staff and can spend money to figure out what suits them.

BigCo has influence - they may be able to direct (and audit) the security policies of their small suppliers, which would help. They could invest/support ISP startups specialising in security (i.e. filtering/blocking everything from spam to specific ports or addresses, according to the client's requirements [does anyone do that affordably??]) and demand that their suppliers' ISPs deliver these capabilities.

SmallCo probably needs a (set of) checklist(s), which the industry should develop. It/they should focus on practical measures for non-technical users. An example when "The Internet's Not Working" would include:

Restart your PC
Turn off the power to all network and Internet connection devices for at least one minute
Call your Internet provider
...add your favourites

Ultimately, education is the key (I met a SmallCo owner today who didn't realise that his kids music downloads were illegal - he thought this stuff is just free!). Kit suppliers should do more - most SmallCos buy boxed retail. The packaging for a wireless router will tell you it does WEP/WPA/etc. but rarely emphasises that you MUST use it. The instructions tell you how to do it but not why you would want to (or why you should bother - you just want to connect stuff).

I'm currently installing an OEM XP with SP2. I know what lies behind the questions it asks but home user/SmallCo will not have a clue because it's not even clear that these are *Windows* updates rather than some virus trying to sneak in!

by aqtsinger2

My feeling is that SmallCo relies on the Internet Service Provider to free them from known illegal activities.

The ongoing 'Port Scanners' active since last April is a indication of the lack of involvment by ISPs to be rid of them. It's a matter of legal juridiction I'm sure. The ability to use nearby IP-addresses to host the port scanning is very dis-concerting.

There should be something legislated about this type of activity. It's similar to tapping into actual telephone conversations, to scan ports after you have finished using them.

Who but the providers of the port scanner's address can 'police' them? Who else can say that they are a legitimate customer and not a tapper into some else's address?

This discussion is closed to new replies.