Cyber security: key to homeland security. (Up front: news, trends & analysis).Many information security experts and government officials fear that the Internet, e-mail, or the nation's network infrastructure could be used as the next vehicle for a terrorist attack. If you're not worried, perhaps you should be. Consider these facts: * The Center for Strategic & International Studies reports that almost all the Fortune 500 companies' networks have been attacked by cyber terrorists. Also, the Center says that all it would take to decimate dec·i·mate tr.v. dec·i·mat·ed, dec·i·mat·ing, dec·i·mates 1. To destroy or kill a large part of (a group). 2. Usage Problem a. the technological infrastructure of the U.S. economy is fewer than 30 computer hackers strategically placed around the world and a budget of less than $10 million. * Today's terrorists are technologically savvy. The World Trade Center hijackers communicated via encrypted e-mail and used the Internet to help plot the September 11 events, according to according to prep. 1. As stated or indicated by; on the authority of: according to historians. 2. In keeping with: according to instructions. 3. Fortune magazine. * According to the research firm IDC, there are 1.3 million people worldwide who possess the skills needed to launch a cyber attack on public communications networks. * In May, the FBI and Defense Intelligence Agency Noun 1. Defense Intelligence Agency - an intelligence agency of the United States in the Department of Defense; is responsible for providing intelligence in support of military planning and operations and weapons acquisition DIA issued a secret warning that the Muslim Hackers Club included experts who have conducted classes on how to launch terror attacks on computer networks, according to a Newsweek report. * Perhaps the scariest piece of information is that an expert recently gave the U.S. government an overall failing grade for computer security, according to the National Journal's Technology Daily. Although federal officials have promised to hold agencies more accountable, cyber security in the United States United States, officially United States of America, republic (2005 est. pop. 295,734,000), 3,539,227 sq mi (9,166,598 sq km), North America. The United States is the world's third largest country in population and the fourth largest country in area. is weak, and both public and private leaders must know where their vulnerabilities exist and take immediate corrective action A corrective action is a change implemented to address a weakness identified in a management system. Normally corrective actions are instigated in response to a customer complaint, abnormal levels if internal nonconformity, nonconformities identified during an internal audit or . "With lack of awareness being the weakest link in information security, technology alone cannot stop the problem," says Rick Shaw, president of CorpNet Security. "Instead, companies must create a culture of security through training and education." According to CorpNet Security, there are five steps to securing your system: 1. Consider the weakest security link--lack of awareness among internal users. 2. Create a culture of security through training and education. 3. Re-assess employee policies and procedures Policies and Procedures are a set of documents that describe an organization's policies for operation and the procedures necessary to fulfill the policies. They are often initiated because of some external requirement, such as environmental compliance or other governmental regarding technology. 4. Be particularly aware of low-tech risks, such as social engineering, Dumpster diving dumpster diving - /dump'-ster di:'-ving/ 1. The practice of sifting refuse from an office or technical installation to extract confidential data, especially security-compromising information ("dumpster" is an Americanism for what is elsewhere called a "skip"). , and other human factors that can be addressed only through heightened security awareness Security awareness is the knowledge and attitude members of an organization possess regarding the protection of the physical and, especially, information assets of that organization. . 5. Implement a dual approach addressing technology and human risk factors. |
|
||||||||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion