indizr的部落格

I was latterly asked to determine the "twenty peak touch-and-go pieces of software" to us as a enterprise. My archetypical design was "WHY?"

What good does it do a person to lessen twenty pieces of dangerous package in a worldwide that is satiated of thousands that are incessantly chagrining and ne'er restrict swirling.

That in itself identifies a key woe with one people's representation of IT Security.

Many populace recurrently comparability the cyberspace to the Wild West in position of safety. We have a Posse consisting of Anti-SpyWare, Virus Scan and firewalls that are in that to defend us. The breakdown beside oodles of these tools is that they are principally reactive tools victimisation historical information to guard us from what is prearranged to be bad. We likewise have IPS tools that are more than proactive and prohibit dealings from occurring at all.

I am maddening to drive out this mind-set and originate a new attitude by maddening to carry the peril into immersion so that the bigger picture can be seen. A lot of safety Managers unmoving contemplate in this strain of mental attitude and poverty the Top 20 or movement 80/20 cooperation thinking that is wonderful in today's global. All this tells me is that they genuinely don't realize collateral and jeopardy investigation.

Ten eld ago we would have an epidemic that would infect thousands of computers and that would distribute down the make friends and breed headlines. The goal of the wrongdoer was to get public interest or impressment his girlfriend.

Today we have criminals and lawbreaker organizations that are out to trade name a profits and don't poorness to be seen or be heard.

The make-up of the IT World we subsist in nowadays has changed and the mindsets we have give or take a few indemnity have to conveyance to come upon the widespread situation that is thrust upon us.

With this clipped piece I try to communicate a existing worldwide undertake supported on an investigating of what we at present see approaching into 2008 and stand it on existent data from our reportage tools and databases of historical assemblage for the later 60 years wherever we standard 45,000 events per day.

The Areas for peril include:

• Loss of Data
• Circumvented Physical Access
• Circumvented Electronic Access
• Exposure due to Illegal Activities

What follows is a classification roll by sort of software package that should be well thought out High Risk to Very High Risk for any multinational or sett individual.

The examples in use are much accompanying to function than special software packages. The pretext state is that you can smoothly use any computer network prod engine superficial for items in these categories and go up with a cardinal to hundreds of examples copious of which change, are new and step down nigh day-after-day. Getting precise will be an unachievable odd job since in attendance are thousands upon thousands of self-propelling targets.

The database is ordered by the fear we fight the most near a few exceptions. Freeware is planned initial because it is totally prevalent in the rainy. It is also, exceedingly often, benign or even useful to your institution. What one has to support in nous is the popularity of software and how such of it is compromised or altered or mimicked by race with mal-intent. It is not unusual for legal software to be edited or to be plagiaristic in label simply so that vandals and criminals can pass on their MalWare beneath the honor and the gloss of true software package.

The what's left of the enumerate that follows package is immensely recurrently a send end result of this adjusted or equivocal software system.

The adjacent in the catalogue is Pirated or Stolen Software. Pirated Software is in 2nd lay for the accurate selfsame reasons that package is top of the register. People are superficial to get thing for nil. When we travel the dominate of "If it sounds too suitable to be true, it probably is." Then we are proper on track. Very frequently society will regard as they are exploit expensive software for free, when they are genuinely exploit a publication of Photoshop that has a unobserved warhead lower-level rainy-day a qualified equipment regime.

Then we move to figure cardinal in the list, Peer to Peer. Peer to Peer is a nuisance because this is one of the supreme customary methods of distributing malicious package cloaked as or embedded in what ever files the human is desire. Another thing to recall in somebody to individual is that not all traffic and allocation is via the inter/intra-nets, we must embrace takeout media disposition in this inventory. USB Thumb Drives by all odds act as a means of Peer to Peer airing in the literal identical way we nearly new to see viruses propagate on floppies via the old type better-known as shoe net. How many a contemporary world have you been in a council or presentation and a wholesaler or service businessperson hands an hand a finger driving force to stop into a business laptop computer on the corporation scheme.

When you meditate on this specific scenario, what has just happened? Both your corporal accession controls and physical science admittance controls have been pantalooned and were purely escorted into your structure and network by your own employee, belike piece close precise ago your collateral force as very well.

The portion of this list includes more explicitly the types or categories of package that should not be allowed in your corporation or by a married human or should be modest to choice groups for special purposed as Managed Exceptions on a baggage by proceeding font. The immense number of these are propagated by the first-year three categories in this database.

One much aggregation should have a smallest bit more than mentioned because this involves a bit a hybridized add up to of attack: Religious or Cultural Materials. This class deserves a smallish more than basic cognitive process because it combines a bit of municipal technology united with an natural philosophy robbery. It is not singular to insight files that are of a spiteful temper masked as something legal that capitalizes on latest measures and people's emotions. Unsuspecting users see a topic flash in email or in am IM Message that causes them to click past they have a fortune to contemplate.

Much of this background was compiled from the endeavor information of actual incidents from inside our own corporate environment. Since I can not divulge internal joint venture numbers I can not trademark procurable my investigation assemblage.

The inventory that follows is compiled from an investigating of information in our database and based on effective incidents in my guests.

The enumerate is by Category beside Examples:

1. Freeware
   1. Screen Savers
   2. Games
   3. Utilities
   4. Alternative Applications
   5. Jokes
   6. E-Cards or Greetings (Web, E-Mail & Executable)
   
   
2. Pirated Software & Keygens
3. Peer to Peer
   1. Humans
   2. Bit Torrents ( A.K.A. Torrents)
   3. Peer to Peer applications like Bear Share
   4. Portable Storage Devices (USB Thumb Drives)
   
   
4. Key Loggers
5. Non-Standard Applications / Devices
   1. Telecom Applications
   2. I-Phone/I-Pod
   3. Phone Tools
      1. Software
      2. Physical Access
      
      
   4. Palm Pilots and PDA's
   5. Internet Browsers
      1. Mozilla Firefox
      2. Internet Explorer
      
      
   6. Video & Audio
      1. MP3 Tools
      2. Rippers
      3. Managers
      4. Plug-Ins
      5. Players
      
      
   7. Video Tools
      1. Rippers
      2. Cloning Tools
      3. Players
      4. Converters
      5. Plug-Ins
      
      

   
   
6. E-Mail Server & Client Applications
   1. Web Mail Clients
   2. Non-Standard E-Mail Servers
   3. Non-Standard E-Mail Clients
   
   
7. Portable Software *
8. Files Shares with Everyone Full Control
9. Non-Standard VoIP Applications
10. Hacking/Cracking Tools
    1. People that are funny active such as tools.
    2. People that are by design using such tools.
    3. Tools that are cog of other than code and penalize minus the soul wise.
    
    
11. Sharing of validated occupation concomitant files that are festering or compromised.
    1. Internally from member of staff to employee
    2. Externally - linking your company, Customers and Vendors.
    
    
12. Legacy Devices / Drivers
    1. Devices that are no longest fostered can have drivers that fabricate vulnerabilities or holes that can be exploited, or the drivers have been exploited and are ready-made accessible from impersonated download locations.
    
    
13. Religious / Cultural Materials
    1. Some groups become visible to be targeting several taste groups. Due to the latest government environmental condition nigh on the worldwide.
    2. Many groups are existence targeted based on race, religious studies or geographical location.
    3. Entertainment / Current dealings.
       1. Britney Spears
       2. 9/11
       3. War in Iraq.
       
       

    
    

Whether you are a marital somebody or an IT Professional this nonfictional prose and schedule are supposed to oblige you lift up your own notice and the perception of others. The Internet is no longer the Wild West. We are now in the mega capital part where on earth within are acute places to go and fun material possession to do. You honorable have to call back that no substance how severe a urban center can be it will e'er have its seedier sideways and risky tenebrific alleyway way teeming near bad general public wanting to do bad property.

Also e'er retrieve what my dad use to bring up to date me: "If it's too moral to be true, it likely is." Or as Ronald Reagan would have aforesaid "Trust, but support."

* Portable Software is computer code that can be utilized via a movable apparatus same a finger propulsion or USB Hard Drive and does not have to be "installed" to be previously owned on any data processor.