The insecurity paradox
more >>
In this third and final part of our article series about risk factors, we will examine Human attack factors and Physical factors.
The previous article discussed different procedures and systems that could be invoked in order to mitigate risk. In subsequent parts we will examine areas at risk, starting with Electronic factors.
The aim of this type of initial risk analysis is to identify potentially vulnerable points that may be exploited if they are not sufficiently secured.
The ease involved in creating QR codes that links to web pages implies that this will be a popular way to facilitate the propagation of malware for mobile devices.
The target should be the illegal act itself, rather than the communication mediums that may be used in planning undesired activities.
Computer systems are becoming increasingly sophisticated and complex with components that are individually computerized. This increases the attack surface for cybercriminals, and represents a challenge for users and the security industry.
The steps that private users and organizations can take to protect themselves, are quite similar in character to protection of traditional computers.
Whenever malware authors find new vehicles to spread their malware, the probability for success increases immensely.
Dumpster diving is known as examining trash to find interesting items that have been discarded. This security article's title refers to examining digital trash, which for certain purposes may turn out to be useful.
A little more than one week ago a new extension to the Firefox web browser was published. And it got attention for sure!
The term Man-in-the-middle in a security context refers to an attack where someone/-thing is inserted between two endpoints and intercepts the communication between those. The intent is usually to obtain information and use this for illegitimate purposes. Recently the term Man-in-the-mobile, abbreviated as Mitmo, emerged.
In later years dangerous malicious software for mobile phones and other handheld devices has been predicted and expected by several analysts. Norman, however has traditionally been among those more reluctant in predicting that the explosion of if malicious software for mobile devices is imminent. In retrospective it seems safe to say that our view has proven correct (so far).
Indeed, summer is associated with long, lazy, relaxing days in the sun. Nothing to worry about in the world. Unfortunately everyone does not take their vacation at the same time as you. Cyber crime does not stop during summer - in fact cyber criminals have their heyday during this season.
We should have been expecting it - some did. Late May this year a researcher in the U.K. claims to be the first person in the world infected by a computer virus.
Using wireless networks for accessing the Internet has become increasingly popular. These days you can access the Internet from virtually anywhere by connecting to a wireless network.
We have now looked into our crystal ball and believe that we see new types of systems, which in the near future will rapidly climb on attackers' ladder of priorities.
Most organizations have been experiencing an explosion in the number and types of devices that are in use in their networks. Gone are the days when traditional desktop computers, servers and printers, hard-wired together, were the available hardware in the network.
In our regular security articles, we have several times pointed out that security vulnerabilities and exploits are not restricted to "traditional" computers. We have predicted that several of the devices that our daily lives are filled with, may be exploited in the (near) future.
A new type of malicious software has recently been getting some media attention. The most interesting part of this is the fact that the malware's targets are not traditional computers. Rather does this malware attack different types of devices, namely routers and modems.
So far there has been no really dangerous malicious software targeting mobile phones. The New Year 2009 started with a new, interesting threat to mobile phones, which may change this picture.
The increasing use of USB sticks and their storage capacity constitute major security issues. Problems that were dominant with floppy disks resurface.
Imagine a person with malicious intent sitting in a cafe drinking her cappuccino, pretending to surf the Internet; while what she actually does is harvesting user names and passwords from her fellow guests. A no-sense scenario, or an easy-to-set-up scheme? Unfortunately the latter.
Useful and effective, but a great threat to security. Hackers can easily take advantage of this new world of connectable devices.
The Norman article from last year Big Brother is HEARING you ends with: "For now, happy VoIP, but... Be careful, you never know who will be listening in!"
Summer, sun and sweet sins are something that most people associate with happiness and innocent fun. But the thieves do not go on vacation! And there are plenty of sinners under the sun.
Holiday for you does not necessarily mean holiday for everybody. For hackers, virus authors and computer thieves the summer can be a golden opportunity if you do not have the proper protection. Many people are working wireless in the summertime, taking their laptops out in the open, enjoying the sun while working. Thoughts on safety, computer viruses and industrial espionage are not the first things that come to their minds.
Wireless networks (WLAN) are getting more and more popular among both private users and larger corporations. Not everybody is aware of the potential dangers that can happen if one does not make the necessary security steps.
The first worm that spreads through handheld devices, like mobile phones, is observed. This is a "proof of concept" program without malicious code.
Security Information Week 19, 1999 One normal way to connect to the Internet from home is through a dial-up connection. The Internet Service Provider (ISP) may ...