Key security vocabulary explained

an article added by: Frank C. at 06032007


In: Categories » Internet and online » Online security » Key security vocabulary explained

VPNs: virtual private networks create a secure tunnel between two points, typically a corporate network central office and a remote branch office. The tunnel passes encrypted (scrambled) data over the public Internet, then decrypts it at the destination point. This protects data from hackers on its path over the Internet, and renders the data unreadable during its journey.

Denial of service: This is a hacker-based attack on a web server that prevents customers/visitors from gaining access to an organisation’s website. Usually launched by a worm virus (eg Code Red, Code Blue) that can replicate from computer to computer. There are also ‘distributed denial of service’ attacks, which simultaneously attack several servers at once.

Firewall: This is a system that provides both network access control and attack containment features to prevent and block unauthorised traffic entering the corporate network. A firewall checks each passing packet of data in respect of its starting point, destination, content, size etc.

Intrusion prevention: This detects network, application and hybrid attacks and provides alarms to network operators. It also has the ability to ‘drop’ the attack from the network to stop it from reaching its target.

Trojan Horse: This is an attack that is hidden within a seemingly legitimate attachment to an email received across the Internet. Once inside a PC it infects memory, processor and applications, then spreads to other network resources. In some cases it will establish contact with the hacker, enabling tunnels or embedded controls to infiltrate the corporate network.

Backdoor or U-turn attacks: These are methods of network attack aimed at small branch offices that have Internet access both locally and via the corporate VPN. Illegal entry is gained via the local link and, once behind the remote site’s VPN, the hacker can strike the corporate network via the VPN.

WLANs: Wireless local area networks are created using a broadcast medium. Wireless hackers are particularly dangerous as they can gain access to the network by broadcast proximity to the network (for example, in a car or on foot near the building where the WLAN is in operation).

Virus: A computer virus attacks by ‘piggy-backing’ on top of another program in order to be executed. Once it is running, it is then able to infect other programs or data files.

NetScreen Technologies Inc is a leading developer of integrated network security solutions that offer the security, performance and total cost of ownership required by enterprises and carriers. NetScreen’s innovative solutions provide key security technologies, such as virtual private networks, denial of service protection, and firewall and intrusion prevention, in a line of easy-to-manage security appliances and systems. NetScreen is publicly traded on the NASDAQ market under the symbol NSCN. For further information contact: Company Headquarters at 350 Oakmead Parkway, Sunnyvale, CA 94085, USA. Regional headquarters for Asia-Pacific and Europe are located in Hong Kong and Guildford, UK, respectively. More information on NetScreen’s products in Europe can be found at www.netscreen.com or by calling 08700 75 00 00.

Remote working Remote working can open up a company to new threats from hackers unless the right precautionary measures are put in place, writes Paul Drew from Tekdata. In today’s Internet-driven world the use of the teleworker is becoming more common. This is good for both workers and businesses as it reduces overheads and travelling time, increases productivity through flexible working and also allows companies to recruit the quality of staff they need even though they may not live near the companies’ offices. Over 80 per cent of companies now have staff who work from home on a regular or occasional basis, according to the latest research. A survey carried out by SonicWALL Inc shows that 83 per cent of companies now allow teleworking, with 43 per cent having staff who access the company’s network from home, usually via the Internet. Big businesses are more likely to encourage the practice than their smaller cousins. Home working is now prevalent in 98 per cent of large companies (with £20 million or more turnover) compared with 91 per cent of small-to-medium sized enterprises (with £5–20 million turnover) and 79 per cent of small businesses (with £1–5 million turnover).

Once the main method of connecting the remote worker to the corporate system was through point-to-point dial-up connections; but now, with technological advances and increasing Internet-driven business activities, remote workers can easily connect from anywhere in the world. Using VPNs (Virtual Private Networks) teleworkers are connecting to corporate networks and accessing day-to-day business-critical systems and information. This process has led to many domestic networks being created within remote workers’ homes, and increasingly these networks or laptops are being used by the whole family. Activities such as file swapping, instant messaging, online gaming and video conferencing can inadvertently open up back-door holes for hackers to hijack corporate VPNs. Directors, under new data protection laws, are now legally responsible for information held on corporate networks concerning their employees and customers. Various systems can create a ‘trusted zone’ of network security between the corporate office and the telecommuter, protecting your corporate network against malicious intrusions that occur when work computers share broadband Internet access with multiple-networked family computers. This trusted zone ensures that harmful intrusion cannot traverse the home network to the corporate network, and that in-home users cannot access the corporate network.

legal notice

Our website is not responsible for the information contained by this article. Web-articles is a free articles resource.
Suggestion: If you need fresh, daily updated content for your website, feel free to use our service. Click here for more information.

Useful tools and features

Link to this article from your page    Send this article to you or to a friend
If you like this article (tutorial), please link to it from your web page using the information above.

related articles

1. The demand for continuous information
Recent world events have demonstrated the serious disruption that can be caused by a break in information flow in a 24-hour, seven-days-a-week global economy, writes Rick Cudworth, Partner at KPMG. If there’s one thing that’s certain when it comes to developments in business technology, it’s that 24/7 system availability will continue to be at the top of the business agenda. Now more than ever, interaction between customer and company takes place through technological chann...

2. The threat from cybercrime
Hackers; e-theft; netspionage; domain scams; telecoms; credit cards. The Fraud Advisory Panel of the Cybercrime Working Group at the ICAEW reports on where companies are finding themselves vulnerable. Hackers Hackers divide into two main groups. The internal hacker and the external hacker. The hacker may work as an individual or in highly organised gangs, either of whom may attempt to gain access into a computer system in order to carry out a criminal activity. The h...

3. Recent attack trends
Attack tools are becoming easier to source, quicker to deploy and are evolving at a rate that allows them to bypass traditional security measures, writes Stuart Eaton from Centrinet. Trends Whilst the Internet has created a number of opportunities for companies to save costs and improve marketing, at the same time it has exposed companies to much greater risk to both their cost-base and brand. Below are some of the more common ways in which companies can suffer from the more dis...

4. Recognising the enemy within
To do their jobs efficiently people are placed in a position of trust, with access to sensitive data and systems. You cannot just rely on their goodwill, says Declan Grogan at Security Designers. Temporary, careless or rogue employees can cause real problems. Conspiracy or complacency? It should be recognised that to allow people to do their jobs efficiently we have to place them in a position of trust, with access to sensitive data and systems. Given the evidence,...

5. Cyberliabilities in the workplace
Richard Woudberg, legal counsel at Integralis, looks at the balance between freedom and control in the electronic workplace. The rise in electronic methods of communication such as email and the Internet have provided employees with a greater degree of flexibility and freedom. However, employers wish, and indeed are often compelled by legislation, to maintain control over their employees, and the means by which they can do so can be increasingly intrusive. The need to strike a balance between the concerns of ...

6. Data complacency
Is the proliferation of information fostering a dangerous shift in corporate mentality? Humphrey Browning, Head of Technical Consultancy at Nexor, looks at how networks can inadvertently lead to mismanaged data and undervalued information. According to a report by Jupiter Research,1 49.5 per cent of CIOs (chief information officers) considered the sensitivity of their company’s data as ‘low’. In a world where the threat of information security breaches is an everyday considerat...

7. Cybercrime and The marketing dimension
Information security can be both an enabler and a destroyer of value, writes Michael Harrison, Chairman of Harrison Smith Associates. What ‘marketing aspects’? Marketing surrounding the ‘e-world’ should be simple – everyone will utilise ‘e’, therefore turn your communications to directing prospects and clients to the appropriate website, and to your email address, and carry on. Why bother about marketing the methodology? Why not stick to marke...

8. Information Security Management System
The expectation: experience equation Whatever we do, we cannot claim to have ‘e-trust’ and ‘e-confidence’ unless we have genuinely got it. Remember that many so-called ‘hackers’ carry out attacks just to be able to say that they have got through a specific organisation’s defences. You may claim to be secure – they may well try you out! To have an Information Security (Assurance) Management System (ISMS or IAMS) in place and working properly will provide you with the...