security

The Forgotten Security Hole: USB

By Bill Pfleging

USB Security

Some CIOs have started super-gluing shut the USB ports of employees. USB "thumb" drives can be convenient but they are also a source of trouble -- both on the incoming side and the outgoing side.

The last thing Australian phone company AusCERT 2008 this past May was to be a source of malware. Attendees at that session were given a USB memory device loaded with promotional information – and, unknown to them, an auto-run, self-installing Trojan horse.

How Much Website Uptime Is Too Much?
One hundred percent uptime may sound like a good thing, but it may mean a small company is paying too much for redundancies that guarantee it will never go down. Uptime may be costing you more than it’s worth.
Is Security Software Choking Your System?
Take anti-virus, anti-spyware, anti-spam, and more security applications off your office computers? Security companies are now offering unified threat management to help lighten the load on your machines.
World of Web Browsers: Are Alternatives Safer?
Some alternative Web browsers -- such as Apple's Safari, highly adaptable Opera, and the wildly popular Mozilla Firefox -- have more desirable features than Microsoft Internet Explorer. But are they more secure?
Instituting Security Metrics
Tired of running your IT operation based on FUD (fear, uncertainty and doubt)? Instituting security metrics can help provide a more logical approach to security.
Avoid Security Pitfalls with Subcontractors
Increased reliance on outsourcing IT and data services has left businesses vulnerable if the subcontractor suffers a data breach. Ground rules can keep subcontractors to company standards -- and state and federal laws.

Slouching? Measure Your Security Posture
There is an optimal "security posture" for a business -- the approach your business takes to security, from planning to implementation, from hardware to network security and more. Is your business slacking off on security?
Patch Magic: When to Download a Security Fix
Is it in a business’ best interests to implement every security patch an operating system or software manufacturer sends out? And should you deploy patches manually or via an automated patch management system? Here’s how to decide.
Outsourcing Security: Are You Ready?
Outsourcing is an attractive option for businesses that would rather not deal with a 3 a.m. DNS attack or a hacker defacing the website during non-business hours. But what are the benefits and costs?
Protecting Data: The Old Fashioned Way
Online backup isn’t for every business. And tape is a backup media of the past. Here are some options in traditional -- or file-based -- backup programs.
Minimize Security Threats from IM
Whether your business condones it or not, employees are probably going to use instant messaging products. IMing can be a productivity saver, but first address the potential security risks.