BGConsortium.com - Newest Of All Information Centers

Scenario: You work in a corporate environment in which you are, at least partially, responsible for network security. You have implemented a firewall, virus and spyware protection, and your computers are all up to date with patches and security fixes. You sit there and think about the lovely job you have done to make sure that you will not be hacked.

You have done, what most people think, are the major steps towards a secure network. This is partially correct. What about the other factors?

Have you thought about a social engineering attack? What about the users who use your network on a daily basis? Are you prepared in dealing with attacks by these people?

Believe it or not, the weakest link in your security plan is the people who use your network. For the most part, users are uneducated on the procedures to identify and neutralize a social engineering attack. What’s going to stop a user from finding a CD or DVD in the lunch room and taking it to their workstation and opening the files? This disk could contain a spreadsheet or word processor document that has a malicious macro embedded in it. The next thing you know, your network is compromised.

This problem exists particularly in an environment where a help desk staff reset passwords over the phone. There is nothing to stop a person intent on breaking into your network from calling the help desk, pretending to be an employee, and asking to have a password reset. Most organizations use a system to generate usernames, so it is not very difficult to figure them out.
Read more…

Scenario: You work in a corporate environment in which you are, at least partially, responsible for network security. You have implemented a firewall, virus and spyware protection, and your computers are all up to date with patches and security fixes. You sit there and think about the lovely job you have done to make sure that you will not be hacked.

You have done, what most people think, are the major steps towards a secure network. This is partially correct. What about the other factors?

Have you thought about a social engineering attack? What about the users who use your network on a daily basis? Are you prepared in dealing with attacks by these people?

Believe it or not, the weakest link in your security plan is the people who use your network. For the most part, users are uneducated on the procedures to identify and neutralize a social engineering attack. What’s going to stop a user from finding a CD or DVD in the lunch room and taking it to their workstation and opening the files? This disk could contain a spreadsheet or word processor document that has a malicious macro embedded in it. The next thing you know, your network is compromised.
Read more…

I was reading The Big Moo: Stop Trying To Be Perfect and Start Being Remarkable this morning, and I’d recommend a copy of this to anyone who wants to improve their career and their future. And that’s all of us, right?

There was one particular line that really stood out to me: Betting on change is always the safest bet available. That describes life perfectly, but it also describes a career in Information Technology perfectly as well. There is no field in the world that has the constant and never-ending changes that IT does. And every single one of us can look at this as a massive opportunity for personal and professional growth.

Is that how you’re looking at it? I remember when I passed my first certification exam, the Novell CAN, back in 1997. Man, I thought I knew it all then! But I quickly learned that you’ve got to keep learning in IT. I also learned that if you’re willing to put in the work and make the sacrifices, there’s no other field with the limitless potential for growth and excellence.

Like everyone else, my career has had its ups and downs, but I always kept learning and growing. Today, I’ve got my dream job, working with studI was reading The Big Moo: Stop Trying To Be Perfect and Start Being Remarkable this morning, and I’d recommend a copy of this to anyone who wants to improve their career and their future. And that’s all of us, right?

There was one particular line that really stood out to me: Betting on change is always the safest bet available. That describes life perfectly, but it also describes a career in Information Technology perfectly as well. There is no field in the world that has the constant and never-ending changes that IT does. And every single one of us can look at this as a massive opportunity for personal and professional growth.
Read more…

I recently found myself in need of a new laptop. With a tight budget and moderate needs, I knew it wasn’t going to be easy to find a product that would do what I wanted and still be in my price range.

As a Network Technician and a Web Designer, I needed a machine that would have enough storage to store all my software, projects for my clients, and still be able to handle an occasional temporary operating system backup from a client’s machine. The qualifying candidate also had to have a decent amount of RAM and a reasonably fast processor to keep up with the demands of multitasking and using Studio MX ‘04 on a daily basis.
Read more…