To: Glenn D. Rudolph who wrote (42475 ) 4/7/1998 9:05:00 AM From: Jeff Jordan Respond to of 61433
Interesting article concerning newtwork security.zdnet.com rst Alert TUESDAY, APRIL 07, 1998 The Biggest Threat to Your Network's Security. (It Isn't What You Think) Jesse Berst, Editorial Director ZDNet AnchorDesk Have you ever looked at murder statistics? The media focuses on mysterious killers who murder strangers. Sure, it happens. But in reality, you are most likely to be killed by someone you know. The same thing holds true with network security. Everyone focuses on mysterious outside hackers. But in reality, your network is most likely to be compromised by people inside your organization. A network is a group of computers that are linked together. In a LAN (Local Area Network), the PCs are close together -- often in the same building. In a WAN (Wide Area Network), they are farther apart, often connected by phone lines. To prevent unauthorized access to private networks, companies typically set up firewalls where the internal network meets the (external) Internet. Fine and good. But a new report by enterprise network services company NetVersant Technologies reveals that firewalls don't protect you where you are most vulnerable. Because they don't shield you from the people inside your own organization. The two biggest inside problems are: Internal attacks. According to the Computer Security Institute/FBI and Ernst & Young, nearly 50% of all network attacks come from the inside. Often, from unhappy workers. Which explains why 76% of the IT executives surveyed by NetVersant said they were concerned about inside attacks from unhappy employees. Non-compliance. Who cares how good your systems are if employees ignore them? In the NetVersant survey, 82% reported spotty -- or no -- compliance with their company's network security policies. 85% say a properly-implemented firewall would still be at risk from a disgruntled employee. And 75% say the firewall is at risk from garden-variety employee incompetence. If you have ever been a victim of computer crime, use the TalkBack link below to send me a message about your experience. I'll post some of the best letters beneath this column. And join the discussion underway in our Jesse's Berst Alerts forum to pick up a few pointers from fellow AnchorDesk readers. Don't be a crime statistic. Review the information linked in the sidebar so you can understand where the real threats are. And take the right steps to protect your company's network.