Buzzroos Network

Posts Tagged ‘security’

Encryption and cryptographic software has been used in many different ways to make systems more secure. This article discusses only a few ways that such software can make your system more secure, including:

1) Encrypting your email

2) Encrypting your files

To programs are mentioned that will help encrypt information. There are many more programs out there that will help, but these programs are good and a good place to start as any. They have the added benefit of both being free with source code available.

Will encryption stop people from accessing my information?

Encryption simply makes it harder for people to gain access to important information, like passwords or sensitive information in a file. The first thing you should know about encryption is that the algorithm that is used to encrypt can be simple or more complex and that affects how securely what you have encrypted is protected. Encryption systems have been broken when the method of encryption is understood by hackers and is easy to break.

Why bother to encrypt my email?

It should be noted that email is far less secure than paper mail for two very good reasons: first, electronic data can be accessed easily over an Internet and secondly, electronic data is really simple to copy. There is a very good chance that someone has snooped around in your email despite your best intentions to stop it.

How do I go about encrypting my email?

There are many programs out there that can help you encrypt your email. A very popular one is PGP (Pretty Good Privacy) or its Gnu offshoot GPG.

PGP (http://www.pgpi.org/) self-describes itself this way: This “is a program that gives your electronic mail something that it otherwise doesn’t have: Privacy. It does this by encrypting your mail so that nobody but the intended person can read it. When encrypted, the message looks like a meaningless jumble of random characters. PGP has proven itself quite capable of resisting even the most sophisticated forms of analysis aimed at reading the encrypted text.”

Why bother to encrypt my files?

The answer to this boils down to what you store on your computer. If you have financial data with important information like social security numbers, email addresses, account numbers and passwords, then you open yourself up to losing very valuable information. Most corporate Internet security employees will attest to the widespread theft of very valuable information. As long as you are connected to the Internet you are vulnerable.

How do I go about encrypting my files?

AxCrypt File Encryption Software (http://axcrypt.sourceforge.net/) Self-described as “Free Personal Privacy and Security for Windows 98/ME/NT/2K/XP with AES-128 File Encryption, Compression and transparent Decrypt and Open in the original application.”

Like Robots? Growing largely in the US is the robotic toys market. Today there is a growing popularity of owning and using robots whether it’s a toy for our kids, a security system or a lawnmower, adults and kids alike share in using them. Many companies are producing robotic toys for families to enjoy and use.

Kids all over the world are entertained for hours cause they are like a real-life video game! These robotic toys and machines receive and respond commands, and some have the capability to communicate with you. Robotics are becoming more advanced with more movable parts, programming, and lifelike attributes and movements. These robotic companies have a goal, to make the owners life easier, more joyful, and to become a common place in every household.

Another trend in robotics is robotic pets. These are becoming increasingly more popular for parents to get there kids cause they require no feeding or clean up.

As we said, it can keep a child entertained for hours! Robot pets are even widely purchased by adults for entertainment, even companionship. Maybe you have a family member or two in the house who are allergic to pets. If that’s the case, they can purchase a robotic specie of their choice which can interact and mimic the real animal; giving the owner joy and entertainment.

Some Robotic units have capabilities such as cameras, all terrain mobility, and wifi connection. This is where having one can help watch over your loved ones. Maybe your at work, and you want to check on your mate and kids. Having one of the many mobile robots available can accomplish this. Set-up for these are usually pretty simple for the normal householder. The choices ARE becoming more widespread, and the future of robotic toys is only going to place more inhabitants among us as we find more uses for them everyday.

Want a robot? Well, if not, then one day soon you will cause you’ll notice how your neighbors lawnmower is driving it’s self!

Every organization, large or small, generates records that must be kept available for various periods of time. A lot of these records are being saved as electronic data. There are several data storage options available. The decision about what type of storage to use depends on several factors such as: amount of data, format of the data, availability, security and content. Some data must be held in extra secure storage while other information is not quite so sensitive and can be stored with normal security precautions.

Some of the available storage options are: on site disc storage, networked data storage, offsite storage, virtual backups, and more. This article will discuss some of the advantages and disadvantages of some of the options. There are some overlaps and some very distinct differences among the data storage options.

The simplest information saving strategy is to leave the information on the desktop machine or server where it resides as it is used. This costs nothing because the data is on the machine already. The security is as secure as the machine itself is. If the server or PC is in a locked room with very limited access it is somewhat secure. The problem is the single point of failure. If the machine or the drive fails the data will be lost or at best inaccessible. A home user might get away with this but it is not a real option for any business data.

The next information saving strategy is the regular backup onto removable media with storage on site. This means data is copied onto tape or removable disk and stored in a drawer or safe in a nearby location. This protects against single point failures like a drive or server failure and the data can be readily restored from backup. The only cost is the drive hardware and the storage media. Security is as good as the security of the desk drawer or safe where the data is stored.

The next more secure data storage is the offsite physical storage. This method has been used for years for paper-based documents and other records and is equally effective for data media. Data is transferred to removable media and the media is placed in storage in an offsite secure location. Recovering data can require a few days and security is as good as the physical security provided by the storage site.

Recent developments in technology have opened up the virtual storage possibilities (aka the cloud). Cloud-based storage options provide quick and easy storage with very quick data recovery/retrieval. Digital security measures such as data encryption enhance the security of the data. Additional security is provided by limiting the access to PCs and servers that can be used to access the storage. Since the data storage is priced by the Gigabyte the cost of this option can be reduced by compressing the files but compression can make retrieval slower.

Making a decision about which data storage option to use requires a certain amount of research and shopping around. It is vital that the user understand the limitations that each storage option has. Data that needs to be accessed on a regular basis probably should not be stored in secure offsite storage. Costs vary widely among the options and among providers of each option. The security required by the type of data being stored must be understood.

Employee information and personal medical data needs to be highly secure. Security breaches can result in fines and lawsuits that severely impact profits. Simple invoices and purchasing records may require less security. Product information may need to be protected against industrial espionage. Source codes for intellectual property will require strong data security measures.

The negative mindset against the security profession can only be reversed if these people will see that the security personnel deserve to be respected and they are doing their jobs according to standards.

Security personnel, to be able to do their jobs according to standards and gain the respect of everyone they come in contact with, must undergo actual security training and catch up on information needed to improve themselves and help them do their jobs better, by devoting time to read materials on the subject which are disseminated through print or electronic means.

Security Industry

Man’s instinct for survival was eminent even during pre-historic times such that security for one’s self, his family and tribe was given a high priority.  He protected himself from ferocious beasts by making weapons out of stone materials, by learning how to build and use fire for his protection; and from the harsh environment during his time by using caves and tree houses as shelter.

During the middle ages, fire was a primary security concern such that the praetorian guard or vigiles’ main duty was to fight fire.

In the Philippines, our earliest record of the demand for and utilization of security services may be traced back from the time of the datu or lakan wherein protection was provided by the aliping namamahay (slave).

Recent global incidents of terrorism, computer viruses, kidnappings, hostage taking, shooting rampage, bombing of places where there are many people such as malls, schools, trains, embassies, offices, etc. resulting to large scale property damages, losses, injuries and death have greatly impacted the way people look at the security industry, nowadays.

As crimes against person and property increase the security industry experiences a tremendous growth brought about by the demand for protective services especially, security personnel.  Although, there is also a boom in security related software, hardware and gadgets, some companies feel that these are not enough to provide the type of protection that a live guard can, thus the increased demand for security personnel.

In the Philippines, the high demand brought with it significant changes such as:

1.  Higher level of education wherein the qualification for Security Officer, Private Detective and Security Consultant preferred graduates of criminology as educational entry requirements.

2.  Laws governing the security industry and implementing rules and regulations were amended.  2003 Implementing Rules and Regulations of RA 5487, as amended “ An Act Governing the Organization and Management of Private Security Agencies, Company Guard Forces and Government Security Services wherein new rules and regulations were introduced in addition to the previously promulgated rules, all of which were designed to professionalize the security industry. Primarily defining and setting forth the rules of utilization of security personnel regarding post service, conduction service, armored service, investigation and detective service, electronic security service and other security services.

3.  A new set of Training Regulations for National Certificate Level I and Level II for Security Services was designed by TESDA and the Security Industry Sector

Security Training

The private security training system in the Philippines was designed to develop, new or previously gained, skills and knowledge, augment or expand current skills and knowledge to address identified security needs.

Private security training schools can conduct Pre-licensing, periodic and non-periodic training such as In-service and Security Supervisory Courses in compliance with national training regulations.  The innovation in the training system for private security personnel was also expanded to include specialization courses such as: Intelligence and Investigator Training Course, Basic Crises Management Course, Personal/VIPs Security Training Course, Armored Car Crew Training, Bomb Disposal Training Course, Bank Security Training Course, and Basic Aviation Security Specialist Course, and others.

This is primarily due to the promulgation of the Training Regulations for Security Services NC I and NC II as a basis for :

Registration and Delivery of Training Program
Development of Curriculum and Assessment Instrument; and
Establishment of Certification Arrangement

The trainee who completes a security training course (NC1 or NC2) given by an accredited private security training school will be well prepared for an assessment of his competencies by TESDA for the issuance of a National Certificate (NC) or a Certificate of Competency (COC). This instrument is an internationally recognized standard of competency and being sanctioned by the International Labor Organization develops global competitiveness and improves professionalism.

Utilizing any drive except for a secure USB drive is really asking for trouble these days. The needed specifications for drives if security breaches are to be avoided is just too advanced. A secure USB with the right specifications can keep confidential data of all types secure and safe from thieves and hackers alike. Using any other kind of drive to store or transfer data is simply inviting disaster. The secure USB has the needed specifications to provide a high level of security and protect company files and data. The drives thereby eliminate virtually all risk of unauthorized access and exploitation of data.

The Capabilities of a Secure USB

A secure USB needs to be independent of the operating system where encryption keys are hardware and not software based. A secure USB that is independent greatly reduces the chances of a successful attack. A flash drive which has encryption that is hardware based is proving to be the most secure. SanDisk Enterprise is producing a secure USB with the best known encryption algorithm. Flash drives produced use encryption a 256-bit AES algorithm encryption with strong authenticating passwords. If the drive is stolen drives are locked down after a number of failed passwords attempts denying access to data.

A secure USB needs mandatory access and control of all transferred files through partitioned files.  Anti-malware software for added security against data threats as well. A secure USB is managed through a central control program where drives can be managed, monitored or terminated from a central server if they become subject of a threat or attack. Read, write, transfer rates and encryption specifications are important. A company called SanDisk Enterprise offers an utra-fast and a secure USB with transfer rates of 20MB for writing and 24MB for reading data and features anti-malware also.

The Benefits of Utilizing a Secure USB

Using a secure USB to increase the level of security for the protection of data is an investment in your company’s future. The cost of restoring a security breach can huge once the system has been breached or corrupted. Enhancing security capabilities protects future revenues of the company. Data thefts and attempts to breach security measures continue to increase but the secure USB plays an important role in thwarting these attacks. By providing strong security and control a secure USB with encryption prevents thieves from reading data even if they manage to intercept it in an attempt to access it.

Because a secure USB has the capability to store a large amount of sensitive information it is important that all illegal access be eliminated. Stolen data can force a company to spend a great deal of money to restore their security and trust to an effective level. If an attempt is made to corrupt data a secure USB can detect, quarantine and stop viruses from infecting the central host system. This is performed through the use of anti-malware software which prevents the virus from infecting the whole system. The SanDisk Enterprise secure USB features both strong authentication and anti-virus software.