Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Preventing Information Leaks | Main | Does Your IM Leak? Encrypt Instant Messages »

What Good is Technology if You Don't Use It?

There is a lot of discussion about a grad student putting up a Web site that creates fake airline boarding passes. The vulnerability has been known for a while, in fact Senator Schumer of New York outlined just how simple a procedure is required to doctor a boarding pass. This is a prime example of not needing a better technology, but a better process.

A fake boarding pass is readily detected when information on a boarding pass is compared with an airline’s database. Better training on social engineering can prevent a would-be attacker from getting a key piece of information or physical access to a device. Phishers and spammers will keep devising new ways to get around filters and anti-spam vendors will keep responding with new and better detection methods. We need to use the technologies that are available but we also need to think about how our security measures can be circumvented. Sometimes a simple change of procedure can reduce the risk of an attack – or some other guy ending up in your seat in first class.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/107

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net