Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Online Gaming Not So Secure | Main | Employee Canned for Exposing Blank Passwords at TJX »

Online Bank Offers Software to Secure Transactions but What About Support?

Installing software is easy. Getting it to work correctly is hard. Keeping it working correctly is even harder. Neither of the last two facts are deterring ING, an online bank, from offering software to create a secure environment for online banking even on malware infected machines, according to the Security Fix. ING must be ready to take on the service desk headaches that come with client side support but I wonder why they didn't opt for a solution like Blue Coat's ProxyRA appliance instead.

Brian Krebs notes in the Security Fix:

What struck me most about this offering was that it's the first time in a long while that a U.S. bank has publicly raised the idea of installing software on customer systems as a means of combating fraud.

As if banks don't have enough to do to manage threats, now they are stepping into supporting unmanaged devices. I can imagine calls from irate customers blaming some data loss or software incompatibility on the ING software. Installing software on unmanaged devices is like touching the third rail. I'd rather take my chances with an appliance and scale up as needed.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/741

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net