Archive

Archive for July, 2007

Network Security: The Risks of Having an Unsecured Network

July 25th, 2007

One of the reasons why it is necessary to make sure that your network is fully secured is to ensure that it cannot be hacked or any of your information passed on to third parties; this is primarily because extremely important information will invariably be passed from one computer to another computer, within the network during a working day. If the network is not secure at the logical as well as the physical level, one is definitely not going to know that important information is being funneled through channels up on the Internet to possibly your rivals as well as your competition.

That is the reason a good network security company is going to make sure that every single security tool and other necessary features, such as firewalls, are in place. Fundamentally, the primary reason for doing all of this is quite simply to protect your hardware as well as the data to the best of your ability. The way in which this is carried out, including the methods and tools is all very much dependent on the network that you have and what your business requirements are.

An unsecured network on which internal management as well as external penetration and hacking tests have not been done are definitely a security hazard for any company out there. That is the reason why a company’s key assets need to be protected in the strictest manner possible.

One of the most biggest risks about having an unsecured network is that the moment you go online on an http:// (including intranet) connection, there is a chance of every sort of vital information being transferred from your computer. In the same manner important information can be downloaded straight from your different hard drives, just because some other computer has managed to bypass your security measures. That is one of the more risky aspects of working on a computer on an unsecured network.

If your company has a number of computers that are connected to each other through a faulty and unsecured network, it isn’t every single business transaction between them easily accessed by anybody connected to that is at risk from hacking. Private information including credit card information and any other data, which you may have stored in your computer system is also obtainable to unscrupulous information thieves and hackers out there if given the opportunity. That is the reason why it is necessary to look for a company which can give you exceptional security measures including extremely efficient firewalls so that there is absolutely no question of any sort of information being transferred to computers outside the network.

If you find yourself upon an unsecured network, you should be particularly wary when exchanging any personal information and sending anything online. In the same manner, it is always a good strategy to make sure that you disconnect the link when you are not using it, especially when you do not know whether the network is secure or not. This goes a long way in keeping your computer and network safe from unwanted access from external parties.

Derek Rogers is a freelance writer who writes for a number of UK businesses. For information on Network Security, he recommends Network 24.

Computer Security , , , ,

my first symfony plugin

July 19th, 2007

Hi,

its been a year since i started using the symfony framework  in all my projects.and i have seen a lot of contribution to symfony from all over the developer community. and this support from other developers made me to write my own plugin. i have just released sfContactGrabberPlugin. This plugin will be used to grab the address book from the yahoo/gmail / myspace. I am going to add MSN , Orkut and Rediff support in the plugin.

For more information on installing and using the plugin check this

–Asif–

symfony

Network Security Solutions: Obstacles in IT transformation‏

July 17th, 2007

IT synonyms transformation and it is imperative that enterprises treat transformation as a continuous process. But, a significant obstacle to all of this transformation and differentiation is the absence of sufficiently capable network security solutions.

Growth in Network Traffic and Threats

One of the major changes impacting the effectiveness of network security solutions is the growing volume and sophistication of network traffic, which subsequently reduces operational efficiency. The rising speed of business is practically dictating an increased pace of development and deployment of new applications to support both back office and customer-facing processes.

In past, we were concerned about file level viruses and worms that have been overshadowed by an array of new contenders, which include spyware, spear phishing, key logging Trojans, root kits and targeted attacks. Even more troubling is the trend of threats migrating up the stack to take advantage of much harder to protect application-layer weaknesses.


Network Security Infrastructure

The challenges outlined reveal the minimum set of requirements for an appropriate network security solution for an enterprise’s most rigorous use cases. Specifically, a solution must fully address the following set of essential criteria.

Security: It must provide protection for not only at the network layer, but at the application layer and for individual elements of data as well. Firewall technology is simply not sufficient.

Scalability:
System capacity must be readily scalable from relatively modest traffic rates of a few Gbps to an aggregate throughput of greater than 100 Gbps.

Latency: Solutions must be architect to minimize the amount they introduce and should also incorporate capabilities to prioritize the processing of designated, time-sensitive traffic streams.

Unified management: Administration of the solution’s various capabilities should not require the use of multiple management tools or consoles.

Reliability, adaptability and compatibility:
The solution must fulfill the expectations and supports for a wide range of networking technologies such as NAT, address assignment, VLANs, and security zones.


Cost effectiveness:
It should be designed to reduce infrastructure complexity and total cost of ownership relative to available alternatives.

Conventional Approaches

At present, various types of network security products used by most enterprises address the requirements identified above to some extent, but they typically have significant limitations as well.

Best-of-breed appliances: Here, security and other objectives can generally be achieved, but not without substantial cost.

Blade systems: As such, these systems deliver a measure of consolidation and reduced complexity but, they fail to address the need for lower latency.

Unified threat management (UTM) appliances:
Numerous units will be needed to support many use cases, leading to increment in cost and complexity. Having a fixed form factor also limits the adaptability of such products.


Next-Generation Architecture

Now the enterprises requires a network security solution that architected to maximize attainment of the requirements, which are based on a combination of the traditional chassis and UTM approaches that would certainly be a logical foundation from which to build. Indeed, a very attractive option would be a chassis-based design that features interface flexibility, ideally in the form of modular cards/blades, a high speed, non-blocking switching fabric and redundant hardware components and support for high availability configurations.


The Benefits of a Next-Generation Network Security Solution

•    Enhances responsiveness and competitiveness
•    Lowers IT cost of ownership
•    Facilitates current and future growth
•    Reduces risk
•    Helps achieve compliance

Conclusion

The bottom line is that a next-generation network security solution enables enterprise IT not only to support but accelerate the transformation, innovation and differentiation required to sustain growth of the business while still containing costs. New applications and the infrastructure that supports them can easily be scaled without the usual delays and capital expenditures required for new hardware installations.

http://www.itvoir.com/portal/

http://www.itvoir.com/portal/boxx/knowledgebase.asp?iid=1607&Cat=23

Computer Security , , , ,

Networking Security

July 9th, 2007

Networking Security

Networking Security Threats

We as individuals interact with networks in our daily activities whether in the office, at home, or when we perform monetary transactions, use our mobile phones to make calls or use transport systems to get to work. Today, telecommunication and utility companies use networks to track phone, electricity or water usage and bill for it. Government agencies and organisations depend heavily on networks to communicate with their customers in areas such as credit or debit card transactions and billings. Many of our basic ways of life would be less convenient and many activities would be unfeasible without networks. Not astonishingly, network systems are criminals and intruders targets of choice, because of their potential vulnerabilities.

What makes a network vulnerable?

Connecting computer systems together is incredibly risky due to potential system misconfiguration, poor security policies and software flaws. Criminals can gain unauthorised access to remote networks. Intruders can capture transmissions between network nodes. Furthermore, linking networks enables organisations and individuals, including criminals, to communicate in ways that were not feasible before, resulting in a new set of vulnerabilities. Misuse of newly discovered vulnerabilities by intruders often catches us unaware. There is a need to keep information systems and the networks which carry the associated information or data secure.  There are many names for these, from networking security to information assurance.  The overriding set of principles are those of C I A (Confidentiality, Integrity, Availability), which are considered by many to be the tenets or principles of computer security. Digital assets include the entire network infrastructure, system application programs including data.

To read the second half of this article, please visit out networking security articles at HoneyJet.co.uk.

Mr Kenny Awuson-David earned his MSc degree in Forensic Computing at Coventry University. He also spent his entire career working within the IT and Network security sector. He researches and implements security solutions for Honeyjet.co.uk and its customers. For more about Kenny Awuson-David visit HoneyJet.co.uk

Computer Security ,

WiFi and Network Security

July 1st, 2007

Attacks on your network will be happening continuously on a 24/7/365 basis – attacks cause a range of issues from simple nuisance issues through to slowing your network performance and functionality and all the way through to causing your network and even worse, your data, to be lost or corrupted.

Attacks on your network are not just through email containing malicious code and attachments being sent to staff, or by simple web browsing and visiting sites which cause malware, viruses and Trojans to be downloaded – your network is exposed at any point where users (both authorized and non-authorized) can gain access to the network or wherever the network is connected to the outside world and particularly at the web gateway.

Security issues are very real and the losses which may be caused by attacks come with a huge financial price tag. The damage is not just to your bottom line but also to your assets, and particularly your business reputation. How many customers will be happy to learn that because your network security was breached, their private banking and personal information has been stolen or lost? What do you think a business regulator is going to make of your inability to produce financial records when they ask for them? How about an inability to produce email correspondence if you are engaged in a legal dispute?

Wireless connectivity is increasing and becoming an industry standard for accessing networks and the internet as well as being able to work remotely over the web. This means that there is a never ending variety of opportunities to gain access to the network by breaking in through the wireless gateway or by taking control of a remotely-linked machine.

One solution is to strengthen application security. Application security deals with the software programs which your staff are using and security solutions need to be put in place in order to ensure that hardware they are using cannot be compromised by non-authorized parties and also, that when they are running a program it only performs authorized tasks. For instance, an employee loses a laptop through theft – the laptop must not then be allowed to access the network remotely which can be achieved by using machine access codes, strong password policies to use an application and to access the network.

Another solution is to ensure that WiFi security is strengthened. Try this yourself, in your neighborhood, whether at work or at home, ask your computer to show you existing wireless networks (if you’re running Windows you can usually see an icon in your bottom taskbar on the right hand side). If there are wireless networks in the area, it will show you whether they are secured or unsecured. If you see an unsecured network, which is likely, you will be able to hop onto the internet using that connection and wireless router. Effectively this is stealing someone’s bandwidth but more importantly, it is allowing a third-party to come closer to gaining access to the network core, your data and your hardware.

Lawrence Reaves is a strong believer in Richmond IT services such as Richmond enterprise storage and Richmond network security. For these services, Lawrence recommends PLANIT Technology Group, which can be found online at: PLANITTech.com.

Computer Security , ,

Single session for all sub domains

July 1st, 2007

Hi,

When you are having sub domain in your site by default the php will create a session for each of the sub domain for a user. you can not access the session $value1 of subdomain1 in the subdomain2 session. because the sessions are different for each sub domain for the same user. To make only one session for all the sub domain you need to set the a cookie with a .domain.com value for the domain parameter.

<?php
setcookie("TestCookie", $value, time()+3600, "/~tmp/", ".youdomain.com");
?>

Symfony Code:

in your application /config/factories.yml file add the following lines


storage:
class: sfSessionStorage
param:
session_name: symfony
session_cookie_domain: .yourdomain.com

now the user will be having only one session for all the sub domains.

–Asif–

symfony

Powered by Yahoo! Answers