Most people consider themselves prudent when it comes to workplace activities, but actions speak louder than words—especially when it comes to computer security.
A large gap exists between what employees say about computer security and how they practice it at work, according to the Information Systems Audit and Control Association, which polled 301 white-collar workers at companies of at least 100 employees.
For example, 15 percent of workers had shared files over a peer-to-peer network, which “is opening a big door at a large corporation,” says Kent Anderson, a consultant who serves on ISACA’s Information Security Management Committee. “Most of these file-sharing programs by default scan available files and serve those out to anybody who wants them.”
Eleven percent of workers had e-mailed confidential documents to the wrong person—yet only 60 percent considered the behavior risky. And 35 percent had knowingly violated a corporate IT policy.
“They think, even if I make a mistake, nothing bad is going to happen,” Anderson says.
One reason for the risky behaviors may be that employees tend to take workplace IT security for granted. More than 90 percent told ISACA they considered their offices secure. While they worry about the security of their home machines, they feel somebody else has taken care of security on their work computers, Anderson says.
Another reason may be that employees don’t understand the risks they’re taking with what may seem routine tasks and use. Anderson says corporate IT departments tend to write overly long or technical IT policies, then stick those policies on a shelf and leave them unenforced.
Security policies must be simple, he says, and employees must be able to follow them and still do their jobs.
ISACA recommends corporate IT departments make security training routine. They should train new hires, update training frequently, and let employees know when there are specific threats.
ISACA’s recommendations reflect the results of a recent Computer Technology Industry Association (CompTIA) survey that found 68 percent of businesses have no security training program, even though most are seeing an increasing number of security threats and incidents.
This is the first time ISACA has surveyed security practices at work, and Anderson wants to follow up on the results. He’s especially interested in how and why people knowingly violate corporate IT policies.
Checking personal e-mail at work may not seem like a problem, he says, but when you consider that 49 percent of workers clicked on a URL in an external e-mail and one-third downloaded files or software from friends, the risks grow quickly.
Read the rest of this entry »
Posted in General, Security | 1 Comment »
Bill Gates was wildly optimistic when he said in 2004 that the problem of spam would be “solved” by 2006. The volume of junk e-mail transmitted worldwide is still enormous. But a remarkable trend is underfoot, according to Brad Taylor, a staff software engineer at Google: The number of spam attempts — that is, the number of junk messages sent out by spammers — is flat, and may even be declining for the first time in years.
Google won’t disclose numbers, but the company says that spam attempts, as a percentage of e-mail that’s transmitted through its Gmail system, have waned over the last year. That could indicate that some spammers have gotten discouraged and have stopped trying to get through Google’s spam filters.
Other experts disagree with Google, pointing out that overall spam attempts continue to rise. By most estimates, tens of billions of spam messages are sent daily. Yet for most users, the amount of spam arriving in their inboxes has remained relatively flat, thanks to improved filtering.
Brad Taylor is on the front lines of the war on spam. He has served as the chief watchdog of Google’s spam filter since 2004, when Gmail first launched. His history with spam goes back much further, though: He’s been fascinated with it since 1994, when he received his first spam e-mail at a work account. Before he joined Google, he worked at an anti-spam startup.
Taylor denies he’s obsessed with junk mail, but his actions speak otherwise: For his own amusement, he Googles the gobbledygook at the bottom of spam messages to see where the text comes from. (Some are from Harry Potter books, he says. He also found one that was an English translation of a Russian science-fiction novel).
“It’s fun,” he says of catching spammers. “Sometimes I think, ‘Oh, wow, that guy’s really clever.’”
The chase may be exciting, but Taylor’s real dream is to return e-mail to the “pristine experience it used to be.”
Chenxi Wang, an analyst at Forrester Research, scoffs at the idea that spam attempts could be on the decline.
“I’m seeing that the overall trend is up,” Wang says. “We’re not seeing a drastic increase, though. And we’re also seeing an increase of targeted spam instead of blanket spam that hits everybody in a large population. Today, for instance, you see spam messages on saving (on) prescription drugs targeted to seniors.”
For its part, Yahoo, too, says the overall amount of spam transmitted is on the rise, but the percentage of spam that reaches its users’ inboxes is down. (Yahoo would not disclose specific numbers.)
Regardless of the overall spam attempts, David Daniels, vice president of Jupiter Research, predicts the number of spam messages that actually reach a typical inbox will remain roughly flat over the next three years. And for most people, that’s what really matters.
“We’re forecasting that the number of spam messages that annually reach the average inbox will hit 4,351 in 2007. For 2010, we think that number will essentially be flat at 4,403. The growth will be very, very small,” Daniels says.
There are a couple of reasons for the lack of growth in spam deliveries. For one, e-mail providers like Google, Yahoo, AOL and Microsoft’s Hotmail use sophisticated filtering algorithms that are constantly updated based on spam reports from individual users. Google says it can delete all instances of a single spam message across the Gmail network in seconds.
New anti-spam technologies are also always under development, and there are already countless anti-spam services and technologies available to consumers, including disposable e-mail addresses.
It’s by no means a perfect system, though. And spammers are, if nothing else, persistent.
In a bizarre twist, Daniels thinks that instead of receiving spam offers from penny-stock pushers, mailboxes will increasingly be filled with marketing messages that we choose to receive, such as promotional e-mails from a favorite clothing store or a bank. He thinks the average number of messages from marketers that individuals receive annually will grow from 2,715 in 2007 to 3,335 in 2010.
“We expect people to spend as much time on e-mail as they have, but we think people will receive more e-mail from legitimate marketers. So there will be more competition to get consumers’ attention in the inbox, but it will be more like competition between The Gap and J.C. Penney as opposed to The Gap and a Viagra salesman.”
Read the rest of this entry »
Posted in Google, Internet, Security | 1 Comment »
New tests have revealed that Windows XP with the beta Service Pack 3 has twice the performance of Vista, even with its long-awaited Service Pack 1.
Vista’s first service pack, to be released early next year, is intended to boost the operating system’s performance. However, when Vista with the Service Pack 1 (SP1) beta was put through benchmark testing by researchers at Florida-based software development company Devil Mountain Software, the improvement was not overwhelming, leaving the latest Windows iteration outshined by its predecessor.
Vista, both with and without SP1, performed notably slower than XP with SP3 in the test, taking over 80 seconds to complete the test, compared to the beta SP3-enhanced XP’s 35 seconds.
Vista’s performance with the service pack increased less than 2 percent compared to performance without SP1–much lower than XP’s SP3 improvement of 10 percent. The tests, run on a Dell XPS M1710 test bed with a 2GHz Core 2 Duo CPU and 1GB of RAM, put Microsoft Office 2007 through a set of productivity tasks, including creating a compound document and supporting workbooks and presentation materials.
In response to the test, a Microsoft spokesperson said in a statement that although the company understood the interest in the service packs, they are “still in development” and will continue to evolve before their release. “It has always been our goal to deliver service packs that meet the full spectrum of customer needs,” the spokesperson said.
If SP1 does not evolve sufficiently, it could be another setback for Vista, with many businesses waiting to adopt the operating system until the service pack is released.
A year after its launch, only 13 percent of businesses have adopted Vista, according to a survey of IT professionals.
Microsoft admits that the launch has not gone as well as the company would have liked. “Frankly, the world wasn’t 100 percent ready for Windows Vista,” corporate vice president Mike Sievert said in a recent interview at Microsoft’s partner conference in Denver.
Microsoft has not done enough to make users aware of the benefits of Vista, NPD analyst Chris Swenson said at the conference. “The problem is that there are a lot of complex new features in Vista, and you need to educate consumers about them…much like Apple educating the masses about the possibilities of the iPhone or focusing on a single feature or benefit of the Mac OS in the Mac-versus-PC commercials. Microsoft should be educating the masses about the various new features in a heavy rotation of Vista in TV, radio, and print ads. But the volume of ads (for Vista) has paled in comparison to the ads run for XP.”
XP has proved to be more popular than its younger sibling, with the first six months of U.S. retail sales of box copies of Vista 59.7 percent below those of XP’s in the equivalent period after its release.
Microsoft has had to allow PC manufacturers to continue to sell XP on new PCs, setting a deadline for the last sale at January 31. However, the pressure from manufacturers and consumers has been so great that Microsoft has been forced to extend the deadline another five months, until June.
According to Microsoft, sales of Vista have been picking up, with the software giant reporting 88 million units sold.
Read the rest of this entry »
Posted in Microsoft, Software | 1 Comment »
