Ads by TechWords

See your link here
Receive the latest technology news and information.
Networking
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

How dangerous user behavior puts networks at risk

December 11, 2007 12:00 PM ET

Network World - As CIO at Bunker Hill Community College, Bret Moeller embraces students experimenting with technology as part of their education, but he'd prefer if their independent studies didn't involve hacking into the college's network.

"There are some students who discover at school that their whole point in life is to hack into the college's network to either glean information they have no right to access or to simply kill the network to prove they can do it," said Moeller, who works to manage and secure the Boston-area college's network.

"We can detect scanning on our network and we try to lock things down as much as possible or not allow software on workstations, but sometimes there can be a hole in our protections. We can't control the end users to the same degree one can in a corporate environment, but we still have to do as much as possible to secure the environment from end users," he said.

Yet, Moeller may have more in common than he realizes with corporate network and security managers.

Recent research from the Ponemon Institute revealed that a majority of users disobey company security standards -- and they do so knowingly. (See related slide show: End users behaving badly.) In addition, survey data just released by RSA shows that trusted insiders "create data exposures of extraordinary scope" through their everyday behaviors.

"End users are smarter than ever. The advent of the PC at home and not just work anymore, as well as the ability to look up and verify what the IT people are saying to you, is a different world," said Steve Moore, technology leader at Mary Kay Inc. in Dallas.

In addition, users can easily find detailed accounts of how to sidestep corporate policies, available from countless Internet sites and even laid out clearly in publications such as The Wall Street Journal.

With compliance regulations a constant factor, IT executives are caught between a rock and a hard place.

"We're constantly trying to balance the need for expanded access to information and the requirements to protect information from unauthorized and inappropriate use," said James Kritcher, vice president of IT at White Electronic Designs Corp. in Phoenix. "We now have an expanding number of accounts, passwords and other mechanisms to manage access to various resources. The resulting overhead and complexity increases the likelihood that inappropriate access may be granted."

For instance, users can unwittingly grant inappropriate access to co-workers, friends and family if they share too much information or neglect to update passwords. One area Craig Bush finds lacking among users is password security. He said the company has policies in place to ensure passwords aren't abused or revealed, but users consider managing passwords more of a hassle than a safeguard.


Reprinted with permission from

For more information about enterprise networking, go to NetworkWorld.com
Story copyright 2009 Network World, Inc. All rights reserved.

Jump to comments

thumb drives

Additional Resources

WHITE PAPER
Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.
WHITE PAPER
Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.
WHITE PAPER
Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

What People Are Saying

White Papers & Webcasts

Southern Company
Download Now  

Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.

Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.

Share our Strength
Download Now  

Preparing Your Business Services for the Future
Would you trust your network monitoring tools enough to know when something is truly halting a business service?

IPAM: Slashing Network Costs
Slashing Network Costs by Consolidating and Automating Core Network Services

Horror stories: Managing IT Across Multiple Locations
How one extra sharp IT manager eliminates daily agony, hassle and repetition.