August 09, 2004 (Computerworld) -- The widespread availability of sensitive information on corporate Web sites appears to have been largely overlooked by IT and security managers who responded last week to the Department of Homeland Security's warning of a heightened terrorist threat against the financial services sector.
Freely available on the Web, for example, are 3-D models of the exterior and limited portions of the interior of the Citigroup Inc. headquarters building in Manhattan -- one of the sites specifically named in the latest terror advisory issued by the DHS. Likewise, details of the Citigroup building's history of structural design weaknesses, including its susceptibility to toppling over in high winds, the construction of its central support column and the fire rating of the materials used in the building, are readily available on the Web.
A Citigroup spokeswoman declined to comment, referring the matter to the building owner, Boston Properties Inc.
Similarly, the Web site of the Chicago Board of Trade includes photographs of the facility's underground parking garages, floor plans of office suites, and contact names and phone numbers for the telecommunications service providers that serve the building.
Maria Gemskie, a spokeswoman for the Chicago Board of Trade, said the exchange could not comment publicly about specific security precautions being put in place. But she stressed that "all aspects of security are taken very seriously and we are looking into [our Web content] as well."
But information like that posted on the exchange's Web site can be a gold mine for terrorists, security experts said. A senior intelligence official at the DHS, speaking on condition of anonymity, said the recent capture of al-Qaeda computer expert Muhammad Naeem Noor Khan in Pakistan yielded a computer filled with photographs and floor diagrams of buildings in the U.S. that terrorists may have been planning to attack.
"Not thinking through the security implications of some of the information put online can be a very dangerous mistake," said Amit Yoran, director of the National Cyber Security Division at the DHS.
"This company's infrastructure group is running a disaster recovery exercise with a reluctant participant: an IT manager who's notorious as..."
Read more...
"It's IT Blogwatch: in which Mozilla's Firefox Web browser continues to gain market share, smashing records as it does so...."
Read more... Read more Security posts or See all Blogs
Is Microsoft's Golden Age over? What are Gates' most memorable quotes? Find out in Computerworld's complete coverage of the end of the Bill Gates era at Microsoft.
Why SaaS is Vital to Email and Web Security
Download this webcast, free, compilments of Webroot Software
Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing
Eliminate SPAM, Gain Productivity
Get this white paper now! (Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Security Management Zone
Security management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure.
Visit the CDW Security Management Zone nowSee All Zones
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.
New baits
"Security Directions" virtual trade show
2008's Code-Red Security Issues for Protecting the Enterprise
Webcasts, white papers, demos, and more. Presented in a unique 3-d environment.