<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="wordpress/2.3.1" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>

<channel>
	<title>Network Security Basics</title>
	<link>http://www.networksecuritybasics.com</link>
	<description>Simple, Easy Reliable Network Security Resources</description>
	<pubDate>Thu, 15 Nov 2007 03:57:13 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.1</generator>
	<language>en</language>
			<item>
		<title>Network Security Protection Software</title>
		<link>http://www.networksecuritybasics.com/network-security/network-security-protection-software/</link>
		<comments>http://www.networksecuritybasics.com/network-security/network-security-protection-software/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:57:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[Network Security Software]]></category>

		<category><![CDATA[security protection]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/network-security-protection-software/</guid>
		<description><![CDATA[There are numerous ways you can lose the information on your computer. Your child decides to play Chopin on your keyboard, a power surge, lightening, a virus, or even simple equipment failure. Therefore, backing up the contents of your hard drive is an absolute MUST. By regularly making backup copies of your files and storing [...]]]></description>
			<content:encoded><![CDATA[<p>There are numerous ways you can lose the information on your computer. Your child decides to play Chopin on your keyboard, a power surge, lightening, a virus, or even simple equipment failure. Therefore, backing up the contents of your hard drive is an absolute MUST. By regularly making backup copies of your files and storing them in a separate location, you can typically get some, if not all, of your information back in the event your computer crashes.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
While a regular backup to floppy, CD, or zip drive will save your files, wouldn’t it be great if you could create an exact copy (a drive image) of your hard disk? That means backups of all your files, programs, and user settings. This would definitely save you time when it came to reloading. Acronis may be able to help.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Acronis True Image 9.0 is a robust disk-imaging utility software that copies the entire contents of your hard drive including data and operating system files, personalized settings, and more, onto another disk or disk partition. Its layout is easy to use and navigate. It also includes wizards which can walk you through both backing up and restoring your computer. Highlighted features include:
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
• Secure Zone — allows you to save data to a special hidden partition located on your hard drive which would eliminate the need to purchase an extra hard drive.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
• PC Cloning — you can upgrade to a new system disk without needing to reinstall the operating system and applications, or configure user settings.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
• Acronis Snap Restore - lightening-speed restore of your PC from an image. You can start working in seconds while your system is still being restored.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Acronis provides a free test-drive of its product and a 30-day money back guarantee. When you are ready to purchase, you can either download for $49.99, or if you so desire, order a boxed version for $59.99. With Acronis True Image Home 9.0, you can rest easy that your family pictures, personal documents, tax returns, resumes, and other important information will not be lost forever.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/network-security-protection-software/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Understanding Content Filters</title>
		<link>http://www.networksecuritybasics.com/network-security/understanding-content-filters/</link>
		<comments>http://www.networksecuritybasics.com/network-security/understanding-content-filters/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:54:03 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Content Filters]]></category>

		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[content filter]]></category>

		<category><![CDATA[email filter]]></category>

		<category><![CDATA[internet blocking]]></category>

		<category><![CDATA[server security]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/understanding-content-filters/</guid>
		<description><![CDATA[What is content filter? Content filter is a device or software that is use to block or allow internet sites and content from being accessed and viewed by an individual, a group of individuals, or all the connected users. Businesses can block content based on traffic type. For example, Web access might be allowed, but [...]]]></description>
			<content:encoded><![CDATA[<p>What is content filter? Content filter is a device or software that is use to block or allow internet sites and content from being accessed and viewed by an individual, a group of individuals, or all the connected users. Businesses can block content based on traffic type. For example, Web access might be allowed, but file transfers may not be allowed. Content can also be filtered by site through the use of lists of URLs that are cataloged by content which are updated frequently. Parents can control and restrict their children&#8217;s access to inappropriate content via special browsers and content filtering programs.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Content filter are fast getting implemented in corporate, government, and school sectors. Most organizations today have their own internal e-mail infrastructure. Many of them also implement other communications systems such as Instant Messaging (IM) and peer-to-peer (P2P) collaboration software such as Microsoft Groove. These technologies have had a tremendous impact in recent years, greatly simplifying collaboration and globalization efforts. But they come with a price, which is not limited to the price of lost productivity. E-mail, IM and P2P communications are all popular replication systems for malicious software or malware. They can also enable other security threats such as phishing and social engineering. Because of this, many organizations have disallowed P2P and IM systems. However this is not always possible and can sometimes cause more harm in lost productivity. This is why organizations should have a content filter in place.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Implementing content filters will limit the possiblity of an network attack. Content filters examine network traffic as it flows to determine whether it contains an attack. Today there are a number of content filters designed specifically for different types of communication including e-mail, IM and P2P collaboration systems. These content filters are able to prevent malicious use of systems while still enabling the rich work environment that helps boost the productivity of today’s tech-savvy user.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
They are many types of content filter providers available. It&#8217;s to your advantage to shop around. Content filters are not by any means cheap. Some are very expensive in the range from $30,000 to $60,000 per year. Most content filter providers provide their own content server or network device. Some only provide content software that you could install on your server. Again, you need to evaluate what you have and the cost and risk to have your traffic filter or not.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/understanding-content-filters/feed/</wfw:commentRss>
		</item>
		<item>
		<title>What the Heck are Botnets?</title>
		<link>http://www.networksecuritybasics.com/network-security/what-the-heck-are-botnets/</link>
		<comments>http://www.networksecuritybasics.com/network-security/what-the-heck-are-botnets/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:52:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[bonets]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/what-the-heck-are-botnets/</guid>
		<description><![CDATA[&#8220;A botnet is comparable to compulsory military service for windows boxes&#8221; - Stromberg (http://project.honeynet.org/papers/bots/)

&#160;

Botnets are networks of computers that hackers have infected and grouped together under their control to propagate viruses, send illegal spam, and carry out attacks that cause web sites to crash.

&#160;

What makes botnets exceedingly bad is the difficulty in tracing them back [...]]]></description>
			<content:encoded><![CDATA[<p>&#8220;A botnet is comparable to compulsory military service for windows boxes&#8221; - Stromberg (http://project.honeynet.org/papers/bots/)
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Botnets are networks of computers that hackers have infected and grouped together under their control to propagate viruses, send illegal spam, and carry out attacks that cause web sites to crash.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
What makes botnets exceedingly bad is the difficulty in tracing them back to their creators as well as the ever-increasing use of them in extortion schemes. How are they used in extortion schemes? Imagine someone sending you messages to either pay up or see your web site crash. This scenario is starting to replay itself over and over again.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Botnets can consist of thousands of compromised machines. With such a large network, botnets can use Distributed denial-of-service (DDoS) as a method to cause mayhem and chaos. For example a small botnet with only 500 bots can bring corporate web sites to there knees by using the combined bandwidth of all the computers to overwhelm corporate systems and thereby cause the web site to appear offline.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Jeremy Kirk, IDG News Service on January 19, 2006, quotes Kevin Hogan, senior manager for Symantec Security Response, in his article &#8220;Botnets shrinking in size, harder to trace&#8221;, Hogan says &#8220;extortion schemes have emerged backed by the muscle of botnets, and hackers are also renting the use of armadas of computers for illegal purposes through advertisements on the Web.&#8221;
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
One well-known technique to combat botnets is a honeypot. Honeypots help discover how attackers infiltrate systems. A Honeypot is essentially a set of resources that one intends to be compromised in order to study how the hackers break the system. Unpatched Windows 2000 or XP machines make great honeypots given the ease with which one can take over such systems.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
A great site to read up on this topic more is The Honeynet Project (http://project.honeynet.org) which describes its own site&#8217;s objective as &#8220;To learn the tools, tactics and motives involved in computer and network attacks, and share the lessons learned.&#8221;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/what-the-heck-are-botnets/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Mobile and Wireless Security</title>
		<link>http://www.networksecuritybasics.com/network-security/mobile-and-wireless-security/</link>
		<comments>http://www.networksecuritybasics.com/network-security/mobile-and-wireless-security/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:50:30 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[Wireless Security]]></category>

		<category><![CDATA[mobile security]]></category>

		<category><![CDATA[remote access]]></category>

		<category><![CDATA[virtual private network]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/mobile-and-wireless-security/</guid>
		<description><![CDATA[Wireless has changed the engagement of a mobile workforce and telecommuting has challenged IT departments. Among these changes is the proliferation of wireless networking. Today, virtually all notebook and mobile computers, and even many desktop computers, come equipped with wireless network cards. You can easily buy a wireless network access point for less than $50 [...]]]></description>
			<content:encoded><![CDATA[<p>Wireless has changed the engagement of a mobile workforce and telecommuting has challenged IT departments. Among these changes is the proliferation of wireless networking. Today, virtually all notebook and mobile computers, and even many desktop computers, come equipped with wireless network cards. You can easily buy a wireless network access point for less than $50 and deploy wireless access to your network within an hour.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Wireless networks have truly changed the way we do business. Where would we be without wireless network today? So what is wireless and how do we make it secure? Wireless utilize radio waves and/or microwaves to maintain communication channels between computers. Wireless networking is a more modern alternative to wired networking that relies on copper and/or fiber optic cabling between network devices.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
A wireless network offers advantages and disadvantages compared to a wired network. Advantages of wireless include mobility and elimination of unsightly cables. Disadvantages of wireless include the potential for radio interference due to weather, other wireless devices, or obstructions like walls. Network administrators need to take special consideration when setting up their wireless network security. From a security perspective, network administrator should look for the following features:
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
• Support for Wi-Fi Protected Access (WPA) and WPA2 to protect the wireless traffic
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
• Support for Remote Authentication Dial-In User Service (RADIUS) authentication so that you can use your centralized authentication system to provide strong, integrated authentication
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
• Support for MAC address filtering to limit which clients can access your network (great for smaller networks)
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Wireless networks are now becoming more mainstream than ever. Wireless LANs now travel at Ethernet speeds with a greater range and built-in security. Wireless data networks are now providing Internet coverage to many of the large metropolitan areas. Businesses of all sizes and disciplines are now seizing upon the advantages provided by wireless networks. This growth will continue to increase in step with the growing mobile workforce. Stay on top of wireless security and your network will be limited to attacks.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/mobile-and-wireless-security/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Protecting with Zone Alarm</title>
		<link>http://www.networksecuritybasics.com/malware/protectiving-with-zone-alarm/</link>
		<comments>http://www.networksecuritybasics.com/malware/protectiving-with-zone-alarm/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:48:03 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Malware]]></category>

		<category><![CDATA[Network Security Software]]></category>

		<category><![CDATA[zone alarm]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/malware/protectiving-with-zone-alarm/</guid>
		<description><![CDATA[Malware. An odd sounding word created to lump all malicious software programs, including viruses, worms, trojans, spyware, adware, and other malevolent codes into one cause-your-computer-serious-hurt category.
&#160;
In 2005, Computer Economics released a report on malware. The good news was that for the first time since 2002, the total worldwide financial losses from malware actually declined to [...]]]></description>
			<content:encoded><![CDATA[<p>Malware. An odd sounding word created to lump all malicious software programs, including viruses, worms, trojans, spyware, adware, and other malevolent codes into one cause-your-computer-serious-hurt category.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">In 2005, Computer Economics released a report on malware. The good news was that for the first time since 2002, the total worldwide financial losses from malware actually declined to a mere $14.2 billion. The bad news was that the nature of malware was changing from overt threats to more focused, covert attacks. This definitely is not great news for the average computer user just trying to keep up with the hundreds of malware programs that bombard us daily.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">It’s not an easy task keeping malware out of your computer system. In order to accomplish this, you need a strong antivirus program. One such program that can deliver the goods is ZoneAlarm Internet Security Suite 6 from Zone Labs. Zone Labs is one of the most trusted brands in Internet Security for good reason. Their product, simply put, kicks serious malware gluteus maximus.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">ZoneAlarm has received more review recommendations that any other Internet-security software suite because of its superb firewall and antivirus protection. It blocks pop-up ads, protects against identify theft and provides adequate spam filters that are flexible. It even beats the market leader, Norton Internet Security, which is often criticized for excessive system drag.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">Its newest version includes these additional features:</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">• Triple Defense Firewall to prevent spyware from sending your information across the Internet. It also makes your computer invisible to anyone on the Net.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">• Smart Defense Advisor which can automatically adjust your security settings for maximum protection against the latest virus and spyware outbreaks.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">• Advanced Identify and Privacy Protection to prevent your personal data from leaving your computer without your approval.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">The bonus for the average user who cringes at the idea of setting-up one of these systems is that the interface is easier to understand and use in comparison to most if its competitors. If you choose to venture beyond the out-of-the-box default settings, and install a more elaborate filtering, know that this will require some additional time to set up on your part.</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">Overall, ZoneAlarm Internet Security Suite is a user-friendly, comprehensive security solution that will have your computer safe from Internet hazards and cyber criminals within minutes of installation.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/malware/protectiving-with-zone-alarm/feed/</wfw:commentRss>
		</item>
		<item>
		<title>What is Malware?</title>
		<link>http://www.networksecuritybasics.com/malware/what-is-malware/</link>
		<comments>http://www.networksecuritybasics.com/malware/what-is-malware/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:43:14 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Malware]]></category>

		<category><![CDATA[client security]]></category>

		<category><![CDATA[viruses]]></category>

		<category><![CDATA[worms]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/malware/what-is-malware/</guid>
		<description><![CDATA[When computers first came out, virtually no importance was placed on client security. All security efforts were focused on server hardening, such as domain infrastructure, server-based data encryption and rolespecific security such as database storage. Believe it or not, most client computers didn’t have a virus scanner installed. However, today virtually every computer has a [...]]]></description>
			<content:encoded><![CDATA[<p>When computers first came out, virtually no importance was placed on client security. All security efforts were focused on server hardening, such as domain infrastructure, server-based data encryption and rolespecific security such as database storage. Believe it or not, most client computers didn’t have a virus scanner installed. However, today virtually every computer has a virus or malware scanner installed if it&#8217;s on the network. This change from past behavior is due in part to the behavior of attackers. They now see that unsecured client computers can provide leverage to conduct further and more successful attacks against the rest of an organization.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
One of the biggest threats to computer users on the Internet today is malware. So what is malware? Malware or malicious software are computer viruses that have been around for decades. They are the most common form computer viruses. Originally written and distributed as proof-of-concept code, today they take on much more sinister motives. Some virus writers are paid to spread their code. Others conduct attacks against opposing political or religious organizations. And some attack for no other reason than the challenge. Malware attacks clients in a variety of forms: viruses and worms, Trojan horses, spyware and rootkits. Malware can hijack your browser, redirect your search attempts, serve up nasty pop-up ads, track what web sites you visit, and generally screw things up. Malware programs are usually poorly-programmed and can cause your computer to become unbearably slow and unstable in addition to all the other havoc they wreak.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Computers can get infected by malware in several ways. Programs like Kazaa, iMesh, and other file sharing programs seem to be the biggest bundlers of malware. These malware programs usually pop-up ads, sending revenue from the ads to the program&#8217;s authors. Others are installed from websites, pretending to be software needed to view the website. Still others, most notably some of the CoolWebSearch variants, install themselves through holes in Internet Explorer like a virus would, requiring you to do nothing but visit the wrong web page to get infected.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
The safest and perhaps easiest way to prevent malware is understanding what you are installing and what you are accessing on your computer. Having a good understanding about malware with some common sense will help you save time and money in the long run.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Be cautious when browsing the internet. If something looks too good to be true, it probably is. Any &#8220;hot deals&#8221; had better come from a trusted source. If a warning starts flashing on your computer, look closely to see if it&#8217;s a legitimate message from Windows or just an animated image in a web browser. Don&#8217;t just click on the animation banner for the sake of just clicking it. Ask yourself what is the banner advertising for? By taking good precaution and using common sense, you can limit yourself to malware attacks.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/malware/what-is-malware/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Understanding Spam</title>
		<link>http://www.networksecuritybasics.com/network-security/understanding-spam/</link>
		<comments>http://www.networksecuritybasics.com/network-security/understanding-spam/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 03:40:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[Network Spam]]></category>

		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/understanding-spam/</guid>
		<description><![CDATA[Spam. Nobody likes it. Nobody wants it. No, we aren’t talking about the canned meat, but those unsolicited, unwanted, irrelevant, or even inappropriate messages that hit our email in mass quantities. While most mailboxes have some type of spam filtering software built into their system, they never seem to do a very good job of [...]]]></description>
			<content:encoded><![CDATA[<p>Spam. Nobody likes it. Nobody wants it. No, we aren’t talking about the canned meat, but those unsolicited, unwanted, irrelevant, or even inappropriate messages that hit our email in mass quantities. While most mailboxes have some type of spam filtering software built into their system, they never seem to do a very good job of catching what you want them to catch, and letting through what you want them to let through. Therefore, it becomes increasingly important to turn to some type of additional spam filtering product. One such filtering system, designed for Outlook and Outlook Express users, is receiving rave reviews for its superior detection and low rate of false positives (i.e,. what you want to get through does).
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Cloudmark Desktop, formerly known as SpamNet and SafetyBar, uses a unique community-based filtering process. This community-based filtering system relies on users to report any new spam. Within minutes of a spammer being reported, they are placed on a blacklist. At that point, no other member will receive that particular spam. Cloudmark also applies the same basic process to phishing email scams.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
What is interesting is how Cloudmark creates a digital reputation model of reporting spam. Each user starts with a neutral reputation. A user’s reputation will rise if they are among the first to identify undesirable content. On the flip side of the coin, a user’s reputation falls when they falsely reports spam. The result is a system that is automated, highly scalable and resistant to tampering.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
An added bonus is that because the software doesn’t depend upon the user to configure its settings, it installs in minutes and is easy to use. Cloudmark blocks over 98% of spam from reaching your inbox and boasts over one million users worldwide.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/understanding-spam/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Securing Network Servers</title>
		<link>http://www.networksecuritybasics.com/network-security/securing-network-servers/</link>
		<comments>http://www.networksecuritybasics.com/network-security/securing-network-servers/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 01:26:51 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[Network Servers Security]]></category>

		<category><![CDATA[physical security]]></category>

		<category><![CDATA[server security]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/securing-network-servers/</guid>
		<description><![CDATA[Physical security is the foundation for all computer security. The saying is, “No physical security equals no security.” Although there are arguable exceptions to this rule, it is virtually always true. Without strong physical security, no computer security control should be considered adequate.

&#160;

If an attacker has logical (network) or even keyboard/mouse access to a computer, [...]]]></description>
			<content:encoded><![CDATA[<p>Physical security is the foundation for all computer security. The saying is, “No physical security equals no security.” Although there are arguable exceptions to this rule, it is virtually always true. Without strong physical security, no computer security control should be considered adequate.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
If an attacker has logical (network) or even keyboard/mouse access to a computer, their interactions are limited by the OS and other security controls that are probably in place. Factors such as configuration management, malware scanners and access control can continue to hinder this attacker.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
But once the attacker has access to the physical computer the situation changes. Intruders can now compromise data on the hard drive, replacing the OS or application software with his own software. He can manipulate the configuration of the OS or security applications. The attacker can even install hardware-based keystroke loggers or other security-defeating mechanisms.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
It is crucial to the security of your assets that you protect them from an attacker’s physical access. This is true for all of your assets such as servers, clients and mobile computers, as well as other assets such as employees and buildings.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/securing-network-servers/feed/</wfw:commentRss>
		</item>
		<item>
		<title>What is Phishing?</title>
		<link>http://www.networksecuritybasics.com/network-security/what-is-phishing/</link>
		<comments>http://www.networksecuritybasics.com/network-security/what-is-phishing/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 01:24:45 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[Phishing]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/what-is-phishing/</guid>
		<description><![CDATA[Who hasn’t received an email directing them to visit a familiar website where they are being asked to update their personal information? The website needs you to verify or update your passwords, credit card numbers, social security number, or even your bank account number. You recognize the business name as one that you’ve conducted business [...]]]></description>
			<content:encoded><![CDATA[<p>Who hasn’t received an email directing them to visit a familiar website where they are being asked to update their personal information? The website needs you to verify or update your passwords, credit card numbers, social security number, or even your bank account number. You recognize the business name as one that you’ve conducted business with in the past. So, you click on the convenient “take me there” link and proceed to provide all the information they have requested. Unfortunately, you find out much later that the website is bogus. It was created with the sole intent to steal your personal information. You, my friend, have just been “phished”.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Phishing (pronounced as “fishing”) is defined as the act of sending an email to a recipient falsely claiming to have an established, legitimate business. The intent of the phisher is to scam the recipient into surrendering their private information, and ultimately steal your identity.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
It is not at easy as you think to spot an email phishing for information. At first glance, the email may look like it is from a legitimate company. The &#8220;From&#8221; field of the e-mail may have the .com address of the company mentioned in the e-mail. The clickable link even appears to take you to the company&#8217;s website, when in fact, it is a fake website built to replicate the legitimate site.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Many of these people are professional criminals. They have spent a lot of time in creating emails that look authentic. Users need to review all emails requesting personal information carefully. When reviewing your email remember that the &#8220;From Field&#8221; can be easily changed by the sender. While it may look like it is coming from a .com you do business with, looks can be deceiving. Also keep in mind that the phisher will go all out in trying to make their email look as legitimate as possible. They will even copy logos or images from the official site to use in their emails. Finally, they like to include a clickable link that the recipient can follow to conveniently update their information. A great way to check the legitimacy of the link is to point at the link with your mouse. Then, look in the bottom left hand screen of your computer. The actual website address to which you are being directed will show up for you to view. It is a very quick and easy way to check if you are being directed to a legitimate site.
</p>
<p class="post-content">&nbsp;</p>
<p class="post-content">
Finally, follow the golden rule. Never, ever, click the links within the text of the e-mail, and always delete the e-mail immediately. Once you have deleted the e-mail, empty the trash box in your e-mail accounts as well. If you are truly concerned that you are missing an important notice regarding one of your accounts, then type the full URL address of the website into your browser. At least then you can be confident that you are, in fact, being directed to the true and legitimate website.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/what-is-phishing/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Fighting Spam</title>
		<link>http://www.networksecuritybasics.com/network-security/fighting-spam/</link>
		<comments>http://www.networksecuritybasics.com/network-security/fighting-spam/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 01:21:25 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Network Security]]></category>

		<category><![CDATA[Network Spam]]></category>

		<category><![CDATA[blocking email]]></category>

		<category><![CDATA[junk email]]></category>

		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.networksecuritybasics.com/network-security/fighting-spam/</guid>
		<description><![CDATA[How prevalent is Spam? According to Scott McAdams, OMA Public Affairs and Communications Department (www.oma.org): “Studies show unsolicited or “junk” e-mail, known as spam, accounts for roughly half of all e-mail messages received. Although once regarded as little more than a nuisance, the prevalence of spam has increased to the point where many users have [...]]]></description>
			<content:encoded><![CDATA[<p>How prevalent is Spam? According to Scott McAdams, OMA Public Affairs and Communications Department (<a href="http://www.oma.org/">www.oma.org</a>): “Studies show unsolicited or “junk” e-mail, known as spam, accounts for roughly half of all e-mail messages received. Although once regarded as little more than a nuisance, the prevalence of spam has increased to the point where many users have begun to express a general lack of confidence in the effectiveness of e-mail transmissions, and increased concern over the spread of computer viruses via unsolicited messages.” <a href="http://www.networksecuritybasics.com/network-security/fighting-spam/#more-6" class="more-link">(more&#8230;)</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.networksecuritybasics.com/network-security/fighting-spam/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
