Home > Security Tips > > Keeping the Alligators Out of the Sewer
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 


Keeping the Alligators Out of the Sewer


Written by Dorian J. Cougias; Published by Schaser-Vartan Books
07.29.2003
Rating: -4.00- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


This excerpt is from Chapter 9, Keeping the Alligators Out of the Sewer from The Backup Book: Disaster Recovery from Desktop to Data Center, written by Dorian J. Cougias and published by Schaser-Vartan Books.


When I was a kid, I heard a lot of stories about New York City and Chicago sewer workers who would encounter the occasional alligator lurking in the city sewer system, evoking the question, "How did an alligator get into the sewer system of such a big city?"

I knew -- the Huber brothers, that's how. More than once, they'd return from a Florida vacation, pockets bulging with baby alligators. And as soon as Mrs. Huber wasn't looking, they'd toss the little monsters into the toilet or a local storm drain. When I asked them why in the world they were doing that, they replied coolly, "We wanna see how big they'll get and if they'll eat anybody."

The world is full of goofballs like the Brothers Huber. Somewhere, sometime, some goofball is going to hack your network "just because." They're going to hack it or send you a virus "just because" they want to see what happens or "just because" they intend you harm. And if you don't believe it can happen to you, scan these news briefs for a little enlightenment:

  • MSNBC's Bob Sullivan reported on a company that got hacked, sustaining an 80% probability that all of the credit card data in its system had been compromised. More than 2,000 unsuspecting clients may face inflated bills this month -- because someone might have lifted their information.
  • The San Mateo County Times announced that many Silicon Valley businesses would be under siege from a perilous virus and Trojan horse attack by -- believe it or not -- the Russian Mafia.
  • Robert Lemos of ZDNet reported "Microsoft spreads virus -- by accident." Unbeknownst to Microsoft, the Korean language versions of Visual Studio .NET sent to their South Korean developers harbored an unwelcome guest -- the virulent Nimda worm.
  • Robert Lemos (again) reported on a new type of attack: the JPEG worm, which is breaking new ground in virus attacks. This virus infects and attaches itself to images on the system as they're opened and viewed.

All this mayhem happened just last week -- and I found these stories without really looking. I'm sure a lot more stories are out there, but I just can't bear to read them. So the question becomes, how much of this do you have to worry about, how can you protect yourself -- and what does this have to do with backup? In short, how do you keep those pesky alligators out of the sewer?

Let's take the first one last: What does this have to do with backup? In a word, EVERYTHING. If you back up a file that's infected with a virus, you've now stored the virus, as well. When you restore the file, the virus gets restored, too. If someone hacks your company's Web site and defaces several pages, you'll be restoring those files -- that is, unless you caught it before you backed them up again.

Try this, just for fun: Run an attack and virus test on your computer systems, just to see what will happen. You can run these tests without harming anything on your system -- except for your false sense of security, which may never recover. But that's part of what this chapter is about: the process of testing for basic hacker vulnerabilities in your systems and then passing that information on to the security folks to so that you and they can implement some real security. Because at the end of the IT day, it's your job to restore lost data, no matter who lost it.

>> Read the rest of Chapter 9, Keeping the Alligators Out of the Sewer from The Backup Book: Disaster Recovery from Desktop to Data Center.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Malware (Trojan horses, viruses & worms)
Security Alert: Mydoom-A
Keys to an effective virus incident-response team
Learning Path: Malware
Alert: New RPC vulnerabilities
Virus update: Sobig-F and Nachi
Together, multiple tools clean and defend against malware
Blaster infection may require customer notification
How to remove the Blaster registry key through scripting
Virus alert: Sobig-E
Virus Alert: BugBear-B spreading rapidly

Data Protection
Week 3: Restore a backup tape and recover usable data
Introduction to cryptography
Securing your SANs
Best principles for storage security
Save your SAN: Secure your LAN
SAN approaches to LUN security
Storage security: Enforcing policies and procedures that work
The five A's of functional SAN security
Virus busters

Data Backup
Should users have a removable boot drive for online banking?
Should whole disk encryption products be used with data backup software?
Will one failed drive corrupt the rest of a RAID-5 array?
The Craft of System Security
E-discovery forces security organizations to prepare for eventual litigation
Can confidential data be accessed once it is deleted for free space?
Examining DoD-level secure erasure guidelines
What is the relationship between open port range and overall security risk?
Compliance, data breaches heighten database security needs
Are encryption products better than self-destructing data?

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
More Security Resources for Resellers, VARs and OEMs
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts