360° Coverage : How To Prevent Becoming The Next Target

2 Updates
How To Prevent Becoming The Next Target
Photo Credit: Forbes Business

How To Prevent Becoming The Next Target

Feb 20 2014, 3:41pm CST | by

Welcome to another installment in my cybersecurity for business owners series. Black Hat held a good webinar today on securing POS (Point of Sale) Systems.  I published an article on this topic (...

Filed under: news

 
 
 

35 weeks ago

How To Prevent Becoming The Next Target

Feb 20 2014, 3:41pm CST | by

Welcome to another installment in my cybersecurity for business owners series. Black Hat held a good webinar today on securing POS (Point of Sale) Systems.  I published an article on this topic (with input from one of our security engineers, Scott “Shagghie” Scheferman) a couple of weeks ago but this webinar had some additional soundbites that may be useful to business owners, particularly those who use POS systems.

Eric Fiterman was the first presenter, and he brought up some interesting points:

  1. Initial results indicate that the compromise Target's network and the initial attach vector may have been the energy control systems.  As we’ve noted in other scenarios and after discussions with many vendors, energy control systems, microgrid systems and other clean energy systems are emerging everywhere, and security implications seems to be a secondary concern at best when they are installed and integrated with existing networks.  In a previous post I noted this is a similar situation with networked medical devices being installed in hospitals.
  2. Eric mentioned the heavy emphasis on compliance vs actual security.  We’ve noted this after more than a decade of securing information systems for the Department of Defense, where the emphasis on “doing things right” in the security realm outweighs the importance of “doing the right things” in security.
  3. The push towards the cloud expands the attack surface significantly, often in ways that are not immediately obvious or understood.
  4. Anything that holds a credit card number should be considered a POS system.

Mr. Fiterman recommended the following ways in which to reduce one’s risk as a business owner:

  1. Reduce exposure by getting rid of data that is not required for immediate business purposes and using third party vendors (PayPal, etc) to process credit card payments.
  2. Encrypting credit card numbers at the point of acceptance.
  3. Focusing on security in addition to compliance (you can’t really ignore compliance or else the regulatory agencies get mad at you).
  4. Understanding how your network and domain infrastructure can work against you.
  5. Locating the initial attack vector asap, rather than focusing on the end target (although that also needs to be fixed).  Otherwise you can be chasing a number of feints and actual attacks that are all originating from the same initial entry point and spend for more money and time trying to eliminate the threat.

Jeffery Guy, a former Air Force cyber ninja and current security expert, also spoke.  His message was that every company should expect to be breached and that although a compromise may only take seconds, it will take months of time and an average of $341,000 to fix each breach (as Target is finding out now).

70% of all cyber attacks against businesses happen against small businesses, and although many business owners feel they “aren’t worth the time” of an attacker, the reality is that they are the primary targets and victims of cybercrime.

Source: Forbes Business

 
Update
2

7 weeks ago

Khazanah throws MAS RM6b lifeline

Aug 29 2014 5:01pm CDT | Source: Business Times Singapore

August 30, 2014 1:15 AMKHAZANAH Nasional will inject RM6 billion (SS$2.4 billion) over three years to resuscitate loss-making Malaysia Airlines (MAS) under a recovery plan that includes even an Act of Parliament. Other key moves are migrating its operations, assets and liabilities to a new company (NewCo) and slashing the workforce of ...
Source: Business Times Singapore   Full article at: Business Times Singapore
 

 
Update
1

8 weeks ago

MAS posts loss of RM307m for Q2

Aug 28 2014 5:00pm CDT | Source: Business Times Singapore

August 29, 2014 1:13 AMMALAYSIA Airlines (MAS) registered a loss of RM307 million (S$122 million) for the second quarter to end-June, but warned of worse to come in the second half when the "full financial impact of the double tragedies of MH370 and MH17" hits ...
Source: Business Times Singapore   Full article at: Business Times Singapore
 

 

Don't miss ...

 

<a href="/latest_stories/all/all/30" rel="author">Forbes</a>
Forbes is among the most trusted resources for the world's business and investment leaders, providing them the uncompromising commentary, concise analysis, relevant tools and real-time reporting they need to succeed at work, profit from investing and have fun with the rewards of winning.

 

blog comments powered by Disqus

Latest stories

India to join Asian infrastructure bank
Beijing, Oct 24 (IANS) Twenty-one Asian countries including India, ready to join the Asian Infrastructure Investment Bank (AIIB) as founding members, Friday signed a MoU on establishing the bank.
 
 
Boom in dam construction threatens freshwater biodiversity
London, Oct 24 (IANS) An unprecedented global boom in the construction of hydropower dams, spearhead by developing and emerging economies, could reduce the number of rivers by about 20 percent and pose a serious threat to freshwater biodiversity, says a study.
 
 
Beetroot boosts athletes' performance
New York, Oct 24 (IANS) Forget energy drinks, athletes may now rely on a more organic drink to enhance their performance - beetroot juice.
 
 
Dark shadow of Ebola now a global threat: Trinidad PM
Port-of-Spain, Oct 24 (IANS) The dark shadow of the Ebola has now become "a real and imminent global threat", Trinidad and Tobago's Prime Minister Kamla Persad-Bissessar has said.
 
 
 

Latest from the Network

Second MERS case reported in Qatar
Doha, Oct 23 (IANS) A 43-year-old man in Qatar has tested positive for Middle East Respiratory Syndrome (MERS) in the second confirmed case of the deadly virus in 10 days, media reported Thursday. The patient had...
Read more on Business Balla
 
Two people die in Pakistan bomb blast
Islamabad, Oct 23 (IANS) At least two people were killed and 12 others injured in an explosion that took place in Pakistan's Balochistan province Thursday, media reported. The bomb was planted on a motorcycle, Dawn...
Read more on Politics Balla
 
Trott extends contract with Warwickshire till 2017
London, Oct 23 (IANS) England batsman Jonathan Trott, whose mental issues led to his abrupt departure from last winter's Ashes tour, has confirmed his successful comeback to competitive cricket by signing a new three-...
Read more on Sport Balla
 
Srikanth, Kashyap big movers in BWF rankings
Kuala Lumpur, Oct 23 (IANS) Indian men shuttlers Kidambi Srikanth and Parupalli Kashyap jumped seven places each in the latest Badminton World Federation (BWF) rankings released Thursday while Olympic bronze medallist...
Read more on Sport Balla
 
Alvin Stardust dead
London, Oct 23 (IANS) English singer Alvin Stardust died after a short illness. He was 72. Stardust's manager confirmed the news about his demise Thursday, reports mirror.co.uk. He was recently diagnosed with...
Read more on Celebrity Balla
 
Indian man reunited with family after 40 years
Dubai, Oct 23 (IANS) An Indian man, who had disappeared from his hometown in Kerala nearly 40 years ago, has been found by his family at a hospital in Dubai in the UAE, a newspaper report said. Now in his 60s, Abdulla...
Read more on Politics Balla
 
Srikanth, Kashyap, Saina rise in world rankings
Kala Lumpur, Oct 23 (IANS) Indian men shuttlers Kidambi Srikanth and Parupalli Kashyap jumped seven places each in the latest released Badminton World Federation (BWF) rankings Thursday while Olympic bronze medallist...
Read more on Sport Balla
 
Flintoff signs for Big Bash side Brisbane Heat
Brisbane, Oct 23 (IANS) Former England captain and all-rounder Andrew Flintoff, who retired from international cricket in 2009, Wednesday confirmed that he will play for Brisbane Heat in the Big Bash League (BBL) this...
Read more on Sport Balla
 
OPEC daily basket price falls again
Vienna, Oct 23 (IANS/WAM) The basket of 12 crude oils of the Organization of Petroleum Exporting Countries (OPEC) closed at $81.94 a barrel Wednesday compared to $82.09 Tuesday, the OPEC Secretariat said. The new OPEC...
Read more on Business Balla
 
Lopez to sign multi-million dollar deal?
Los Angeles, Oct 23 (IANS) Singer-actress Jennifer Lopez is reportedly in the final stages of securing a multi-million dollar deal to perform in Las Vegas. The 45-year-old is being offered $350,000 per show at The...
Read more on Celebrity Balla