Live Blog

The RACK59 Blog

rss

Focusing on technology, security, innovation and our community


Most Common Ways Malware Compromises Security

Scamming and malware is a constant worry for Internet users. Many people use the Internet to pay bills and manage their finances. Almost every website requires a username and password to access information and keeping track of all the logins can be a hassle. Often, people will let their guard down, share information with friends, or be careless while browsing from a public location. Sometimes, even while practicing safe browsing habits, people can find themselves in a sticky situation where their accounts are compromised. There are many factors involved in staying secure. Knowing how the criminals gain access to your information can help you be more aware of common traps while surfing the web.

One of the most popular ways cybercriminals gain access to private information is by exploiting backdoor openings in browsers. It works better than any other tactic because it doesn’t require the user to willingly do anything such as click on a harmful link or download an infected file. Malicious sites are often accessed while clicking on results from a search engine. That isn’t to say that fake websites and malware-laden websites aren’t the typical fare for a crook; the most commonplace scam is the one that involves a hacker redirecting you to a website that looks identical to another and requests your login information. If you are socially network savvy, you may be aware of these types of scams since they are commonly spread as links from a hijacked account. What the hacker wants most of all is to be profitable with his craft, so it goes to figure that websites like Paypal and banking services are highly targeted.

False websites coupled with malware such as keylogging tools are bundled together to lure the victim in and steal his sensitive data. Even websites that have a multi-login process aren’t 100% secure; creative hackers have created ways around these by stealing the credentials in real time and entering them while the user is temporarily blocked from accessing his account.

The best ways to stay protected? Practice safe browsing. Safeguard your personal information. Avoid spam and suspicious links. And most importantly, scan your computer frequently.


Test Drive the Cloud: Top 6 Services with Free Storage

Sometimes, you just need to experience things first-hand. If you’ve been itching to find out what the cloud is all about, or are just in search of some free storage for your personal documents, here are several services that offer free storage to customers. These services are available cross-platform and are usually made for use between a PC and personal handheld device.

- Google Drive: The latest and most highly anticipated Google service launched at the end of last month and was met with a positive reaction. Google Drive is a basic storage service that syncs between anything on the Google cloud network, including Android devices. It’s essentially a mutation of Google Docs, but now offers more powerful collaboration tools and 5GB of free storage to customers. Users can make files available offline and have the ability to edit them directly from the interface. Upgraded storage plans are relatively cheap; 25 or 100GB of additional storage costs $2.49 or $4.99 yearly respectively.

- Dropbox: With its easy-to-use controls and accessibility across multiple platforms, Dropbox is a fan favorite for syncing and sharing files and folders. It has a very simple and limited user interface, but it’s made even more functional with add-ons such as Dropbox Folder Sync. Dropbox offers 2GB of storage to users starting out and has several ways to obtain free space, such as with referrals or camera uploads. Paid accounts are less flexible than some alternatives with the lowest plan starting at 50GB for $9.99 per year, but they also offer large storage (starting at 1TB) for groups. Paid Dropbox users can also reap the benefits of referrals to increase their storage even more.

- Microsoft Windows Live SkyDrive: This service rivals Google Drive; they recently added more functionality and improved management features. It integrates with Windows and Live users. Unfortunately, they reduced the amount of free storage offered to customers from 25GB to 7. Additional storage will run users $10 for 20GB, $25 for 50GB, or $50 for 100GB annually.

- SugarSync: As a self-proclaimed “personal cloud service,” SugarSync is similar to Dropbox except it offers 5GB of free storage to new users. It also has more complex tools for file management and sharing.

- iCloud: This is the default storage solution for Apple users and is integrated with all of their products. Users get 5GB of free storage and can upgrade to a maximum of 50GB. Paid music, books, and photos aren’t counted against the free storage limit.

- Amazon Cloud Drive: Amazon is a newcomer to the cloud scene but is catching on quickly. The service offers 5GB of free storage to users and guarantees secure storage for music, videos, photos, and documents. Paid storage plans flexible and go up to 1,000GB.

Quick stats about the cloud

A recent infographic published by CSC illuminates the usage index for cloud computing and shared some interesting facts about how the companies reacted to switching to the cloud. These statistics are helpful when determining the benefits in adopting the cloud. Here’s the breakdown:

33% of companies moved to the cloud in order to gain access to information from multiple devices. 

Only 17% cited cutting costs as their main cause. Only 14% of companies downsized their IT departments after switching to the cloud. 20% hired more.

Savings in the cloud are visible but small. 82% of U.S. companies say they saved money by switching to the cloud, but for 35%, savings were less than $20,000. Small businesses saw the least savings. Overall, companies in Brazil saw the most savings.

Companies that switch are in it for the long haul. 65% paid for subscriptions lasting one year or longer on their first contract.

The cloud reduces waste, improves IT departments, and increases proficiency. 47% of companies said their operating costs declined while using the cloud.

Fewer employees resist cloud conversion. 74% of small businesses (50 employees or fewer) reported having no one resist the move.

25% of companies claimed to be more concerned about data security after switching to the cloud. Companies in Singapore were the most concerned about security, while 47% of companies in Brazil said they were less concerned.

The government is slowly transitioning to the cloud services, with almost half of government IT workers saying that they’ve already made the move. There is a new requirement that states U.S. federal agencies must adopt a “cloud-first” policy.

The statistics came from a global survey of 3,645 IT decision makers in 8 countries.  You can view the full infographic here.


Security actions to ask about the cloud

Cloud services are a great resource for businesses but are often lacking in security. Unfortunately, this is one area in which cloud computing desperately needs more work. The current model often forces businesses to change their current practices to suit a cloud that needs to allow open-flow access and shared services. There is no basic groundwork for encryption and security standards are not universally agreed on across the board, leaving room for problem areas to arise unexpectedly. In some cases, they can lead to sensitive data being divulged.

Until a minimum security standard can be reached, Gartner urges businesses to request detailed security reports from their cloud service providers. Here are some questions to keep in mind when choosing a cloud service provider, from a report published in Information Week:

• Does the cloud service provider require the use of two-factor authentication for the administrative control of servers, routers, switches and firewalls?

• Does it support IPsec or Secure Sockets Layer with Extended Validation certificates and two-factor authentication for connecting to the service?

• Does it contract for, or provide protection against denial-of-service attacks against its Internet presence?

• Can it demonstrate established procedures for vulnerability management, intrusion prevention, incident response, and incident escalation and investigation?

• Can it show documented identity management and help desk procedures for authenticating callers and resetting access controls, as well as for establishing and deleting accounts?

The report states that if two or more of these questions are answered with a “No” by a service provider, they should be eliminated as a reliable source if you’re planning to involve customer or other business-sensitive data. The cost of having sensitive data leaked or stolen is incredibly high and can cripple a business. Until services providers can live up to a high standard of dependability, it is recommended to be cautious about who you trust with storing sensitive information.

The IT advantages of cloud computing

Many businesses are switching their infrastructure to a cloud-based one, and it’s clear to see why. The benefits are abundant; it gives a business more freedom and customization while freeing up valuable budget resources for more important processes. It’s not just the business that reaps the benefits from the change. IT departments have the most to gain from the conversion, and here’s why:

Simplified Model: IT organizations are mostly concerned with the costs related to maintenance and how to align their budget with the needs of the business. Implementing cloud services in their infrastructure gives the company more direct control over operating expenses (OPEX) and capital expenditure (CAPEX). Freeing up the budget for the IT department will also give them room to focus on increasing revenue and growing the company.

Appropriate Size: The cloud is not limited by spatial restrictions like typical data hosting; it can grow and shrink depending on necessity. It offers rapid deployment that enables it to quickly scale in size to meet the need of application usage and can accommodate “peak times” of increased traffic.

Ease of Integration: The cloud is flexible, secure, and has access mechanisms that make it a great option as a core platform. Many applications for use by enterprises require integration outside of the structural mainframe.

Security: Cloud services are system-based and not point-based, meaning they are secure on all levels of the infrastructure, including applications, remote networks, and software. It also supports users connecting from non-secure sources, such as from a mobile network. These safeguards protect the database on multiple levels and helps prevent gaps that hackers and get into.

Infrastructure Safeguards: One of the most vital things a business can do to protect itself is to have preparedness in case of disaster or other situations. Standard recovery systems only protect the most important applications of a business. With cloud services integration, the entire infrastructure can be protected because its scalability incorporates into data recovery.

Cloud Computing vs. SaaS

You’ve no doubt heard the terms “cloud computing” and “software as a service” tossed around almost interchangeably, so what is the difference between the two?

The term “cloud” refers to the type of Internet networking that is more of an abstraction than a physical anomaly. In early network drafts, the concept of interconnected computers was originally depicted as clouds linked together on a flowchart. The intricate system of networked computers that came to make up modern Internet eventually adopted the term “cloud computing” to describe its functionality. With early computers, users didn’t own the computer and merely rented time from a server. Many years later, users owned personal computers but had the added responsibility of keeping software up to date and had to manually backup data. Now, the two models of computing have meshed together; consumers own personal computers and devices but are also renting out server time elsewhere. Instead of relying on one server to complete tasks, we’re now drawing information from several different sources.

Any time you use a computer that is not in your physical location, it’s some form of the cloud. Most often, you use the cloud in terms of “software as a service” (SaaS), such as with online versions of applications and software like e-mail, online financing, social media, or data hosting. SaaS can either be free or require a paid subscription. With SaaS, your personal account is connected to data stored outside of your computer or device. As long as you have an Internet connection, you can access the software and information.

So, what is the difference between cloud computing and SaaS?

Pure cloud computing is distinctly different from SaaS in that you create and customize an environment to suit your needs. It is more customizable with unique opportunities for storage and content creation. With SaaS, you are restricted to the features available to you by default through the program or application, though you are able to receive software updates and can back up data automatically. As a true cloud user, you are responsible for the upkeep of applications and servers you own. The price for cloud services can also fluctuate based on usage, whereas paid SaaS subscriptions are a flat rate.

For both choices you need to trust the organization you partner with. Both cloud and SaaS users have to rely on external servers to continue operating as promised. You need to know that the company or service will continue running and have a backup plan in the event something should happen to discontinue its usage. SaaS users can run the risk of restricted functionality or service termination due to a subset of people who use the software illegally or to perform harmful actions. Companies can also change hands and be bought out; this is something that happens quite frequently. In those cases, service agreements and terms of use are subject to change.

What to Expect: Security in 2012

Computer security is often a huge game of cat and mouse – antivirus software companies are always in a race against to protect against the multitude of threats facing the public. Companies and consumers alike are constantly under siege from malware, viruses, hacking attempts, and phishing scams. If you want to be better prepared, keep a lookout for these top security trends in 2012:

Hacking and security breaches are inevitable. They happen every day, and even big companies are not immune. The problem? The large volume of attacks launched every day. Last year, Sony’s Playstation Network went down for several consecutive days and the personal information of several million customers was compromised. Businesses have accepted that it’s no longer about preventing these attacks from occurring; it’s acknowledging that it will happen and plans need to be made for how to respond. The quicker a breach is detected, the easier it is to recover.

Mobile threats are on the rise. To date, the Android OS has attracted the most attention in this area, although it’s highly ineffective since most users don’t keep financial information – the stuff that makes criminals money – on their devices. Smartphone users are essentially in the clear for now, with malware threats being not much more than a nuisance in most cases. However, it’s only a matter of time before the threats become dangerous, especially for other platforms, namely Windows Mobile OS.

Social networks are a large target. Social network attacks work because they fool the users into willingly giving out information. It’s very easy for hackers to engineer a link that will redirect a user to a website that looks identical, but fake version of a well-known website, such as Paypal or the social network itself. Unsuspecting users then enter their log in information, thus giving the hackers direct access to their information. With 800 million registered members on Facebook alone, the market for hacking attempts has
unlimited potential for criminals.

Code is constantly under scrutiny. Hackers often use known vulnerabilities in programs to launch their attack. An abundance of bugs and flaws means there are that many more openings for a hacker to gain unwanted access. Developers need to take the time to make sure their code is flawless and release updates when they’ve detected a problem.

Personal Devices and Cloud Computing Changing the Way We Think About Security

Mobile carriers and tablet developers boast that this is the age of portable personal devices. With cloud computing services booming along rapidly, consumers have many new resources to add to their browsing repertoire. Along with a new era of computing comes a new way of illegitimately obtaining personal information from consumers. In 2011, the sheer amount of cyberattacks and criminal activity was vast. The majority of these attacks were made against businesses and companies over the Internet. However, experts claim that personal devices have inherent problems when it comes to keeping them secure.

“The rapid inflow of consumer-owned smartphones and tablets is causing significant security challenges for many organizations. IT departments are being asked to connect devices to corporate networks and secure data on these devices, which they have very little control over,” Gerhard Eschelbeck, CEO of Sophos, explained in a letter addressing security concerns. “Due to the high degree of mobility, security requirements are plentiful, including enforcement of use policies, corporate data encryption, access to corporate networks, productivity/content filtering, and of course malware protection. The unique nature of modern form factors (in terms of processing power, memory, battery life) requires rethinking of security and defense mechanisms.”

Eschelbeck believes that cloud computing holds the key for revolutionizing security systems and how threats are handled. He says that by using the cloud as a resource for protecting consumer data, it takes the burden away from the consumer and sets a new standard for regulating security practices. Of course, creating a privacy standard and security system for the cloud imposes a new, unique challenge that developers will have to face.

The Internet will remain the number one source for attacks; it’s been around longer and criminals have developed methods of obtaining information that continue to be successful and lucrative. It will take some time before targeted attacks on personal devices are refined and worthwhile for criminals. In that time, it’s important that the security of consumers is addressed and devices are made more secure.


Adobe trying to revolutionize big data analytics

Analysis of big data is typically a slow and lengthy process that requires a large amount of computing resources and power. Still, consumer data is important for predicting trends and helping companies see the results and outreach of their marketing campaigns. As big data becomes more popular, companies are racing to find the best way to harvest and analyze such vast and expanding amounts of consumer information.

During the Adobe Digital Marketing Summit, Adobe recently announced that its forthcoming Digital Marketing Suite would boast new predictive marketing capabilities that would make it easier to detect patterns and reoccurring behaviors present in big data. This groundbreaking news comes as a relief to market researchers that have been in dire need of a better way to filter through an abundance of data. 

Brad Rencher, senior vice president of digital marketing at Adobe, stated “[…] the data is getting bigger, the details that matter are getting smaller.” Adobe’s marketing suit will help improve on existing digital marketing strategies and offer a wider range of tools to customers, including improved personalized engagement and media monetization. In addition, the predictive analytics will allow marketers to forecast campaign results with multiple ‘what-if’ scenarios and allow them to easily identify risks.

“In the early days of digital marketing, analytics emerged to tell us what happened and, as analytics got better, why it happened,” Rencher said. “Then solutions emerged to make it easier to act on data and optimize results. But the sheer amount of available data presents a challenge to quickly extract insights and act while those insights are still valuable. The new predictive capabilities within the Digital Marketing Suite address these challenges and help marketers turn big data into a big opportunity.”


Cloud computing expecting to grow globally

Cloud computing is the hottest trend of 2012. At tech conferences around the world, it is making a name for itself by being the biggest buzzword across the infosphere. At one particularly impacting South by Southwest session, Morphlabs founder and CEO Winston Damarillo discussed the revolutionary impact of cloud computing on a global scale. He explained that the cloud has the potential to “turbo-charge entrepreneurship in developing nations around the world” without the need for additional hardware, software, and other resources, thereby maximizing the available assets and minimizing cost. Damarillo concluded that such a global networking system of cloud computing would also encourage economic and social growth.

It seems that Damarillo’s dream of a global cloud revolution is not entirely out of reach. The cost of storage has been dropping down steadily, meaning that the sheer volume of cloud storage systems has skyrocketed in mere months. With many companies inside the United States fuelling the initial spark for this budding industry, many international markets are starting to follow suit. Several countries have shown an interest in developing widespread cloud data centers to better serve their communities and solve data solution problems. The cloud market has begun to expand globally, according to market research. Recently, China announced plans to build a 7,800 square meter complex – aptly named “Cloud Valley” – where they will house more than 1,000 cloud servers. China expects this will cause a substantial growth in their cloud market as well as help develop the technology in the industry further.

With a global cloud network, companies will easily be able to expand their outreach and the public will have quick access to important information. Such a widespread networking can only bring growth and a positive impact on the economy. Clearly, the ultimate goal is to develop cloud data centers on global scale that can be made as efficient as possible for everyone.