'System logical security', as vital as physical one<\/p>\n
Zatni Arbi, Columnist, Jakarta, zatni@cbn.net.id<\/p>\n
We know that businesses and other types of organization have to
\nsecure their systems and infrastructure. We know that they have
\nto physically protect their data centers where their servers,
\nswitches and routers are kept. We also know that each of the PCs
\nshould be secured with padlocks so nobody can open the housing
\nand steal the hard disk.<\/p>\n
We also know that information systems should be protected from
\nviruses, hackers' and crackers' attacks. Even a home PC needs a
\nfirewall, particularly if it is hooked to the Internet via a
\nbroadband connection 24 hours a day. A firewall is a piece of
\nsoftware -- or a collection of software -- that acts like palace
\nguards that keep unwanted guests away. The firewall sits in the
\nso-termed gateway server, which is located on the border between
\na private network and the Internet.<\/p>\n
What I have just learned is that the complete set of system
\nprotections based on software is called the \"logical security\".
\nFrankly, I found it logical to call the other type of security
\n\"physical\", as it relies on physical means to secure the physical
\nsystems. I just could not see the logic in calling the software-
\nbased security logical, as we certainly need to be just as
\nlogical in implementing physical security.<\/p>\n
Now, have I succeeded in leaving you as confused as I am?
\nName games aside, it turns out that logical security is already
\nan accepted term in the industry. In fact, it has been recognized
\nthat logical security is just as important as physical security.
\nUsually, an IT manager does not have much problem in implementing
\nphysical security -- a lockable door, server racks with locks,
\netc. However, convincing the company's board of directors to
\napprove an investment in logical security for their e-business
\nsystems usually turns out to be a grueling task, because, unlike
\nphysical security measures, logical protection is not visible to
\nthe naked eye.<\/p>\n
* Threats<\/p>\n
Information technology can make businesses far more efficient.
\nAt the same time, it also exposes them to multiple threats. We
\nhave mentioned viruses and hacker attacks as examples of
\ninvisible threats. Others include manholes, or the \"back doors\"
\nthat a system developer may leave open, either deliberately or
\ninnocently.<\/p>\n
The first step in the enforcement of logical security is a
\nprocess known as the hardening of the operating system. This
\ninvolves removing all the software tools and utilities that are
\nnot used, setting to off all unnecessary administrative options
\nand activating, as well as optimizing, all the built-in security
\nfeatures.<\/p>\n
For example, if you are running Windows XP on the PC that
\nserves as your Internet gateway, you can activate the built-in
\nfirewall to reduce the possibility that a computer hacker
\nsomewhere on the Internet will have access to your computer and
\ndo various things -- including using your machine to launch
\nprescheduled and concerted Denial of Service (DoS) attacks to
\npush another computer system to its knees.<\/p>\n
However, just as protecting your computer from viruses is a
\nnever-ending effort, so is securing a system logically. While
\nviruses give companies like McAfee, Symantec and Trend Micro a
\nlot of business, the threats that we have been talking about have
\nalso enabled companies, such as Check Point, TrueSecure, Internet
\nSecurity Services (ISS), Computer Associates and so many others,
\nto flourish. They build their business based on the fact that no
\noperating system and third-party protection can be 100 percent
\ntamper-proof, 100 percent of the time.<\/p>\n
What do their products do? These companies will keep a
\ncontinuously updated database of the threats that loom out there
\nin cyberspace and provide the necessary fixes, patches,
\nutilities, etc., to seal the doors that attackers can take
\nadvantage of.<\/p>\n
* Check Point<\/p>\n
Check Point is one of the rising stars in the area of Internet
\nsecurity, the others being AXENT Technologies, CyberGuard,
\nNetwork Associates and, of course, Cisco Systems. In the past,
\nlogical security products used to be affordable only to large
\nenterprises, but, since early last year, Check Point has offered
\nproducts that are targeted to small businesses and SOHOs (Small
\nOffice Home Office) as well.<\/p>\n
Among the products for this segment are a series of Firewall
\nand VPN combos. VPN, or Virtual Private Network, is an industry
\nterm for a \"tunnel\" inside the public Internet cloud that
\nprovides authorized users with secure access to a company's
\nprivate resources. There is what we call the intranet VPN, which
\nallows employees to access company data from their home or hotel
\nroom, for example. We also have extranet VPN, which suppliers can
\nuse to place their orders and manage their inventory levels. A
\ncombined firewall and VPN will balance the openness of an
\norganization's network and the privacy and integrity of its
\ninformation assets.<\/p>\n
At present, how are our small and medium enterprises embracing
\nthe issue of logical security? \"In general, they still regard
\nlogical security as an investment that they can afford to
\npostpone,\" said Agus Pracoyo, Channel Manager at PT Indocom
\nPrimanusa, the Indonesia distributor for Check Point and ISS.
\nThat is not very surprising, as we have not really left the
\ndifficult times behind us yet and neither have our IT budgets yet
\nimproved.<\/p>",
"url": "https:\/\/jawawa.id\/newsitem\/system-logical-security-as-vital-as-physical-one-1447893297",
"image": ""
},
"sponsor": "Okusi Associates",
"sponsor_url": "https:\/\/okusiassociates.com"
}