Tag Archives: Network

What Is Changing The Game in Network Security?

Interview with Philippe Courtot, CEO, Qualys

Situation: Companies experiencing security breaches and data theft are regularly in the headlines. Those launching these attacks are increasingly well organized and very creative. What is changing the game in network security and how can you respond?

Advice from Philippe Courtot:

  • The movements from enterprise software to Software as a Service (SaaS), and from mainframes to PCs to mobile devices increase the challenges of protecting enterprise environments. Therefore, a cohesive technology platform is imperative.
  • Companies are sensitive to the possibility of attack at any time. There are three principal attack vectors: breach through web applications, breach through email and browsers, and breach by device. Between PCs, iPhones and Android devices, the PC is the most closely linked to the corporate intranet while often the most vulnerable because users are lax about updating their systems and applications.
  • Attackers often target a company executive or high level administrative assistant to access the user’s profile and passwords.  In one type of attack called spear fishing, the attacker creates emails tailored to the person targeted appearing to come from a colleague or friend. When the target clicks on the email, a small piece of code is inserted in the computer, which can give control to the attacker. Another way to gain control of a computer is through physical access. An attacker can learn about a pending vacation via Facebook or twitter, providing an opportunity for home invasion. Once the attacker has access to the computer, they can plant a control program on the system. When the user returns, the attackers can make fast, brief forays inserting additional code or taking data from the enterprise network. They may use the information themselves, or sell it to others.

Given these new realities, how does a company prevent attack?

  • First, the company must thoroughly analyze and understand their vulnerabilities which are all potential entry points for an attacker. Once vulnerabilities are mapped, work on a schedule to remediate them.
  • Second, you must educate all users about the threats. This is especially critical for any personnel who have access to secure company data.
  • Third, invest in and build additional defenses to shield all remaining vulnerabilities. Make sure that employees are drilled on the defenses and that they are used. One growing trend is the use of two factor authentication, requiring employees to carry token generation devices with them to use in addition to their password. These tokens can be delivered by smart phone.

You can contact Philippe Courtot at pcourtot@qualys.com

Key Words:  Network, Security, Breach, Data, Theft, Response, Mainframe, PC, Mobile, Enterprise, Environment, Criminal, Government, Attack, Vector, Social Network, Email, Browser, Web, Application, Device, Spear Fishing, Executive, Assistant, Profile, Password, Vulnerability, Educate, Defense, ID

[like]

What are Best Practices to Open New Markets? Five Thought Starters

Interview with Greg Curhan, CEO, Clickworker, Inc.

Situation: Clickworker was founded and has gained nice traction in Europe. Focusing first on Silicon Valley, they want to expand into the US. This means identifying companies that could use their service, as well as appropriate contacts within those companies. What are best practices to open new markets for a product or service?

Advice:

  • Start with a set of profiles of possible customers and contacts.
    • If you have a history of success, look for companies in similar industries, and with similar profiles as your current customers. Build a set of profiles of customer companies, and use these profiles against the lists that you develop to identify and prioritize prospects.
  • Develop a list of who’s in your addressable market and narrow this list to prospects.
    • Work with your staff and systematically review past jobs and companies that you’ve been associated with, including vendors and suppliers. Identify a list of possible target customers, and use LinkedIn, Link Silicon Valley and other social networking sites to confirm and develop your contact list.
    • Also work with companies that develop and update databases of local companies including contact lists, web sites, telephone numbers, revenue data and SIC codes. For example, Rich’s Business Information develops searchable lists of companies Northern and Southern California. Dunn and Bradstreet and others also sell searchable lists of companies and positions.
    • Subscribe to the locally published Business Journals in your target markets. These Journals generate Books of Lists of local companies and contact information.
    • Network with those you know and ask who they know. This is more effective once you’ve developed a set of profiles, so that you can clearly characterize what kinds of companies you seek.
  • This is an initial set of ideas. What has worked for you as you opened new markets?

You can contact Greg Curhan at greg.curhan@clickworker.com

Key Words: Customer, Profile, Contacts, Suspects, Prospects, LinkedIn, LinkSV, Social Networking, Rich’s, D&B, Business Journal, Network   [like]