Internet Exposure Presents Serious Desktop Security Threats Over the past few years, enterprises have successfully Common Security Threats Defined curbed spam, Denial of Service (DoS), and virus-related security breaches. However, risks due to both internal and external Internet exposure have been growing considerably. There are several lines of defense in the corporate network, including network traffic security (such an email virus scanner, spam email blocker, Web Proxy server, and other network-based solutions). Server solutions block many threats – such as many email viruses, network hacking, and other hazards. However, business users receive information in different ways, such as from a client or business partner via CD- or DVD-ROM, USB-drive or other physical data transfer. They also download viruses or spyware hidden in innocent-looking files or installers. These are not always caught by network security solutions. Server-side security solutions have been successful at managing some threats across firewalled networks. However, the growth of mobile computing and wireless hotspots has presented organizations with new vulnerabilities. Traveling employees, for example, use laptops at loosely secured café and hotel access points, open-access hotspots, and home office networks. Security measures “in the wild” are haphazard at best. All it takes is a one errant click on one slyly-crafted phishing link, and any device can be corrupted. Devices that use open networks are essentially an open archive of intellectual property and confidential communications. Laptops that make it back behind the corporate firewall introduce vulnerabilities to the corporate network. According to a recent Microsoft Security Intelligence Report (July through December 2007), vulnerability disclosures have improved since 2006 (see figure 2). However, mobile computing and Internet-exposure threats are growing as mobile work scenarios proliferate. Threats are propagated through directed attacks or, more often, by unaware users who stumble upon malware or spyware in their everyday activity. For example, a malicious object may be introduced by a user who simply clicks a link on a Website or in an email that automatically downloads and opens the object. Sometimes even multiple pop-up warnings are not sufficient to avoid the attack.
Internet Exposure Presents Serious Desktop Security Threats Over the past few years, enterprises have successfully curbed spam, Denial of Service (DoS), and virus-related security breaches. However, risks due to both internal and external Internet exposure have been growing considerably. There are several lines of defense in the corporate network, including network traffic security (such an email virus scanner, spam email blocker, Web Proxy server, and other network-based solutions). Server solutions block many threats – such as many email viruses, network hacking, and other hazards. However, business users receive information in different ways, such as from a client or business partner via CD- or DVD-ROM, USB-drive or other physical data transfer. They also download viruses or spyware hidden in innocent-looking files or installers. These are not always caught by network security solutions. Server-side security solutions have been successful at managing some threats across firewalled networks. However, the growth of mobile computing and wireless hotspots has presented organizations with new vulnerabilities. Traveling employees, for example, use laptops at loosely secured café and hotel access points, open-access hotspots, and home office networks. Security measures “in the wild” are haphazard at best. All it takes is a one errant click on one slyly-crafted phishing link, and any device can be corrupted. Devices that use open networks are essentially an open archive of intellectual property and confidential communications. Laptops that make it back behind the corporate firewall introduce vulnerabilities to the corporate network. According to a recent Microsoft Security Intelligence Report (July through December 2007), vulnerability disclosures have improved since 2006 (see figure 2). However, mobile computing and Internet-exposure threats are growing as mobile work scenarios proliferate. Threats are propagated through directed attacks or, more often, by unaware users who stumble upon malware or spyware in their everyday activity. For example, a malicious object may be introduced by a user who simply clicks a link on a Website or in an email that automatically downloads and opens the object. Sometimes even multiple pop-up warnings are not sufficient to avoid the attack. Common Security Threats Defined
FCS_TCO_Whitepaper_FINAL.docx