пʼятниця, 14 вересня 2012 р.

Information security audit - ч. 2


  • analysis of existing concepts, standards, policies, and information security solutions;

  • File copy protection software


  • documentation and analysis of the organizational business needs of the organization;

  • assessment of the relevant legal acts and industry standards. Usb protection software


Independently carry out a full audit of the almost impossible: as a rule, in the state of no experts for this purpose, and hire them specifically to audit inappropriate. In addition, the most important aspect of the audit is the independence and objectivity of the auditors - the results of the audit in the end depends on the effectiveness of information security and business competitiveness.


 


Zecurion company offers services of audit information security in organizations financial, production, energy and other industries. High skills and many years of experience in building information security management systems enables professionals Zecurion be competent expertise of existing procedures to protect information.

Computer safe

Computer safe: the current system of control?


Many parents fear for their child, roam unchecked on the internet, trying to limit access to undesirable information through a variety of technical methods. But in order to understand which one is better, and how they work, you must have at least a general idea of what it is and what they eat. Usb parental control software

Parental control software




You can set filters on the computer, which restrict access to dangerous sites. But this does not give an absolute guarantee, because the concept of risk in this case can be very subjective. That is, this measure is good, but not enough. Filters themselves are not classified several categories on the basis of his action.



The first - the so-called "white list", that is at the heart of the filter for access only to specified and trusted sites. However, these lists sharply limit the possibility to study the Internet space, that is, from the wealth of the network (and in fact there is a lot of really useful) is a small part.

And if a young child is exactly what you need, you will be a bored teenager.



Another type of filtering software operates on a "black list", which lists are not allowed and forbidden to access sites. When trying to open the forbidden page, the computer said no. This method works, but can fail for two reasons. First, the black lists are updated slowly, and secondly, if the tech-savvy child will pick up the password, all the efforts of parents come to naught. "Hazardous Sites" as, among other things, often change their address, and the catch in the vast sea of online information is all impossible. A so-called "home pages" often do not take into account, even though they can sometimes be a real threat.

Rohos Logon Key for Windows (Usb flash encryption software)

Rohos Logon Key for Windows / Mac with Ironkey. Your PC and the data under the protection (Part 1).


"Protect my computer ...". "Get the latest security updates ...". "Programs of two-factor authentication ...". Encryption software for usb drives You can find answers to these questions and more on computer security, using a normal search engine Google. Yes, there is a wide range of solutions available to users, so that they no longer worry about their precious personal data on your PC or laptop's USB device.


Data encryption software


Recently we have been delivered to the office of three devices with hardware encryption - IronKey Personal S200 1GB, Kanguru Defender 1GB and Kingston DataTraveler Vault 2GB. This time we want to present you with an overview IronKey. Now the long-awaited opportunity to play with this USB flash drive and configure it for secure logon to Windows with Rohos Logon Key has become a reality. Let's start with a thorough acquaintance with the IronKey Personal S200 1Gb.


Key Features:



  • Flash Drive with hardware encryption

  • Established sequence of self-destruction

  • Anti-Malware Protection

  • Portable access to data on different platforms

  • Easy device management

  • Secure Data Recovery


More information about these and other features in the IronKey read 2 of the review. (Coming soon)

Hybrid Analysis

Hybrid Analysis


At the heart of high performance Zgate to protect against leaks is a special approach to the analysis of the intercepted traffic. Most modern DLP technology used 1.2, sometimes outdated, unable to ensure the accuracy of system response to the transfer of sensitive information. Unlike other DLP-solutions for leak detection Zgate conducts hybrid analysis messages with more than 10 specialized technology detection of confidential information. file protection software


best usb protection software


The complex analysis of hybrid technology includes already proven technology on the market, such as regular expressions, or digital prints (DocuPrints), More sophisticated techniques of content analysis (MorphoLogic), A self-learning technology is proprietary (SmartID) And specialized OCR-technology for analyzing the image files. The combination of modern technology and flexible configuration tools use results in a maximum efficiency of the system: the use of hybrid analysis increases the accuracy of detection of 60-70% of the average for existing DLP to 95% in Zgate.


Each technology of complex Zgate accurately detects confidential information of a certain type and size. Thus, the technology of digital prints is more effective to control the use of such documents, the content of which does not change or changes only slightly - for example, contracts. With regular expressions, it is easy to determine the formal personal data, search the dictionary helps to find information relevant to a specific subject category, etc.


None of the existing technology is not universal, so that only a competent combination of different technologies can maximize the accuracy of detection of sensitive data. Zgate provides the ability to use to analyze the contents of sent messages and documents any combination of the proposed technologies. This allows you to customize the system individually, taking into account the characteristics of the information structure of each organization - to protect the ones sensitive data that are most critical to the company.

Usb parental control software

Parental control programs


Parental control programs solve some global problems:


Parental control software



  • limiting access Child information that could have a negative effect on him;

  • limit computer time in general or to a specific program;

  • prohibition to visit certain sites, play games, etc.;

  • the conduct of a child at the computer, in other words, monitoring everything that he does. Usb parental control


StaffCop Home Edition decides it is the latter class of problems, as the monitoring and control of the most effective compared to a simple ban.

Forbidden fruit is always sweet, and no matter how powerful and intelligent system was not a ban, there is always a way to get around. For example, using a certain program, you can allow your child to play games no more than 2-3 hours a day. But intelligent child quickly figure out that the game you can rename, move, and control program will not identify it as a game. Another example, you have decided to ban access to websites with erotic content, the typical solution of systems of control of web browsing - an analysis of the site's URL or search its database whether to banned site. In this case, nothing will stop the child if he would use the site doubles, mirrors or anonymous proxy that allows you to bypass these programs.


From this we can conclude that we can try to limit access, but it will always be able to get around a smart kid. The Internet is full of all sorts of tips how to do it. Therefore, to replace a similar, ineffective means of parental control programs have come a new generation, based on the monitoring of the child's actions on the computer.

четвер, 13 вересня 2012 р.

Encryption software for usb drives - Study the shadowing - part 2

This feature is in many modern products, such as, Safend from the same company, Sanctuary Device Control company Lumension, Smartline DeviceLock and Zlock company SecurIT. Personal encryption software


The principle of the shadow is quite simple: when writing files to an external storage backing up data, along with additional information (user name, application, date, time) is stored on the hard disk and later transferred to the server. Then, the security officer can go to the database and view the shadow copies of suspicious files.


Portable encryption software


Obviously, the use of this feature has some limitations, since the mass introduction of this function in a large organization with many users can create significant problems.


First, if all users will be copied to removable media a lot of information, it will create an increased load on the network. Second, in order to analyze all this information to a large number of people or any intelligent automated tools, while the task of searching, purchasing, configuration and integration with access control is far from trivial.


In this connection may be more justified selective use of shadow on the computers of individual employees. The principle of selection of these employees may be different, for example, for new employees during the probationary period, for employees, for which there is any suspicion, for each employee one week a year, etc.


So, try to figure out what the shadow copy from a technical point of view, and how it actually works in the case of two products: DeviceLock 6.3 (Build 14161) from the company SmartLine Inc. and Zlock 2.0.1.597 from company SecurIT.

Study the shadowing - ч. 5



Usb security key software






















Without a shadow

Data theft protection tool

DeviceLock



Zlock



One big file



125 c.



150 c. (+20%)



175 c. (+40%)



A number of small



760 c.



880 c. (+15%)



935 c. (+23%)



But we need to evaluate not only the data writing speed, but also the correctness of the shadow. When copying small files in the shadow copy all recorded correctly, and the file in 418 MB awaited surprise. So, in the local directory Zlock shadow copy of the file appears immediately at the start up, and its size increased simultaneously with the recording drive. In the case of DeviceLock this did not happen. Even after recording the stick system continued to work actively with the hard drive, and a copy of a fully formed only after 135 seconds after the end of the recording.