NETWORK WORLD NEWSLETTER: DAVE KEARNS ON WINDOWS NETWORKING TIPS 12/01/04 Today's focus: Unisys outlines top-10 security risks for 2005
Dear [EMAIL PROTECTED], In this issue: * Application software breaches will lead to 'lemon laws', plus ��other predictions * Links related to Windows Networking Tips * Featured reader resource _______________________________________________________________ This newsletter is sponsored by SBC Dialing for Dollars CRATE & BARREL'S VOIP MOVE NETS SAVINGS AND FLEXIBILITY An apples-to-apples comparison showed that a centralized, software-based, IP-based platform could provide significant cost savings and productivity benefits over a comparable, traditional PBX system. Download whitepaper now, click here http://www.fattail.com/redir/redirect.asp?CID=88834 _______________________________________________________________ COMPREHENSIVE ENTERPRISE STORAGE INFORMATION Go to NW Fusion's Research Center for detailed information on enterprise storage. Find the latest breaking news, case studies, white papers, commentary, reviews and more. Topics on how ILM impacts your storage strategy, how to migrate to a new tape drive, how to link SAN islands and more are all found in the Research Center. Click here: http://www.fattail.com/redir/redirect.asp?CID=89316 _______________________________________________________________ Today's focus: Unisys outlines top-10 security risks for 2005 By Dave Kearns The security experts at Unisys have looked into their collective crystal balls and come up with what they believe will be the 10 top security issues for the coming year. In no particular order, they are: * Application software breaches will lead to "lemon laws." * Trusted networks involving business partners and others will �� grow as sources of risk. * The mobile realm will continue to grow as a Petri dish for �� security incidents. * Cyber attack styles will become virulent. * Organized attacks by Internet desperados will increase. * Enterprises will turn to proactive "defense-in-depth" as �� business needs drive security. ��* Credit reporting agencies will become more involved in �� managing the consequences of identity theft. ��* Adoption of federated architectures for identity and access �� management will accelerate. ��* Enterprises will revisit role-based access control for �� identity and access management. ��* Virtual directory technology will increasingly become a �� strategic component of identity integration projects. A couple of these we can dismiss as "no-brainers", some you may not have thought of, while others might need further explanation. Over the next few issues we'll examine each in turn to see what impact it might have on your Windows network. The first item on the list, "lemon laws" for applications, might need further explanation. According to Unisys Chief Security Advisor Sunil Misra, "As applications are brought closer to the edge of the Internet, it is only a matter of time in 2005 until an attack on a specific vendor's application or database product causes damage that leads the customer to sue the software provider for the consequences of the security breach." According to Misra, this will lead application users to demand legislators to create laws that protect them from flawed software. Most state lemon laws are intended for the automotive market, protecting buyers from hidden damage and problems with automobiles while also extending warranties for unfixed problems. Of course, most software comes with no warranty. Before the legislatures can create laws to extend the warranty on software, they will first have to create laws that require warranties. That won't be easy, because no software company wants to provide any assurance that their product will perform the way you expect it to. So I don't think we'll see lemon laws for software by the end of 2005, although we might see the beginnings of a campaign to create them. The second statement, "Trusted networks involving business partners and others will grow as sources of risk," is in the no-brainer category. Digital interactions with business partners will continue to grow. As more partners and business processes are added, the complexity of the system grows. The more complex the system, the greater risk of a security hole. The real answer here is to work only with well-understood standards and protocols and insist that your partners do also. Anything else is just too risky. We'll look at some more of the top-10 in the next issue, stay tuned. RELATED EDITORIAL LINKS Do software users need indemnification? Network World, 11/29/04 http://www.nwfusion.com/news/2004/112904ecindemnify.html _______________________________________________________________ To contact: Dave Kearns Dave Kearns is a writer and consultant in Silicon Valley. He's written a number of books including the (sadly) now out of print "Peter Norton's Complete Guide to Networks." His musings can be found at Virtual Quill <http://www.vquill.com/>. Kearns is the author of three Network World Newsletters: Windows Networking Tips, Novell NetWare Tips, and Identity Management. Comments about these newsletters should be sent to him at these respective addresses: <mailto:[EMAIL PROTECTED]>, <mailto:[EMAIL PROTECTED]>, <mailto:[EMAIL PROTECTED]>. Kearns provides content services to network vendors: books, manuals, white papers, lectures and seminars, marketing, technical marketing and support documents. Virtual Quill provides "words to sell by..." Find out more by e-mail at <mailto:[EMAIL PROTECTED]> _______________________________________________________________ This newsletter is sponsored by SBC Dialing for Dollars CRATE & BARREL'S VOIP MOVE NETS SAVINGS AND FLEXIBILITY An apples-to-apples comparison showed that a centralized, software-based, IP-based platform could provide significant cost savings and productivity benefits over a comparable, traditional PBX system. Download whitepaper now, click here http://www.fattail.com/redir/redirect.asp?CID=88833 _______________________________________________________________ ARCHIVE LINKS Breaking Windows networking news from Network World, updated daily: http://www.nwfusion.com/topics/win2000.html Archive of the Windows Networking Tips newsletter: http://www.nwfusion.com/newsletters/nt/index.html _______________________________________________________________ FEATURED READER RESOURCE DOWNLOAD INDUSTRY WHITE PAPERS NOW NW Fusion's White Paper Library is your source for the latest industry white papers. Recent additions to the library include white papers on securing remote access, VOIP and productivity, domain name system best practices, WLAN security, IT documentation and much more. Click here to download: <http://www.nwfusion.com/vendorview/whitepapers.html> _______________________________________________________________ May We Send You a Free Print Subscription? You've got the technology snapshot of your choice delivered at your fingertips each day. Now, extend your knowledge by receiving 51 FREE issues to our print publication. Apply today at http://www.subscribenw.com/nl2 International subscribers click here: http://nww1.com/go/circ_promo.html _______________________________________________________________ SUBSCRIPTION SERVICES To subscribe or unsubscribe to any Network World e-mail newsletters, go to: <http://www.nwwsubscribe.com/Changes.aspx> To unsubscribe from promotional e-mail go to: <http://www.nwwsubscribe.com/Preferences.aspx> To change your e-mail address, go to: <http://www.nwwsubscribe.com/ChangeMail.aspx> Subscription questions? Contact Customer Service by replying to this message. This message was sent to: [EMAIL PROTECTED] Please use this address when modifying your subscription. _______________________________________________________________ Have editorial comments? Write Jeff Caruso, Newsletter Editor, at: <mailto:[EMAIL PROTECTED]> Inquiries to: NL Customer Service, Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 For advertising information, write Kevin Normandeau, V.P. of Online Development, at: <mailto:[EMAIL PROTECTED]> Copyright Network World, Inc., 2004 ------------------------ This message was sent to: [EMAIL PROTECTED]
