YNL Logo
YSER Newsletter
Your e-Procurement Community
In This Issue
Custom vs 'Generic'
Quick Links
Join Our List
Join Our Mailing List
Issue: 30 March/2008
Dear Sacha,

Computer security remains mysterious and, when we think about it and try to figure it out, vaguely frightening to most of us.  Who can blame us?  The only time we hear about computer security is when it has failed.  We hear talk of how, "according to the Pentagon, the Defense Department detects 3 million unauthorized "scans"-or attempts by would-be intruders to access official networks-on its computers every day."  As if that weren't enough to give us pause, there is now talk that "China, North Korea and others are escalating their use of cyber warfare techniques and are actively training new hackers."  You really have to wonder if it is as bad as all that, and to ask yourself where do we stand?
Custom vs 'Generic'
The Hidden Security Risks

The question that is perhaps at the top of your mind is, "Am I vulnerable?"  The other, more important question is, "Am I at risk?"

Everyone is vulnerable.  Gaining unauthorized access to a computer system is like stealing a car: if someone really wanted to steal your car they would get it.  You believe your car is safe and secure, but whatever security features it has will not stop a serious car thief.  Much the same is true with computer systems.  If your car hasn't been stolen, or your computer system has not been hacked, it is most likely because you are not at risk.

This brings us to the question of whether you are at risk.  The answer is that, no, you probably are not at risk.  The global and national organizations naturally receive the lion's share of this undesirable attention.  The smaller and more local the target, the smaller the chance that a serious hacker will be interest in attacking it.  A new report from Fortify, a software security firm, states that those who suffer most from these attacks are the various branches of the military and especially the Department of Defense (DoD).  "The DoD is arguably the largest Internet user on the planet, with more than 11 million users. These systems are often a major target for hackers, both domestic and international."

Let's not be alarmed.  It is true that the DoD has immense resources.  If they are being attacked by some of the best hackers in the world, they certainly have some of the experts and minds in the world to keep these criminals at bay.  Yet even the DoD has vulnerabilities.  It may well seem counter-intuitive, but "custom-built applications are often the weakest link".  This makes more sense than you might initially think.  It is true that a customized tool is almost always better than a generic tool.  It is also true that if a customized tool has a weakness or failing, you won't know about that problem until the tool fails.

Take Microsoft's Windows or Outlook as an example.  If someone in Hong Kong, France, or Vermont is the victim of some virus or hacking attack, Microsoft can analyze the problem and provide a solution for everyone in the whole world.  When someone discovers or suffers from a weakness in this 'generic' product, everyone benefits from increased security.  Another great benefit is that there are people ready and able to address security issues.  This may well be a more difficult and time consuming process for customized applications.

This is the same advantage the ElectronicTendering System offers.  It offers a 'generic' solution that everyone can use.  Should one user encounter a problem, the solution is applied to the benefit of all.  There is no patchwork solution or jury-rigging.  There is no waiting for people to free up from other projects to look at your application.  You have constant, reliable service.  Everyone knows where they stand and everyone has the same advantages.
Security is about being informed and vigilant rather than about being invulnerable.  Today we are constantly being led to believe that customized solutions are better than 'generics'.  When it comes to computer security, as even the DoD is discovering, this can be a terrible mistake.  If you're looking for an online procurement product, don't immediately jump for a customized product.  Take a moment to remember that products not heavily customized to your needs have many hidden advantages.
 
Sincerely,
 

Sacha Hartmann
YSER Inc.
Safe Unsubscribe
This email was sent to shar@yserinc.com, by shar@yserinc.com
YSER Inc. | Delaware Technology Park | 1 Innovation Way | Suite 301 | Newark | DE | 19711