| Join Our List
|
|
|
|
Dear Sacha,
Computer
security remains mysterious and, when we think about it and try to
figure it out, vaguely frightening to most of us. Who can blame
us? The only time we hear about computer security is when it has
failed. We hear talk of how, "according to the Pentagon, the
Defense Department detects 3 million unauthorized "scans"-or attempts
by would-be intruders to access official networks-on its computers
every day." As if that weren't enough to give us pause, there is
now talk that "China, North Korea and others are escalating their use
of cyber warfare techniques and are actively training new
hackers." You really have to wonder if it is as bad as all that,
and to ask yourself where do we stand?
|
| Custom vs 'Generic' |
|
| The Hidden Security Risks
The
question that is perhaps at the top of your mind is, "Am I
vulnerable?" The other, more important question is, "Am I at
risk?"
Everyone is vulnerable. Gaining unauthorized access
to a computer system is like stealing a car: if someone really wanted
to steal your car they would get it. You believe your car is safe
and secure, but whatever security features it has will not stop a
serious car thief. Much the same is true with computer
systems. If your car hasn't been stolen, or your computer system
has not been hacked, it is most likely because you are not at risk.
This
brings us to the question of whether you are at risk. The answer
is that, no, you probably are not at risk. The global and
national organizations naturally receive the lion's share of this
undesirable attention. The smaller and more local the target, the
smaller the chance that a serious hacker will be interest in attacking
it. A new report from Fortify, a software security firm, states
that those who suffer most from these attacks are the various branches
of the military and especially the Department of Defense (DoD).
"The DoD is arguably the largest Internet user on the planet, with more
than 11 million users. These systems are often a major target for
hackers, both domestic and international."
Let's not be
alarmed. It is true that the DoD has immense resources. If
they are being attacked by some of the best hackers in the world, they
certainly have some of the experts and minds in the world to keep these
criminals at bay. Yet even the DoD has vulnerabilities. It
may well seem counter-intuitive, but "custom-built applications are
often the weakest link". This makes more sense than you might
initially think. It is true that a customized tool is almost
always better than a generic tool. It is also true that if a
customized tool has a weakness or failing, you won't know about that
problem until the tool fails.
Take Microsoft's Windows or
Outlook as an example. If someone in Hong Kong, France, or
Vermont is the victim of some virus or hacking attack, Microsoft can
analyze the problem and provide a solution for everyone in the whole
world. When someone discovers or suffers from a weakness in this
'generic' product, everyone benefits from increased security.
Another great benefit is that there are people ready and able to
address security issues. This may well be a more difficult and
time consuming process for customized applications.
This is the
same advantage the ElectronicTendering System offers. It offers a
'generic' solution that everyone can use. Should one user
encounter a problem, the solution is applied to the benefit of
all. There is no patchwork solution or jury-rigging. There
is no waiting for people to free up from other projects to look at your
application. You have constant, reliable service. Everyone
knows where they stand and everyone has the same advantages.
|
|
Security
is about being informed and vigilant rather than about being
invulnerable. Today we are constantly being led to believe that
customized solutions are better than 'generics'. When it comes to
computer security, as even the DoD is discovering, this can be a
terrible mistake. If you're looking for an online procurement
product, don't immediately jump for a customized product. Take a
moment to remember that products not heavily customized to your needs
have many hidden advantages.
Sincerely,
Sacha Hartmann
YSER Inc.
|
|
|