Business Security Information

It seems like there are numerous websites on the Internet covering the main aspects of computer security but very few on physical security for a typical business.  On this website I try to cover all types of security on this website, but today I want to focus on physical security.

Physical security is mainly related to the protection of people, buildings, equipment and other physical or tangible assets.  Physical security is often overlooked in this high-tech business world where protecting digital assets of a business is emphasized. Adequately protecting digital assets, though, depends on implementing physical security as well.

Well, we have had a good Thanksgiving meal, and most everyone has headed off to bed so it is now time for me to get down to writing this article.  Yesterday I received an e-mail from a friend stating she was out of the country visiting a friend that was ill.  Her friend was in need of surgery, and they were trying to recruit a surgeon from Israel and were in need of $2800 to pay for this necessary surgery.  First, I was suspicious that this was a fraudulent e-mail because I had just seen the person and knew that she had no plans of heading out of the country.  Secondly, the e-mail requested $2800 dollars which is a very small amount for a surgery, especially since the e-mail had an urgency about it leading the reader to believe that it may be a matter of life and death.  The return e-mail was also suspicious because the return address was a generic Yahoo e-mail address.

A strike plate is a part of a door lock.  It is the metal plate that is attached, usually with screws, to the door jamb (door frame) and has one or more holes that hold the lock bolt when the lock is engaged.  When the door is closed, the lock bolt extends into the hole which then keeps the door closed.  Refer to the picture for a look at a high security strike plate.

This past month I have been working with a business regarding some physical security improvements, and one of those items was a security or intrusion alarm system.  It got me thinking about businesses that I deal with who usually ask me about why a certain element of security they have implemented, such as security systems, is not working.  Most of the time when I look at their particular situation, one or more elements of the security system does not fit their needs.  Usually this is not discovered until the system has been installed and paid for, leaving the business with a system that does not fulfill their needs and sometimes results in the system not being used after a period of time.  This results in wasted time and money for the business owner as well as poor or nonexistent security.

Crimeware is a form of of malware (malicious software) that is  used to attack your computer and/or network.  Crimeware is designed for one purpose which is to facilitate illegal or criminal activity.

This type of software is often used to commit identity theft.  Also, crimeware allows attackers to capture and export sensitive information which they can sell or use to exploit for some other type of financial gain.  Another common type of crimeware includes phishing kits that allow an attacker with little or no technical skill to launch a phishing attack.  This type of crimeware may include website development software, content for the site, and spamming software that will allow the attacker to send out mass e-mails to their phishing targets.

Let me begin by saying that I am not a big proponent of using security cameras to secure a business.  I have dealt with a number of businesses that install security cameras without looking at their overall security needs.  Businesses that have installed security cameras often think they have adequate security but find out they don’t when a theft occurs.  Even though they have a nice recording (if the camera image quality is good) of the theft or other security incident occurring, the cameras did not stop or prevent the event from happening.  Security cameras can be used as a part of security to protect a business but should not be the first, and definitely not the only, element of security they use to protect their business.

If you have not heard yet, the FTC (Federal Trade Commission) is changing the date they will start enforcing the Red Flags Rule.  The enforcement for this rule was to start last week on November 1, 2009, but has been delayed by the FTC until June 1, 2010.  This was announced by the FTC on Friday, October 30, 2009.

A rootkit is a collection of software programs that contain a variety of tools and allow an attacker root or administrative level access to a computer or network.  Attackers install rootkits usually after having obtained basic user level access to a system, then gaining higher access to the account by using a cracked password or through some other vulnerability on the system which allows them to install software on the system.  Once a rootkit is installed, it allows the attacker to bypass security measures and hide the intrusion.  Rootkits do this by replacing normal operating system components or altering existing system tools or software so as to escape detection.

I just got done watching this short video (2 minutes) on installing a security door plate on a residential door with a wood frame.  It showed how this security plate could provide another layer of security against a criminal that tries to break in by kicking down your door.  As you watch, you will see that the door leads to what appears to be the speaker’s home office.  Although many commercial structures have metal doors with metal door frames which do not need security door plates, I have seen numerous offices and other commercial buildings which have exactly the same type of doors with wood frames where security door plates would have helped reduce the risk of someone kicking down the door.  Also, note that the security door plate helps the deadbolt lock resist such an attack (the door entry lock or door handle lock really is not affected by this security measure.)  Along this line, I would recommend that you install deadbolt locks on your exterior doors if you have not already.  Make sure any exterior door locks you use are resistant to lock bumping (read the definition and watch the videos on lock bumping to understand the dangers from this type of attack).

In security, a Trojan Horse is similar but not the same as it was described in Greek mythology in which the Greeks presented the city of Troy with a wooden horse in which they had hidden their soldiers.  After the Trojan Horse was inside the city and night had fallen, the soldiers emerged from the wooden horse and overtook the city.