<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>EB Security Technical Implementation Guide &#187; Security</title>
	<atom:link href="http://www.eb-implement.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.eb-implement.com</link>
	<description></description>
	<lastBuildDate>Wed, 11 Nov 2009 13:48:07 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Workplace Security  Are You Any Safer At Work From Terrorism</title>
		<link>http://www.eb-implement.com/security/workplace-security-are-you-any-safer-at-work-from-terrorism/</link>
		<comments>http://www.eb-implement.com/security/workplace-security-are-you-any-safer-at-work-from-terrorism/#comments</comments>
		<pubDate>Mon, 28 Sep 2009 11:41:24 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[assessment]]></category>
		<category><![CDATA[threat]]></category>
		<category><![CDATA[workplace]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/workplace-security-are-you-any-safer-at-work-from-terrorism/</guid>
		<description><![CDATA[<p>TABLE OF CONTENTS</p><p>1. The Security Consultant's Perspective...</p><p>2. The Insider Threat...</p><p>3. Threats by the Outsiders</p><p>4. The Terrorist Threat...</p><p>5. Protective Measures...</p><p>1) Security Consultant's Perspective...</p><p>Traditional techniques at combating Workplace...]]></description>
			<content:encoded><![CDATA[<p>TABLE OF CONTENTS</p>
<p>1. The Security Consultant&#8217;s Perspective&#8230;</p>
<p>2. The Insider Threat&#8230;</p>
<p>3. Threats by the Outsiders</p>
<p>4. The Terrorist Threat&#8230;</p>
<p>5. Protective Measures&#8230;</p>
<p>1) Security Consultant&#8217;s Perspective&#8230;</p>
<p>Traditional techniques at combating Workplace Violence pits the disgruntled employee against the system and the potential victims in a waiting game. It seems that the &#8220;Inside Threat&#8221; is reduced to monitoring the known potential, the &#8220;Ticking Bomb&#8221;, while the unknown threats go unmonitored. Threats by &#8220;Outsiders&#8221; are just as common and equally violent. Complicating this challenge, we now must grapple with the threat of terrorism (political and domestic) in our workplaces. I am reminded of a quote by James Baldwin from his book, &#8220;The Price of the Ticket&#8221;. &#8220;No one can possibly know what is about to happen: it is happening, each time, for the first time, for the only time&#8221;. Fighting the potential workplace threat requires a change in tactics and training techniques in order to be proactive.</p>
<p>2) The Insider Threat&#8230;</p>
<p>The &#8220;going postal&#8221; employee is as real in many workplaces as was the case of the rash of Postal Service incidents that gave rise to the phrase by the media. The difference between the postal employee and the ConAgra Shooting, Kansas (July 2004), the DaimlerChrysler Shooting, Ohio (January 2005) and the Weequaic High School Shooting, Newark, NJ (July 2005) North Toledo was the lack of sensationalized media coverage. I have found that career employees who &#8220;go postal&#8221; did not plan to do so over night, nor was he predisposed to kill employees. It was a series of gradual events in the employee&#8217;s life brought about by changes in personal relationships, a diagnosed medical condition perceived unjust or a caustic domestic situation<br />
 gone awry given rise to violence aggression as a form of retaliation at home and the workplace.</p>
<p>The environmental, societal factors and contributing events could not have been more apparent to the trained eye. Perpetrators of workplace violence are victims of their environment because they did not plan their rampage the first day hired. It was a gradual process with changes which bought about behaviors, attitudes and methodical planning clearly evident by the employee&#8217;s daily interactions, physical appearance, verbal utterances and documented slips in performance and efficiency. Everybody can see the indicators in the aftermath but most do not understand how to collaborate to prevent the &#8220;Ticking Bomb&#8221; from exploding before it is too late.</p>
<p>The Threat Assessment Process though intrusive in some quarters is an instrumental process worthy of attention. Subtle but contributory changes in an employee&#8217;s demeanor can be detected with early warning signs to provide assistance and intervention. This response unlike the threat posed by &#8220;The Outsider&#8221; is manageable (predictable)and preventable.</p>
<p>3) Threats By Outsider&#8230;</p>
<p>Confrontational crimes committed by &#8220;Outsiders&#8221; though unmanageable can be mitigated and somewhat preventable. Take the following incidents. A nurse who works at a hospital who tells a horrific story of being punched, kicked, scratched, bitten, nose and ribs broken, stabbed with a pen and suffered eye damage all as a nurse at the hospital are true incidents. He also testified that patients have assaulted his co-workers. This account represents one of several hundred such incidents at hospitals in our Nation yearly. A storekeeper who confronted an armed robber was shot because he did not have enough money. You stop your car at a client&#8217;s business and exchange what you need between the car&#8217;s compartment and the trunk and return to discover the trunk broken into and the goods stolen? How about the lurking perpetrator who finds the pleasure in attacking helpless victims between floors on the stairwell or on the elevator? But nothing is worst than the unsuspecting medical service provider who is confro nted by a client in his home or the office helpless to defend himself without any insight into appropriate protective measures.</p>
<p>These are situational accounts of innocent employees, victims of their unique situations created by their workplace environments and the threats posed by &#8220;Outsiders&#8221;.</p>
<p>4) The Terrorist Threat&#8230;</p>
<p>Though much attention has been given the political terrorist, little is mentioned in the workplace about our homegrown terrorists. The political terrorist who assimilates into the fabric of America to await the &#8220;call to arms&#8221;, is much different than the &#8220;normal&#8221; employee who harbors outward<br />
 political, social and religious positions but, is protected by freedom of speech that permits the employee to maintain antithetical positions for the safety and security of the workplace. Our workplaces are full of ideologies that spawn terrorism; Para-military and militia groups, white supremacist<br />
 groups, black hate groups; those who believe in extreme defense of the unborn, even environmentalist who work on the fringes of the law have spawned eco-terrorists, defenders of animal rights have attacked furriers and researchers and religious sects have spawned &#8220;holy warriors&#8221; who attack commercial and cultural interest. Similar to both of these groups they choose targets of value and opportunity. Unlike the &#8220;Insider&#8221; and the &#8220;Outsider&#8221;, the criminal behaviors of the domestic terrorist advertise their<br />
 moves and are predictable because they are known and apparent.</p>
<p>5) Proactive Measures&#8230;</p>
<p>In no particular order: Train your leaders in Threat Assessment, Synchronize the security process with other departments, Structure personnel security procedures, Design a unique security policy, Plan and Test your emergency<br />
 evacuation plans, implement strategy to prevent and interdict workplace violence by all, Limit &#038; restrict access, Issue a suitable form of identification with photograph, Teach crime prevention and have desktop exercises and scenarios, test your crisis communications plan, run periodic background checks on all employees and establish a repoting policy to encourage early identification of potential perpetrators.</p>
<p>Nater Associates, Ltd is a Security Management Consulting Practice specializing in Workplace Security Issues and dedicated to providing clients superior security services based on Solid Situational Experiences.</p>

	Tags: <a href="http://www.eb-implement.com/tag/assessment/" title="assessment" rel="tag">assessment</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/threat/" title="threat" rel="tag">threat</a>, <a href="http://www.eb-implement.com/tag/workplace/" title="workplace" rel="tag">workplace</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/workplace-security-are-you-any-safer-at-work-from-terrorism/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Weakest Link In Your Information Security Chain</title>
		<link>http://www.eb-implement.com/security/the-weakest-link-in-your-information-security-chain/</link>
		<comments>http://www.eb-implement.com/security/the-weakest-link-in-your-information-security-chain/#comments</comments>
		<pubDate>Wed, 15 Jul 2009 07:13:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[e-fraud.]]></category>
		<category><![CDATA[Information Security]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/the-weakest-link-in-your-information-security-chain/</guid>
		<description><![CDATA[<p>At times I laugh when I see companies, banks, educational institutions laying so much emphasis on the deployment of firewalls, anti-virus, server room protection e.t.c.</p><p>Yes firewalls, anti-virus are good but without a comprehensive information security program in place all these security te...]]></description>
			<content:encoded><![CDATA[<p>At times I laugh when I see companies, banks, educational institutions laying so much emphasis on the deployment of firewalls, anti-virus, server room protection e.t.c.</p>
<p>Yes firewalls, anti-virus are good but without a comprehensive information security program in place all these security technology tools will only provide a false sense of security. When we start thinking about information security, we need to think about security as a system  not a single technology.</p>
<p><b>Let Us take a Hypothetical Scenario</b></p>
<p>A company has over 5 million clients. It has an e-business website. It has deployed firewalls, anti-virus solutions and other vendor security solutions. It conducts 90% of its business through its e-business website.</p>
<p>A Hacker studied the situation and asked; how do i get at this company?</p>
<p>What is the weakest link in the companies information security model? Why the weakest link? The hacker knew that going through the firewall, the intrusion detector systems would take him time which he was not willingly to spare. The hacker found out through painstaking research and study that the over<br />
 5 million customers were the weakest link.</p>
<p><b>The attack followed;</b></p>
<ul>
<li>A fake website of the company was created.</li>
<p>
<li>E-mails were sent to the company&#8217;s over 5 million customers.</li>
</ul>
<p> The E-mail read.</p>
<p>Dear customer,</p>
<p>We have deployed new security solutions that will help increase the security of conducting business with us through our website. Please kindly enter your contact and billing details, by clicking on this link. www.wilbroser.com/details.html.<br />
 Thanks for your cooperation.</p>
<p>Yours faithfully,<br />
 Alex Brown<br />
 Head of IT</p>
<p><b>Result of the E-mail</b></p>
<p>Out of the 5 million customers, 3 million of them clicked the link and reentered their contact and billing details.<br />
 The remaining 2 million felt indifferent and didn&#8217;t respond to the mail. The credit card information of over 3 million customers was stolen.</p>
<p><b>Why did the Hacker Target the 5 Million Customers of the Company?</b></p>
<p>The hacker found out that to commit e-fraud, it will take more effort and time going through the firewall, anti-virus and the other security solutions of the company.</p>
<p>The thought of the weakest link came. The company has never embarked on a security awareness training program for customers. A lot of emphasis has been on staff and security solutions.</p>
<p>The hacker identified the customers as the weakest link. Having identified the weakest link , the attack was launched.</p>
<p><b>Why Was the Attack Successful?</b></p>
<p>1. The over 5 million customers. None could tell the difference between a fake copy of the company&#8217;s website and the company&#8217;s website.</p>
<p>2</p>

	Tags: <a href="http://www.eb-implement.com/tag/e-fraud/" title="e-fraud." rel="tag">e-fraud.</a>, <a href="http://www.eb-implement.com/tag/information-security/" title="Information Security" rel="tag">Information Security</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/the-weakest-link-in-your-information-security-chain/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How To Cover Your Tracks On The Internet</title>
		<link>http://www.eb-implement.com/security/how-to-cover-your-tracks-on-the-internet/</link>
		<comments>http://www.eb-implement.com/security/how-to-cover-your-tracks-on-the-internet/#comments</comments>
		<pubDate>Sat, 16 May 2009 10:44:29 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[Safety]]></category>
		<category><![CDATA[tracks]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/how-to-cover-your-tracks-on-the-internet/</guid>
		<description><![CDATA[<p>Every single time you access a website, you leave tracks. Tracks that others can access. If you don't like the idea, find out what software can help you cover them.</p><p>Anti Tracks</p><p>Anti Tracks is a complete solution to protect your privacy and enhance your PC performance. With a simple c...]]></description>
			<content:encoded><![CDATA[<p>Every single time you access a website, you leave tracks. Tracks that others can access. If you don&#8217;t like the idea, find out what software can help you cover them.</p>
<p>Anti Tracks</p>
<p>Anti Tracks is a complete solution to protect your privacy and enhance your PC performance. With a simple click Anti Tracks securely erase your internet tracks, computer activities and programs history information stored in many hidden files on your computer.<br />
 Anti Tracks support Internet Explorer, AOL, Netscape/Mozilla and Opera browsers. It also include more than 85 free plug-ins to extend erasing features to support popular programs such as ACDSee, Acrobat Reader, KaZaA, PowerDVD, WinZip, iMesh, Winamp and much more. Also you can easily schedule erasing tasks at specific time intervals or at Windows stat-up/ shutdown.<br />
 To ensure maximum privacy protection Anti Tracks implements the US Department of Defense DOD 5220.22-M, Gutmann and NSA secure erasing methods, making any erased files unrecoverable even when using advanced recovery tools.</p>
<p>Free Download: http://www.deprice.com/antitracks.htm</p>
<p>East-Tec Eraser</p>
<p>East-Tec Eraser goes beyond U.S. Department of Defense standards for the permanent erasure of digital information and easily removes every trace of sensitive data from your computer.</p>
<p>Completely destroy information stored without your knowledge or approval: Internet history, Web pages and pictures from sites visited on the Internet, unwanted cookies, chatroom conversations, deleted e-mail messages, temporary files, the Windows swap file, the Recycle Bin, previously deleted files, valuable corporate trade secrets, business plans, personal files, photos or confidential letters, etc.<br />
 East-Tec Eraser 2005 offers full support for popular browsers (Internet Explorer, Netscape Navigator, America Online, MSN Explorer, Opera), for Peer2Peer applications (Kazaa, Kazaa Lite, iMesh, Napster, Morpheus, Direct Connect, Limewire, Shareaza, etc.), and for other popular programs such as Windows Media Player, RealPlayer, Yahoo Messenger, ICQ, etc. Eraser has an intuitive interface and wizards that guide you through all the necessary steps needed to protect your privacy and sensitive information.<br />
 Other features include support for custom privacy needs, user-defined erasure methods, command-line parameters, integration with Windows Explorer, and password protection.</p>
<p>Free Download: http://www.deprice.com/eastteceraserstandard.htm</p>
<p>Ghostsurf Platinum</p>
<p>GhostSurf Platinum ensures your safety online by providing an anonymous, encrypted Internet connection, and GhostSurf stops spyware, eliminates ads and erases your tracks. GhostSurf lets you customize your privacy level in real-time to suit your surfing needs. A variety of options enable you to block personal information, mask your IP address, route your data through anonymous hubs and even encrypt your Internet connection. GhostSurf&#8217;s Privacy Control Center allows you to see and block every piece of data that your computer emits over the Internet, preventing even your Internet Service Provider (ISP) from creating a profile on you.</p>
<p>Free Download: http://www.deprice.com/ghostsurfplatinum.htm</p>
<p>CyberScrub Pro</p>
<p>Sensitive data can easily fall into the wrong hands. And because Windows is not capable of deleting information beyond recovery, you are at risk!</p>
<p>Passwords, financial documents, even those &#8220;about last night&#8221; e-mails are fair game for the IT professional, computer technician or hacker.</p>
<p>CyberScrub allows you to purge, wipe and erase data with methods that far exceed US Department of Defense standards for file deletion (DOD 5220.22).</p>
<p>CyberScrub Erases:</p>
<p>* Selected Files/Folders beyond recovery</p>
<p>* Cookies</p>
<p>* Cache (Temporary Internet Files)</p>
<p>* All traces of Peer2Peer activity (16 popular apps)</p>
<p>* Website History</p>
<p>* Chat Room Conversations, Instant Messages</p>
<p>* Pictures viewed</p>
<p>* Email &#038; &#8220;previously deleted files&#8221;</p>
<p>* Recycle Bin, Recent Documents</p>
<p>* Swap and other &#8220;locked&#8221; files that contain sensitive data</p>
<p>* Peer2Peer Applications activity</p>
<p>Free Download: http://www.deprice.com/cyberscrubprofessional.htm</p>
<p>John Deprice owns and operates http://www.deprice.com</p>

	Tags: <a href="http://www.eb-implement.com/tag/internet/" title="internet" rel="tag">internet</a>, <a href="http://www.eb-implement.com/tag/safety/" title="Safety" rel="tag">Safety</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/tracks/" title="tracks" rel="tag">tracks</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/how-to-cover-your-tracks-on-the-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Christina Aguilera In Security, Back to Basics</title>
		<link>http://www.eb-implement.com/security/christina-aguilera-in-security-back-to-basics/</link>
		<comments>http://www.eb-implement.com/security/christina-aguilera-in-security-back-to-basics/#comments</comments>
		<pubDate>Thu, 16 Apr 2009 06:35:03 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[breakthrough for a broken heart]]></category>
		<category><![CDATA[Christina Aguilera]]></category>
		<category><![CDATA[love]]></category>
		<category><![CDATA[Paul Davis]]></category>
		<category><![CDATA[toxic guy]]></category>
		<category><![CDATA[transformation]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/christina-aguilera-in-security-back-to-basics/</guid>
		<description><![CDATA[<p>Christina Aguilera has gone back to basics, stopped dating toxic guys and married a down-to-earth music executive. Christina is becoming more secure in her womanhood. Her new elegant look and soul CD Back to Basics are evidence of her personal evolution and transformation.</p><p>Christina's crus...]]></description>
			<content:encoded><![CDATA[<p>Christina Aguilera has gone back to basics, stopped dating toxic guys and married a down-to-earth music executive. Christina is becoming more secure in her womanhood. Her new elegant look and soul CD Back to Basics are evidence of her personal evolution and transformation.</p>
<p>Christina&#8217;s crusade to help victims of domestic violence is dear to her heart. She herself grew up in an unstable environment as there was abuse in her household. Christina works a lot with a domestic violence and child-abuse center in Pittsburgh. She is passionate about rebuilding battered women&#8217;s self-esteem and providing for their necessities.</p>
<p>Christina unveiled herself a bit telling Seventeen magazine: &quot;Thank God for my first record: I was able to get my foot in the door with a [CD] that wasn&#8217;t so much me but has given me the freedom to do what I want to now.&quot;</p>
<p>Married to a man who embraces her individuality, Christina is undoubtedly growing increasingly comfortable in her own skin. Christina proudly says of her husband Jordan, &quot;He&#8217;s my best friend and he&#8217;s my backbone and number one supporter. &#8230;He&#8217;s a very real, down-to-earth person. When he walks into a room, his energy is so calm and peaceful, like you wouldn&#8217;t even know he was there. He&#8217;s a great balance for me.&quot; (Seventeen, September 2006, p. 179)</p>
<p>Not only is Christina more relaxed, but her new song &quot;Save Me From Myself&quot; shows that she is also becoming increasingly self-aware. Christina candidly admitted, &quot;I think a lot of us can act as our own worst enemies at times, digging ruts for ourselves and making things out to be worse than they really are.&quot;</p>
<p>We all experience bad feelings at times, during which if we isolate ourselves can feel as if we&#8217;re being sucked into a black hole. It is important to have loved ones and solid people to whom we can turn. Thankfully Christina has found the light in her hubby Jordan.</p>
<p>When I was going through a dark time following my divorce a couple years ago (which resulted from my ex-wife cheating on me), I happened to see an article about Christina on a Rolling Stone magazine. It talked about her brutal break-up with her first boyfriend who proved to be quite the player. Some friends helped Christina through it by taking her into the kitchen of a restaurant where they told her to break some champagne glasses and release her anger. As Christina broke the champagne glasses she felt somewhat of an emotional breakthrough. It was this article that inspired my new book &quot;Breakthrough for a Broken Heart.&quot;</p>
<p>Christina&#8217;s &quot;Fighter&quot; song was a personal favorite of mine as I bounced back from my personal setback. Today like Christina I have stepped back into the light and found the love of my life. Whereas Christina used music throughout her life to escape the abuse, I have found writing to be therapeutic and healing. Settled in security is a wonderful place to be emotionally and relationally.</p>
<p>Paul Davis is a love coach and author of Breakthrough for a Broken Heart a book telling us &#8220;How to overcome disappointments and blossom into your dreams!&#8221; He is a dating expert, life coach (relational &#038; professional), popular worldwide keynote speaker, creative consultant, humor being, adventurer, explorer, mediator, minister, liberator and dream-maker.</p>
<p>Paul&#8217;s compassion for people &#038; passion to travel has taken him to over 50 countries of the world where he has had a tremendous impact. Paul has also brought revival to many in war-torn, impoverished and tsunami stricken regions of the earth. His nonprofit organization Dream-Maker Ministries is building dreams and breaking limitations.</p>
<p>Paul&#8217;s Breakthrough Seminars inspire, revive, awaken, impregnate with purpose, impart the fire of desire, catapult people into a new level of self-awareness, facilitate destiny discovery and dream fulfillment.</p>
<p>Paul can be contacted at: RevivingNations@yahoo.com 407-967-7553.</p>
<p>For additional info: http://www.CreativeCommunications.TV and http://www.DreamMakerMinistries.com</p>

	Tags: <a href="http://www.eb-implement.com/tag/breakthrough-for-a-broken-heart/" title="breakthrough for a broken heart" rel="tag">breakthrough for a broken heart</a>, <a href="http://www.eb-implement.com/tag/christina-aguilera/" title="Christina Aguilera" rel="tag">Christina Aguilera</a>, <a href="http://www.eb-implement.com/tag/love/" title="love" rel="tag">love</a>, <a href="http://www.eb-implement.com/tag/paul-davis/" title="Paul Davis" rel="tag">Paul Davis</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/toxic-guy/" title="toxic guy" rel="tag">toxic guy</a>, <a href="http://www.eb-implement.com/tag/transformation/" title="transformation" rel="tag">transformation</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/christina-aguilera-in-security-back-to-basics/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Top 5 Ways to Create Job Security</title>
		<link>http://www.eb-implement.com/security/top-5-ways-to-create-job-security/</link>
		<comments>http://www.eb-implement.com/security/top-5-ways-to-create-job-security/#comments</comments>
		<pubDate>Wed, 01 Apr 2009 09:20:27 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[coaching]]></category>
		<category><![CDATA[job security]]></category>
		<category><![CDATA[succeed]]></category>
		<category><![CDATA[success]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/top-5-ways-to-create-job-security/</guid>
		<description><![CDATA[<p>A 5 POINT STRATEGY FOR ENSURING YOUR JOB SECURITY</p><p>Think Job Security is a thing of the past? Think again. While it may be true that no one is exempt from a downsizing, layoff, or unexpected re-organization in today's economic climate, that doesn't have to mean you have no job security. To...]]></description>
			<content:encoded><![CDATA[<p>A 5 POINT STRATEGY FOR ENSURING YOUR JOB SECURITY</p>
<p>Think Job Security is a thing of the past? Think again. While it may be true that no one is exempt from a downsizing, layoff, or unexpected re-organization in today&#8217;s economic climate, that doesn&#8217;t have to mean you have no job security. Today&#8217;s workers simply need to redefine what job security really is given the competitive environment we live in, and where security comes from. You can (and should) have a sense of job security, but it won&#8217;t come from your employer. You must give it to yourself. Your number one priority, if you wish to have career longevity and fulfillment, is to remain highly employable. Here&#8217;s a proven 5 point strategy to ensure you have security in an uncertain job economy.</p>
<p>1. Under-promise, over-deliver<br />
 2. Nurture Your Network<br />
 3. Invest in Your Competence<br />
 4. Have a Plan B and Plan C Ready to Execute <br />
 5. Build Your Reserves</p>
<p>UNDER PROMISE and OVER DELIVER<br />
 The first strategy is simply to outperform your peers. Under promising may sound like a lethal career strategy, but in reality it&#8217;s the opposite, as long as you consistently over deliver. Bosses and peers become most frustrated with those who make empty promises, right? These are the people who OVER promise and then consistently UNDER perform. By getting really skilled at setting reasonable expectations, building in time for the unexpected (which you can almost always expect!), and then meeting or beating every agreed upon target, how much does that increase your value to the organization? Lots. People want to know what to expect and be wowed. Wow! them with your performance, not your promises. Valuable employees manage to escape much of the corporate shake ups, even when the shake ups hit their home turf. Create a reputation for being someone who delivers value and you&#8217;ll add a lot of staying power to your career.</p>
<p>NURTURE YOUR NETWORK<br />
 Do you maintain relationships with a diverse group of peoplefrom close friends to casual business acquaintances? Or is your social life basically built around the coffee pot and bagel box at work? When faced with changing jobs (by choice or not), it is important that you have strong, reliable network in place. You don&#8217;t want to be building up relationships at a time when you need them mostit drains your energy and looks and feels too desperate! You want to continually work toward having strong relationships with a variety of contacts because you enjoy them and they enjoy you. These relationships are in the spirit of helping whenever it&#8217;s needed. You may include professional contacts within and outside your employer, as well as a diverse group of acquaintances through community, school, and social circles. Stay plugged in with others. It can make the difference between a long and difficult job search, and a smooth job change.</p>
<p>INVEST IN YOUR COMPETENCE<br />
 Staying current in your field is critical to long term employabilitya.k.a. &#8217;security&#8217;. If your employer provides some of this, great! Take them up on it. But if they don&#8217;t (as many are cutting back here), take it upon yourself. Create your own professional development plan. Find professional associations, training programs, published material (books, internet sites, magazines and journals, etc) and/or mentors/peers that can help you stay abreast of trends and issues impact your field, industry and geographical area. In order to be employable (whether at your current employer or somewhere else), you have to be current and be able to talk about future trends. If your most recent &#8216;update&#8217; to your knowledge, skills, or abilities was the day you walked down the aisle to pick up your degree (and that wasn&#8217;t last year), then you&#8217;ve got to develop a plan to get in the game. Allocate 2 hours a week, or even a month, to getting and staying current or learning something completely new. A high level of competence sells no matter the economy.</p>
<p>HAVE A PLAN B READY TO EXECUTE<br />
 You may not be &#8216;expecting&#8217; to lose your job or be re-organized into the job from he**, but who is? The point is -always be ready, willing, and able to do something else. If you love what you do, then all you need is a current resume and job search plan in your back pocket at all times. Your plan B should include the network and competencies pieces discussed in this article. If you think you might like to try something new then you definitely must start creating that plan. What would you need to know in order to make a move into something new? Who would you need to know? What would be the first 3 things you would do if you were no longer employed? Create your plan B and start working on gathering some of the key pieces (information, contacts, experiences, etc.). Pull it out every so often, update it, and keep it working for you. It&#8217;s like job security insurance. It&#8217;s there when you need it. And then, create your Plan C. You just never know.</p>
<p>BUILD UP YOUR RESERVES<br />
 Are you prepared for a job loss should one occur unexpectedly? Do you have reserves of money to carry you through 6-12 months without a regular paycheck? Do you have reserves of confidence in your ability to land on your feet and make the most of whatever comes your way? Do you have reserves of energy to conduct a full scale job search? Do you have strong, stable friendships that could and would support you if you needed them?</p>
<p>Having a strong reservefinancially, physically, emotionally, and sociallywill help you be strong and confident before, during, and after any career challenge or change. This level of confidence keeps you afloat and, in fact, makes you more attractive as an employee (because you are strong and confident!). You may be less affected by a corporate shake-up and not have to draw upon your reserves. But, if you need them, they are there for you. How secure is that?!</p>
<p>Employers are no longer able to provide the kind of job security they once did. But that doesn&#8217;t mean we all have to walk around vulnerable and stressed. Create your own brand of job security and take control of your career. After all, it&#8217;s YOUR careerit doesn&#8217;t belong to the company anymore. And that can be a great thing!</p>
<p>This article may be reproduced, in its entirety, along with the following information:</p>
<p>&copy; 2006, Shawn Driscoll, Succeed Coaching &#038; Development. This article is provided courtesy of Shawn Driscoll, Career Success Coach and owner of www.succeedcoaching.com. Professionals: upgrade your work life today! We provide products and services to help you succeed at work, in business and in life. Sign up to receive your free Success Wise ezineand get success tips, inspiration, and resources to skyrocket your successat www.succeedcoaching.com.</p>
<p>Shawn Driscoll, owner of Succeed Coaching &#038; Development, partners with motivated professionals to dramatically improve the quality of their career and lives. She challenges clients to stop struggling and sacrificing in the name of making a living and inspires them to re-define success on their own terms. Pick up your free copy of her special success report &#8220;How to Chart Your Course for Success and Fulfillment&#8221; at http://www.succeedcoaching.com/report.html.</p>

	Tags: <a href="http://www.eb-implement.com/tag/coaching/" title="coaching" rel="tag">coaching</a>, <a href="http://www.eb-implement.com/tag/job-security/" title="job security" rel="tag">job security</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/succeed/" title="succeed" rel="tag">succeed</a>, <a href="http://www.eb-implement.com/tag/success/" title="success" rel="tag">success</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/top-5-ways-to-create-job-security/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Workplace Security for Small to Midsize Businesses</title>
		<link>http://www.eb-implement.com/security/workplace-security-for-small-to-midsize-businesses/</link>
		<comments>http://www.eb-implement.com/security/workplace-security-for-small-to-midsize-businesses/#comments</comments>
		<pubDate>Tue, 17 Mar 2009 18:07:01 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[assessments]]></category>
		<category><![CDATA[audits]]></category>
		<category><![CDATA[interdiction]]></category>
		<category><![CDATA[policy]]></category>
		<category><![CDATA[presentations]]></category>
		<category><![CDATA[prevention]]></category>
		<category><![CDATA[threats]]></category>
		<category><![CDATA[violence]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/workplace-security-for-small-to-midsize-businesses/</guid>
		<description><![CDATA[<p>Contents</p><p>1.) Workplace Security for Small to Midsize Businesses...</p><p>2.) Understanding the Mutual Need to Invest...</p><p>3.) Motivational Reasons to Invest...</p><p>4.) About Nater Associates, Ltd...</p><p>1.) Workplace Security for Small to Midsize Businesses...</p><p>Since September ...]]></description>
			<content:encoded><![CDATA[<p>Contents</p>
<p>1.) Workplace Security for Small to Midsize Businesses&#8230;</p>
<p>2.) Understanding the Mutual Need to Invest&#8230;</p>
<p>3.) Motivational Reasons to Invest&#8230;</p>
<p>4.) About Nater Associates, Ltd&#8230;</p>
<p>1.) Workplace Security for Small to Midsize Businesses&#8230;</p>
<p>Since September 11, 2001 surveys, polls and research suggests that a majority of small to midsize businesses are not yet prepared to handle a terrorist attack, let alone a natural catastrophe. The research suggest that this segment of our business society is thirsting for information and looking for leadership. However, it does appear this community is willing to<br />
 invest in security but, are not yet in a position to make costly investments without a clear understanding of the value. There is no debate on the need and the awareness to do something but, they want to know &#8220;who&#8221; will work with them and &#8220;how&#8221; will their needs be addressed? Knowing the existence of risks is understandable; however closer to home is the question, &#8220;how&#8221; will it improve the situation and show a Return on the Investment (ROI) after my commitment? In arriving at this understanding, some perspectives will be presented that might encourage an investment based on a collective accord on<br />
 the &#8220;why&#8221; and the &#8220;how&#8221;.</p>
<p>2.) Understanding the Mutual Need to Invest&#8230;</p>
<p>Understanding is the vitally important link, if we in the security industry are to sufficiently convince this segment of the value to invest. While the small to midsize business community remains an important connection to our<br />
 day-to-day lives, it remains an untapped security market. There are synergies to stimulate positive relationships that must be tapped regardless of the perceptions. Insufficiently energized since September 11, 2001, one speculative reason might be that the security industry and this community have not really talked to each other about the unique needs and the perceptions. Suggesting that this market was not yielding any market<br />
 interest could be further from the truth. I have found a keen interest on both sides; however, the common denominator preventing a decisive step to move forward involves a lack of time, money, sufficient knowledge and dedicated resources to address their concerns.</p>
<p>These realistic reasons might be unintentionally contributing to their current vulnerability. Of concern is that this threat or vulnerability is not just to the potential of a terrorist strike, but a general inability to respond in the wake of a<br />
 natural disaster, power outage, water or fire damage, human error, death of key staff, labor dispute, hostage taking, workplace violence, bomb threat, HVAC failure/temperature inadequacy or any industrial mishap requiring emergency evacuation or protective measures. Assuming CEOs and other<br />
 decision makers recognize these as their day-to-day concerns, why then has there not been a mutually concerted effort to bridge the inhibitors cited above to reach a greater understanding for the need?</p>
<p>My theoretical answer to these questions, suggests that this community has not been presented the benefit of the expertise in a simple, uncomplicated and understandable manner as the other awaited the &#8220;hot-button need&#8221; or for the catastrophe that will justify the investment. The reality is that this<br />
 business segment has unique but realistic concerns that must be addressed. Unfortunately, the lack of true understanding keeps the security and business community at arms-length as practicality is avoided. In reality, his segment&#8217;s security needs might be imbedded in their day-to-day safety and security concerns and not the threat of terrorism.</p>
<p>2.) Motivational Reasons to Invest&#8230;</p>
<p>There are many reasons to invest in this market! Since the research suggest there is a lack of time, money, knowledge and resources, designing an approach to address these challenges might be a solution. Instead of making security a complex process let us tailor the need to the individual client,<br />
 provide security awareness and follow-up support to insure the need is addressed and concerns minimized. Whenever I present the value of security awareness, I am reminded of a Long Island firm that made the investment in security technology but failed to teach the employees the value of the technology. While visiting with the CEO on two separate occasions, access was easily gained without as much as a challenge. In one incident, my cordial greeting was enough to disarm the employees and in the second incident, I merely walked in through a door held open with a woodchuck placed there by employees taking a smoke break.</p>
<p>Since it is believed this lack of understanding my drive the lack of purchase, the use of case studies and lessons learned become important in demonstrating the value of the implementation. So, why not tailor the security need to situations this segment is more apt to experience and value such as chemical spills, exposure to contaminants, victimization by criminals, disruptions due to workplace<br />
 violence and natural disaster, and fire and all the other possibilities mentioned above?</p>
<p>Taking a practical approach might be a stronger motivational tact that could have appeal. Keeping security methodology simple might trigger yet another motivational strategy to address their lack of resources. Involving employees in the security process is certainly another approach to show<br />
 value. Promoting the that the investment be undertaken in &#8220;little chunks&#8221; might encourage a greater appreciation for the need and increase preparedness by employing realistic and uncomplicated security plans and programs.</p>
<p>Another approach to the &#8220;little chunk&#8221; anology might be the value of making minimal yet inexpensive changes that will cost little more than time and effort to close the exisiting security gaps. Pursuing these approaches might insure some measures are in place &#8220;Now&#8221; to insure readiness, avoid<br />
 allegations of due diligence shortfalls or suggestions of irresponsibility and malfeasance. Lastly, instead of the buying motivation being driven by the proverbial &#8220;fear&#8221; approach we might build a client following based on the clear understanding of the need. These strategies factored by a prioritized understanding that &#8220;little chunks&#8221; can bring about a greater<br />
 degree of security preparedness rather than doing nothing will greatly enhance this business segments security posture.</p>
<p>4.) About Nater Associates, Ltd.</p>
<p>Felix P. Nater, President, Nater Associates, Ltd, Workplace Security Consultant, 116-03 Parkway Drive, Elmont, New York 11003, Office: 516-285-8484, (Toll Free) 1-877-VALU101, Fax: 516- 285-0880, Cell: 516-946-8416, email:info@naterassociates.com &#038; Website: www.naterassociates.com</p>
<p>Felix has over 30 years of criminal and security experience and expertise as a United States Postal Inspector having spent the last 13 years specializing in the interdiction of workplace violence and formulating workplace security threats and risks mitigation strategy. Nater Associates, Ltd. offers clients integrated business-security solutions for thier Workplace Security and Workplace Violence Prevention needs using a variety of products. Felix calls himself the Outsource Security Director. Call Nater Associates for a Security Audit or a Security Awareness Presentation.</p>

	Tags: <a href="http://www.eb-implement.com/tag/assessments/" title="assessments" rel="tag">assessments</a>, <a href="http://www.eb-implement.com/tag/audits/" title="audits" rel="tag">audits</a>, <a href="http://www.eb-implement.com/tag/interdiction/" title="interdiction" rel="tag">interdiction</a>, <a href="http://www.eb-implement.com/tag/policy/" title="policy" rel="tag">policy</a>, <a href="http://www.eb-implement.com/tag/presentations/" title="presentations" rel="tag">presentations</a>, <a href="http://www.eb-implement.com/tag/prevention/" title="prevention" rel="tag">prevention</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/threats/" title="threats" rel="tag">threats</a>, <a href="http://www.eb-implement.com/tag/violence/" title="violence" rel="tag">violence</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/workplace-security-for-small-to-midsize-businesses/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Money &amp; Marriage Ten Tips for a Power Meeting</title>
		<link>http://www.eb-implement.com/security/money-marriage-ten-tips-for-a-power-meeting/</link>
		<comments>http://www.eb-implement.com/security/money-marriage-ten-tips-for-a-power-meeting/#comments</comments>
		<pubDate>Sat, 31 Jan 2009 10:47:28 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[finance]]></category>
		<category><![CDATA[financial]]></category>
		<category><![CDATA[income]]></category>
		<category><![CDATA[marriage]]></category>
		<category><![CDATA[money]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/money-marriage-ten-tips-for-a-power-meeting/</guid>
		<description><![CDATA[<p>" 'Honey, this looks much, much more expensive than it really was. I got such a tremendous bargain on this.' When I hear those words, I know my goose is cooked and that the credit card bill will be a big one." How many husbands have uttered these or similar words after their wives return from...]]></description>
			<content:encoded><![CDATA[<p>&#8221; &#8216;Honey, this looks much, much more expensive than it really was. I got such a tremendous bargain on this.&#8217; When I hear those words, I know my goose is cooked and that the credit card bill will be a big one.&#8221; How many husbands have uttered these or similar words after their wives return from the shopping mall.</p>
<p>He wants a giant HDTV so he can put up his feet.<br />
 She wants no less than 50 pairs of shoes.</p>
<p>He wants the latest outdoor kitchen.<br />
 She wants the indoor kitchen remodeled.</p>
<p>He wants the Mustang GT so he can ride the road in style.<br />
 She wants the thoroughbred with riding attire and regular lessons.</p>
<p>Any one of these real-life scenarios can cause a family war.</p>
<p>What is really important about money to you?<br />
 Do you know what is important about money to your significant other?</p>
<p>Do you know WHY it is important at this time?</p>
<p>How important will financial security be when you are in the last third of your life?</p>
<p>In the last third of life you will have experienced the trials and triumphs of family life. You will have been pulled into the demands of the day.<br />
 But in the last third of life, it is less likely you will continue to make the peak income of your career years. It is more likely you will have some health issues. As you add years, you will add vulnerability.</p>
<p>Do you have a strategy that will give you strength for your vulnerable season? A strategy that is adaptable, pro-active, and proven to work in hundreds of different scenarios?</p>
<p>Your strategy may not include the old-age idea of retirement&#8212;instead you may choose to work part-time, advise or consult or engage in some long-desired activity that you put off until later life.</p>
<p>But whether you are male or female, you will need financial resources. And whether you outlive your spouse or not, you never want to outlive your assets.</p>
<p>If you are reading this now, it is probable that you need to make an actual meeting time with your significant other and place on paper the ideas that you SHARE IN COMMON about money and your marriage. And if you want to live happily ever after, NOW IS THE TIME to secure your MEETING OF THE MINDS ABOUT MONEY.</p>
<p>According to a financial advisor friend of mine, money is only a tool, but it allows people to live in alignment with their most deeply held values. This makes it a powerful emotionally charged subject.</p>
<p><b>Here are ten key things to discuss at your Money Meeting:</b></p>
<p>1.How important is money to you?</p>
<p>2.Why is it important?</p>
<p>3.What do you want to do, achieve, be, or realize in the Best Third of your life?</p>
<p>4.How much money will it take to do that, or be that, or have that?</p>
<p>5.Where will this money come from?</p>
<p>6.Do you have a will?</p>
<p>7.Do you have medical power of attorney?</p>
<p>8.In the event of an emergency do you know how to access the assets of your significant other?</p>
<p>9.Are all of your financial records in reasonably good order?</p>
<p>10.Finally, when you successfully manage this meeting with each other, make another time and date certain for the next meetingand keep the communication open around this highly charged subject that is at the core of your life, whether or not you recognize it.</p>
<p>Simone Nathan<br />
 Author of &#8220;Going for Gold after 50: An Illustrated Guide to High Probability Investing for The Plus Years&#8221;. Discover how to put the investing odds greatly in your favor at http://www.goldafter50.com</p>
<p>Personal, spiritual, financial, healthful life planninghttp://www.dreamcatcherprogram.com</p>

	Tags: <a href="http://www.eb-implement.com/tag/finance/" title="finance" rel="tag">finance</a>, <a href="http://www.eb-implement.com/tag/financial/" title="financial" rel="tag">financial</a>, <a href="http://www.eb-implement.com/tag/income/" title="income" rel="tag">income</a>, <a href="http://www.eb-implement.com/tag/marriage/" title="marriage" rel="tag">marriage</a>, <a href="http://www.eb-implement.com/tag/money/" title="money" rel="tag">money</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/money-marriage-ten-tips-for-a-power-meeting/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Identity Theft and Pharming &#8211; A New Twist on an Old Theme</title>
		<link>http://www.eb-implement.com/security/identity-theft-and-pharming-a-new-twist-on-an-old-theme/</link>
		<comments>http://www.eb-implement.com/security/identity-theft-and-pharming-a-new-twist-on-an-old-theme/#comments</comments>
		<pubDate>Fri, 16 Jan 2009 07:45:11 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[pharming]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[theft]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/identity-theft-and-pharming-a-new-twist-on-an-old-theme/</guid>
		<description><![CDATA[<p>Identity theft is big business and, like it or not, the likelihood that you will become a victim is increasing. As the Internet and its popularity have grown, the number of unscrupulous operators out there has grown as well. There are so many scams and attack methods out there it is difficult to ...]]></description>
			<content:encoded><![CDATA[<p>Identity theft is big business and, like it or not, the likelihood that you will become a victim is increasing. As the Internet and its popularity have grown, the number of unscrupulous operators out there has grown as well. There are so many scams and attack methods out there it is difficult to keep up with them. </p>
<p> One of the identity thief&#8217;s more productive techniques is <i>phishing</i>. A phishing scam is one where an email message contains a link to a web site that asks for personal information. The scam uses <i>social engineering</i> to trick people to go to a web site they would not normally visit. A common scam is one in which an email that looks like it has come from a bank or credit card company asks you to &#8220;click on this link&#8221; to update your user information. There is generally a part of the email that tries to convey a sense of urgency to get you to &#8220;do it now&#8221;. When you click on the link you are actually forwarded to a thief&#8217;s web site that is designed to look like your bank or credit card company&#8217;s web site. You are then asked to provide information, such as user id, password, and other identifying information. Identity thieves use this information to open or use credit accounts and steal money from unsuspecting consumers. </p>
<p> Phishing attacks are relatively easy the spot and avoid. Never follow links in email messages unless you know the link is valid. Compare the actual link address with the text you see. If you are expecting to go to PayPal.com, make sure the link really takes you there. You can view the hyperlink before you click on it buy pointing your mouse cursor at the link. Most email clients and web browsers will show you what the actual address is before you click on it. If the address doesn&#8217;t match the web site address you expected to see, don&#8217;t click on the link. Likewise, NEVER provide any personal information from an unsolicited source. You will also see the address you are visiting in your web browser&#8217;s address bar. Make sure you are visiting the site you expect.</p>
<p> There is a new trend in identity theft, called <i>pharming</i>. Well, it is actually a fairly old type of attack put to a new and alarming use. The basic attack generally relies on DNS poisoning or domain spoofing. The difference between phishing and pharming is that while phishing targets individuals, pharming targets large groups of people. Before we get into a discussion of a pharming attack, let&#8217;s look at a short primer on how Internet addresses work.</p>
<p> Anytime you type in an address in your web browser, such as http://www.somecompany.com, your computer needs to find the Internet Protocol (IP) address before sending any information. There are two main methods for finding IP addresses for web site addresses. The legacy method consists of a file, called the &#8216;hosts&#8217; file, that lists all of the host names you may want to visit, along with their IP addresses. The other method is to send a name resolution request to a Dynamic Name Server (DNS). The DNS server looks up the address in its database and returns the corresponding IP address. Once your computer looks up the IP address for http://www.somecompany.com, it then uses the IP address for all further communication. </p>
<p> A pharming attack is one where the host file or DNS entry is modified to send users to a counterfeit web site. The slightly simpler of the two attacks is the host file modification. This can be accomplished with a virus or worm. It is generally harder to compromise DNS servers. With the phishing attack, a careful view of your web browser&#8217;s address bar will show that you are visiting a site you did not expect. Pharming attacks are more difficult to detect since your web browser tells you that you are at the right site even when you really aren&#8217;t.</p>
<p> The effect of a pharming attack is that all users who want to go to a particular site end up being redirected to a thief&#8217;s site. While this might sound similar to a phishing attack, it can be much worse. There is no indication to the end user that a redirect has occurred. The web browser still shows the original web address. This behavior makes pharming attacks more difficult to detect. Also, if the thief is able to change DNS entries on a commonly used DNS server, all users who request IP addresses from the compromised server will be sent to the counterfeit site.</p>
<p> So, how do you protect yourself from a pharming attack? Much of the work in stopping pharming attacks is up to the DNS administrators. They will be responsible for ensuring any DNS entry changes are authentic. But, there are some steps you can take. Following these guidelines will reduce your chances of becoming a pharming victim:</p>
<ol>
<li>Install and update a good anti-virus program. Since many attacks start as malicious software, protecting your system from viruses and other malicious software will go a long way toward stopping an attack before any information is changed.</li>
<li>Protect your &#8216;hosts&#8217; file. On Windows operating systems, the hosts file resides at: (assuming C:\Windows is where your OS installed) C:\Windows\system32\drivers\etc\hosts. On Unix systems, it resides at /etc/hosts. You can manually check your hosts file to ensure no unusual entries have been put there or you can install software shields that watch the hosts file for you (along with anti-virus software).</li>
<li>Know the sites you visit and carefully protect any information you give out. Never divulge any information for any reason unless you are absolutely certain the information is necessary and you are providing it to the correct organization. If your bank web site, or any other web site, asks you to provide confidential information, call their customer service department to get confirmation that the information is needed. Don&#8217;t call the number on the web site (it may be compromised). Look up the number in the phone book or use directory assistance.</li>
<li>As more and more web sites start using digital certificates to authenticate their identities, you will begin to see more popup windows asking you to accept these certificates the first time you visit the web site. Always read the certificate details and ensure the web site really is the one you wanted to visit. If you are unsure, reject the certificate.</li>
</ol>
<p>
 We will all hear more about pharming in the coming months. Its use is growing. This is just another opportunity to remind as many people as possible to be careful with the sites you visit and the information you give out. Protect your personal information. Not doing so can be very expensive.</p>
<p>Want more tips and information on how to recognize, prevent, and repair the effects of identity theft? Go to http://www.thesecurityguy.net right now and you&#8217;ll find eBooks and home study courses on identity theft and other security related topics.</p>

	Tags: <a href="http://www.eb-implement.com/tag/identity/" title="identity" rel="tag">identity</a>, <a href="http://www.eb-implement.com/tag/pharming/" title="pharming" rel="tag">pharming</a>, <a href="http://www.eb-implement.com/tag/phishing/" title="phishing" rel="tag">phishing</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/theft/" title="theft" rel="tag">theft</a>, <a href="http://www.eb-implement.com/tag/virus/" title="virus" rel="tag">virus</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/identity-theft-and-pharming-a-new-twist-on-an-old-theme/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>5 Mac Security Tips You Can&#8217;t Live Without</title>
		<link>http://www.eb-implement.com/security/5-mac-security-tips-you-cant-live-without/</link>
		<comments>http://www.eb-implement.com/security/5-mac-security-tips-you-cant-live-without/#comments</comments>
		<pubDate>Wed, 17 Dec 2008 14:19:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[macintosh]]></category>
		<category><![CDATA[OS]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[panther]]></category>
		<category><![CDATA[tiger]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/5-mac-security-tips-you-cant-live-without/</guid>
		<description><![CDATA[<p>So, you've bought a new Macintosh, and now you may be wondering how to make it safer. There are several things that you can do which will protect your Mac from viruses and hackers. Macs are already very difficult to hack, but don't let that fact allow you to become lenient with your security.</...]]></description>
			<content:encoded><![CDATA[<p>So, you&#8217;ve bought a new Macintosh, and now you may be wondering how to make it safer. There are several things that you can do which will protect your Mac from viruses and hackers. Macs are already very difficult to hack, but don&#8217;t let that fact allow you to become lenient with your security.</p>
<p>1. Download all of the software updates available. This seems like a no-brainer, but some Mac users forget to download the newest updates. You can even set your computer to automatically download new updates. However, some dial-up users encounter trouble when trying to downloaded updates. If you are a dial-up user, the best suggestion is to leave your Mac on overnight and let it download. Apple releases many programs that fix bugs in iLife applications, and in Mac OS X. Probably the most important of these updates are the security updates. Apple periodically offers security updates for its operating systems (Panther and Tiger).</p>
<p>2. Be careful what you download. Some people use P2P downloads for Macintosh (I.E. Poisoned). Be careful when downloading using a P2P because you do not know where the music or file is coming from. Some P2P users specifically make corrupted files to send via music downloading programs. Generally, it is a good idea to stick to iTunes, because those files are ACC Protected and offered through Apple so they certainly won&#8217;t have viruses.</p>
<p>3. Choose the best and safest Internet Browser. Safari comes standard on all new Macs as part of iLife. However, some people do not enjoy Safari as much as others. Some say that Safari is not as safe from hackers as other browsers. Safari can also be a problem if you are going to a web page that requires a version of Internet Explorer or Netscape to view it. You can download Internet Explorer and Netscape for Mac, but again, some believe that these browsers are not as safe from hackers. Many people believe that Mozilla Firefox (my personal favorite) is the safest browser to use because of its customizable features. Firefox is available for downloading on the Macintosh.</p>
<p>4. Don&#8217;t be afraid to buy anti-virus software. If you have to download files from the internet as part of a job or hobby, then it is probably a good idea to have some sort of anti-virus software on your Macintosh. Apple provides a wide-variety of anti-virus software that is constantly updated.</p>
<p>5. Finally, keep an eye on those e-mail attachments and instant messages. Some hackers have programmed viruses to IM you from one of your friends&#8217; screen names. Don&#8217;t click on any link without knowing what it is first. Most e-mail providers use virus scans automatically, but you should always be extra careful when downloading an attachment. If it is from someone you do not know, don&#8217;t trust it.</p>
<p>Apple computers are very safe from hackers, but they can always be improved. Keeping a computer safe, and running well requires a great amount of time and energy. Just remember that if your computer is safe, your Apple experience will be much more rewarding.</p>
<p>Paulo Fretowski enjoys writing about computers because he uses them for his job with BizNicheMedia.</p>

	Tags: <a href="http://www.eb-implement.com/tag/apple/" title="apple" rel="tag">apple</a>, <a href="http://www.eb-implement.com/tag/firefox/" title="firefox" rel="tag">firefox</a>, <a href="http://www.eb-implement.com/tag/mac/" title="mac" rel="tag">mac</a>, <a href="http://www.eb-implement.com/tag/macintosh/" title="macintosh" rel="tag">macintosh</a>, <a href="http://www.eb-implement.com/tag/os/" title="OS" rel="tag">OS</a>, <a href="http://www.eb-implement.com/tag/os-x/" title="OS X" rel="tag">OS X</a>, <a href="http://www.eb-implement.com/tag/panther/" title="panther" rel="tag">panther</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a>, <a href="http://www.eb-implement.com/tag/tiger/" title="tiger" rel="tag">tiger</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/5-mac-security-tips-you-cant-live-without/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DOS Attacks Instigation and Mitigation</title>
		<link>http://www.eb-implement.com/security/dos-attacks-instigation-and-mitigation/</link>
		<comments>http://www.eb-implement.com/security/dos-attacks-instigation-and-mitigation/#comments</comments>
		<pubDate>Tue, 02 Dec 2008 14:19:08 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[CEH]]></category>
		<category><![CDATA[CISSP]]></category>
		<category><![CDATA[DoS]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[homeland security]]></category>
		<category><![CDATA[ISSAP]]></category>
		<category><![CDATA[ISSMP]]></category>
		<category><![CDATA[JEREMY MARTIN]]></category>

		<guid isPermaLink="false">http://www.eb-implement.com/security/dos-attacks-instigation-and-mitigation/</guid>
		<description><![CDATA[<p>During the release of a new software product specialized to track spam, ACME Software
 Inc notice that there was not as much traffic as they hoped to receive. During further
 investigation, they found that they could not view their own website. At that moment, the
 VP of sales received a call fro...]]></description>
			<content:encoded><![CDATA[<p>During the release of a new software product specialized to track spam, ACME Software<br />
 Inc notice that there was not as much traffic as they hoped to receive. During further<br />
 investigation, they found that they could not view their own website. At that moment, the<br />
 VP of sales received a call from the company&#8217;s broker stating that ACME Software Inc<br />
 stock fell 4 point due to lack of confidence. Several states away, spammers didn&#8217;t like the<br />
 idea of lower profit margins do to an easy to install spam blocking software so they<br />
 thought they would fight back. Earlier that day, they took control of hundreds of<br />
 compromised computers and used them as DoS zombies to attack ACME Software Inc&#8217;s<br />
 Internet servers in a vicious act of cyber assault. During an emergency press conference<br />
 the next morning, ACME Software Inc&#8217;s CIO announced his resignation as a result of a<br />
 several million dollar corporate loss.</p>
<p>Scenarios like the one above happen a more then people think and are more costly<br />
 then most will admit. Denial of Service (DoS) attacks are designed to deplete the<br />
 resources of a target computer system in an attempt to take a node off line by crashing or<br />
 overloading it. Distributed Denial of Service (DDoS) is a DoS attack that is engaged by<br />
 many different locations. The most common DDoS attacks are instigated through viruses<br />
 or zombie machines. There are many reasons that DoS attacks are executed, and most of<br />
 them are out of malicious intent. DoS attacks are almost impossible to prevent if you are<br />
 singled out as a target. It&#8217;s difficult to distinguish the difference between a legitimate<br />
 packet and one used for a DoS attack.</p>
<p>The purpose of this article is to give the reader with basic network knowledge a<br />
 better understanding of the challenges presented by Denial of Service attacks, how they<br />
 work, and ways to protect systems and networks from them.</p>
<p>Instigation:</p>
<p>Spoofing &#8211; Falsifying an Internet address (know as spoofing) is the method an attacker<br />
 uses to fake an IP address. This is used to reroute traffic to a target network node or used<br />
 to deceive a server into identifying the attacker as a legitimate node. When most of us<br />
 think of this approach of hacking, we think of someone in another city essentially<br />
 becoming you. The way TCP/IP is designed, the only way a criminal hacker or cracker<br />
 can take over your Internet identity in this fashion is to blind spoof. This means that the<br />
 impostor knows exactly what responses to send to a port, but will not get the<br />
 corresponding response since the traffic is routed to the original system. If the spoofing is<br />
 designed around a DoS attack, the internal address becomes the victim. Spoofing is used<br />
 in most of the well-known DoS attacks. Many attackers will start a DoS attack to drop a<br />
 node from the network so they can take over the IP address of that device. IP Hijacking is<br />
 the main method used when attacking a secured network or attempting other attacks like<br />
 the Man in the Middle attack.</p>
<p>SYN Flood &#8211; Attackers send a series of SYN requests to a target (victim). The target<br />
 sends a SYN ACK in response and waits for an ACK to come back to complete the<br />
 session set up. Instead of responding with an ACK, the attacker responds with another<br />
 SYN to open up a new connection. This causes the connection queues and memory buffer<br />
 to fill up, thereby denying service to legitimate TCP users. At this time, the attacker can<br />
 hijack the system&#8217;s IP address if that is the end goal. Spoofing the &#8220;source&#8221; IP address<br />
 when sending a SYN flood will not only cover the offender&#8217;s tracks, but is also a method<br />
 of attack in itself. SYN Floods are the most commonly used DoS in viruses and are easy<br />
 to write. See http://www.infosecprofessionals.com/code/synflood.c.txt</p>
<p>Smurf Attack- Smurf and Fraggle attacks are the easiest to prevent. A perpetrator sends a<br />
 large number of ICMP echo (ping) traffic at IP broadcast addresses, using a fake source<br />
 address. The &#8220;source&#8221; or spoofed address will be flooded with simultaneous replies (See<br />
 CERT Advisory: CA-1998-01). This can be prevented by simply blocking broadcast<br />
 traffic from remote network sources using access control lists.</p>
<p>Fraggle Attack &#8211; This types of attack is the same as a Smurf attack except using UDP<br />
 instead if TCP. By sending an UDP echo (ping) traffic to IP broadcast addresses, the<br />
 systems on the network will all respond to the spoofed address and affect the target<br />
 system. This is a simple rewrite of the Smurf code. This can be prevented by simply<br />
 blocking broadcast traffic from remote IP address.</p>
<p>Ping of Death &#8211; An attacker sends illegitimate ICMP (ping) packets larger than 65,536<br />
 bytes to a system with the intention of crashing it. These attacks have been outdated since<br />
 the days of NT4 and Win95.</p>
<p>Teardrop &#8211; Otherwise known as an IP fragmentation attack, this DoS attack targets<br />
 systems that are running Windows NT 4.0, Win95 , Linux up to 2.0.32. Like the Ping of<br />
 Death, the Teardrop is no longer effective.</p>
<p>Application Attack &#8211; Thess are DoS attacks that involve exploiting an application<br />
 vulnerability causing the target program to crash or restart the system.</p>
<p>Kazaa and Morpheus have a known flaw that will allow an attacker to consume all<br />
 available bandwidth without being logged.<br />
 See http://www.infosecprofessionals.com/code/kazaa.pl.txt</p>
<p>Microsoft&#8217;s IIS 5 SSL also has an easy way to exploit vulnerability. Most exploits like<br />
 these are easy to find on the Internet and can be copied and pasted as working code.<br />
 There are thousands of exploits that can be used to DoS a target system/application. See<br />
 http://www.infosecprofessionals.com/code/IIS5SSL.c.txt</p>
<p>Viruses, Worms, and Antivirus &#8211; Yes, Antivirus. Too many cases where the antivirus<br />
 configuration is wrong or the wrong edition is installed. This lack of foresight causes an<br />
 unintentional DDoS attack on the network by taking up valuable CPU resources and<br />
 bandwidth. Viruses and worms also cause DDoS attacks by the nature of how they<br />
 spread. Some purposefully attack an individual target after a system has been infected.<br />
 The Blaster worm that exploits the DCOM RPC vulnerability (described in Microsoft<br />
 Security Bulletin MS03-026) using TCP port 135 is a great example of this. The Blaster<br />
 targeted Microsoft&#8217;s windows update site by initiating a SYN FLOOD. Because of this,<br />
 Microsoft decided to no longer resolve the DNS for &#8216;windowsupdate.com&#8217;.</p>
<p>DoS attacks are impossible to stop. However, there are things you can do to<br />
 mitigate potential damages they may cause to your environment. The main thing to<br />
 remember is that you always need to keep up-to-date on the newest threats.</p>
<p>Mitigation:</p>
<p>Antivirus software &#8211; Installing an antivirus software with the latest virus definitions will<br />
 help prevent your system from becoming a DoS zombie. Now, more then ever, this is an<br />
 important feature that you must have. With lawsuits so prevalent, not having the proper<br />
 protection can leave you open for downstream liability.</p>
<p>Software updates &#8211; Keep your software up to date at all times. This includes antivirus,<br />
 email clients, and network servers. You also need to keep all network Operating Systems<br />
 installed with the latest security patches. Microsoft has done a great job with making<br />
 these patches available for their Windows distributions. Linux has been said to be more<br />
 secure, but the patches are far more scarce. RedHat is planning on incorporating the<br />
 NSA&#8217;s SE Linux kernel into future releases. This will give Mandatory Access Control<br />
 (MAC) capabilities to the Linux community.</p>
<p>Network protection &#8211; Using a combination of firewalls and Intrusion Detection Systems<br />
 (IDS) can cut down on suspicious traffic and can make the difference between logged<br />
 annoyance and your job. Firewalls should be set to deny all traffic that is not specifically<br />
 designed to pass through. Integrating an IDS will warn you when strange traffic is present<br />
 on your network. This will assist you in finding and stopping attacks.</p>
<p>Network device configuration &#8211; Configuring perimeter devices like routers can detect<br />
 and in some cases prevent DoS attacks. Cisco routers can be configured to actively<br />
 prevent SYN attacks starting in Cisco IOS 11.3 and higher using the TCP intercept<br />
 command in global configuration mode.</p>
<p>Access-list number {deny | permit} tcp any destination destination-wildcard<br />
 ip tcp intercept list access-list-number<br />
 ip tcp intercept ? (will give you a good list of other options.)</p>
<p>Cisco routers can prevent Smurf and Fraggle attacks by blocking broadcast traffic. Since<br />
 Cisco IOS 12.0, this is the default configuration. ACLs or access control lists should also<br />
 be configured on all interfaces.</p>
<p>No ip directed-broadcast</p>
<p>The Cisco router can also be used to prevent IP spoofing.<br />
 ip access-group list in interface<br />
 access-list number deny icmp any any redirect<br />
 access-list number deny ip 127.0.0.0 0.255.255.255 any<br />
 access-list number deny ip 224.0.0.0 31.255.255.255 any<br />
 access-list number deny ip host 0.0.0.0 any<br />
 See Improving Security on Cisco Routers &#8211; www.cisco.com/warp/public/707/21.html</p>
<p>Old Cisco IOS versions are vulnerable to several DoS attacks. The &#8220;Black Angels&#8221; wrote<br />
 a program called Cisco Global Exploiter. This is a great software to use when testing the<br />
 security of your Cisco router version and configuration and can be found at<br />
 http://www.blackangels.it/Projects/cge.htm</p>
<p>Security is not as mystical as people believe. DoS attacks come in many different<br />
 types and can be devastating if you don&#8217;t take the proper precautions. Keep up to date and<br />
 take steps to secure network nodes. Keeping security in mind can minimize damages,<br />
 downtime, and save your career.</p>
<p>Security Resources:<br />
 Black Angels: http://www.blackangels.it/<br />
 Cisco: http://www.cisco.com<br />
 Microsoft: http://www.microsoft.com/technet/security/current.aspx<br />
 Forum of Incident Response and Security Teams: http://www.first.org/<br />
 SANS Institute: http://www.sans.org/resources/</p>
<p>Author: Jeremy Martin CISSP, ISSMP, ISSAP, CEI, CEH, CHS-III, CCNA, Network+, A+<br />
 http://www.infosecwriter.com</p>
<p>Member of:<br />
 BECCA &#8211; Business Espionage Controls &#038; Countermeasures Association<br />
 ISACA</p>

	Tags: <a href="http://www.eb-implement.com/tag/ceh/" title="CEH" rel="tag">CEH</a>, <a href="http://www.eb-implement.com/tag/cissp/" title="CISSP" rel="tag">CISSP</a>, <a href="http://www.eb-implement.com/tag/dos/" title="DoS" rel="tag">DoS</a>, <a href="http://www.eb-implement.com/tag/hacking/" title="hacking" rel="tag">hacking</a>, <a href="http://www.eb-implement.com/tag/homeland-security/" title="homeland security" rel="tag">homeland security</a>, <a href="http://www.eb-implement.com/tag/issap/" title="ISSAP" rel="tag">ISSAP</a>, <a href="http://www.eb-implement.com/tag/issmp/" title="ISSMP" rel="tag">ISSMP</a>, <a href="http://www.eb-implement.com/tag/jeremy-martin/" title="JEREMY MARTIN" rel="tag">JEREMY MARTIN</a>, <a href="http://www.eb-implement.com/tag/security/" title="Security" rel="tag">Security</a><br />
]]></content:encoded>
			<wfw:commentRss>http://www.eb-implement.com/security/dos-attacks-instigation-and-mitigation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
