Archive for March, 2010

Sega and high voltage software confirm conduit 2 for wii

March 31st, 2010

For business owners who have decided to make their organization mobile and let people work remotely from home or on the road, security is an issue that must not be forgotten. Unless they think carefully about protecting data, they could land themselves in a whole heap of trouble.

Security increasingly is becoming a difficult problem for small businesses in Canada, many of which do not realize how quickly attacks are mounting. Years ago, the main security threat was from mischievous virus writers that wanted to wipe your hard drive or make your computer do odd things for fun. These days, attackers are much more focused on harvesting the data on your hard drive, hopefully without you noticing.

“That information is the holy grail for attackers, because they can profit from it,” says Michael Murphy, vice-president and general manager for Symantec Canada. “The landscape has changed. The computer is not the target. The attacks are exploiting vulnerabilities and lack of awareness, through methods including good old-fashioned social engineering.”

Social engineering attacks exploit a lack of user education to pilfer data. In the United States, for example, phishers – criminals who lure victims to fake websites using spoofed emails – pretended to be from the Internal Revenue Service, asking for peoples’ financial credentials. More recently, scammers have been sending emails from Facebook asking victims to install software to confirm a password change. The software then logs passwords entered for websites and remotely relays it back to the criminals.

For mobile workers, one of the biggest problems is that their information is spread across multiple physical boundaries. Some of it may reside at home. Other data might be on a mobile device or laptop on the road, while the rest is back at the office, but needs to be accessed remotely.

Trying to secure all this information in multiple places rather than keeping it all under lock and key at the office is a concept known as deperimeterization, and it is harder than it looks. For example, many small businesspeople who take their laptops on the road fail to encrypt the data stored on them. The inevitable sinking feeling when they realize they have left their laptop in the back of a cab is then followed by anguish when they realize the customer records on the hard drive will be accessible by anyone with a modicum of technical knowledge. If you think your Windows password is enough to protect your data, forget it. Unless the actual data on a hard drive is encrypted, it simply prevents system logons. Instead, invest in a full disc encryption product that protects data from criminals who could otherwise scan the hard drive using readily available tools.

However, this still leaves the problem of accessing remote data securely across public networks when out of the office. Many security professionals will recommend a simple virtual private network, which encrypts data in transit. Brian Bourne, founder of the Toronto-based security conference SecTor, issues a cautionary note.

“One problem with VPNs is that users simply copy information on to their desktop to work on it,” he says. That may not be a problem if the local hard drive is encrypted, but could be a security risk otherwise. Or, they could use the VPN to try and email sensitive data to themselves using a personal webmail account, which is even worse.

Instead, Mr. Bourne recommends using a remote access service (such as the type covered in the previous article, or Microsoft’s Remote Desktop Services), that gives users access to a representation of their desktop, and that can be configured not to allow, say, the copying of information to a local desktop.

Maintaining up-to-date antivirus software also is crucial, as is regularly applying security patches to your mobile and office-based systems. Ensure passwords are strong (combinations of letters, numbers and symbols are best, and store them in encrypted password management software on mobile computers). Identify where your most valuable data lies, and concentrate on protecting it – and, above all, backup that data to an encrypted store.

In a world full of online threats, complete security is never guaranteed – but you can at least make your company secure enough that online criminals will go elsewhere.

Source:http://www.financialpost.com/small-business/business-solutions/story.html?id=2749124

Software can help parents combat cyber-bullying

March 31st, 2010

Citing bullying, cyber-bullying and other crimes, prosecutors Monday charged nine teens who they allege pushed a 15-year-old Massachusetts girl so far that she hanged herself two months ago.

According to law enforcement officials, Phoebe Prince was threatened and harassed almost from her first day at South Hadley High School.

Prince, who came to the school from Ireland, was ostracized for having a brief relationship with a popular boy, hanged herself in January — after a day that the district attorney described as “torturous” and that included being hounded with slurs and pelted with a beverage container as she walked home from school.

The teens face charges for what a prosecutor called “unrelenting” bullying, including two teen boys charged with statutory rape and a clique of girls charged with stalking, criminal harassment and violating Prince’s civil rights.

The bullying and cyber-bullying endured by Prince is becoming more and more common.

A February study by the Cyberbullying Research Center shows that 20 percent of the 4,000 12 to 18 year olds in the sample reported being cyber bullied during their lives. When asked the previous 30 days, 13.7 percent reported being the recipient of mean or hurtful comments and 12.9 percent said they had rumors spread online about themselves. Seventeen percent of the sample reported being cyber-bullied in one or more of the nine types reported, two or more times over the course of the previous 30 days.

The study also shows that cell phones continue to be the most popular technology utilized by teens with almost 83 percent of those in the study report having used one at least weekly.

And cell phones, especially smart phones, pose a problem for parents seeking to monitor their child’s activities. A home computer can have a program such as Net Nanny installed, which lets parents track their child’s usage. Traditional parental controls for cell phones have primarily focused on filters for what multimedia content, usage controls to limit the number of calls and texts a phone can receive or disable the phone at certain times, and location and monitoring controls.

SMobile Systems, recently unveiled the latest version of its Parental Controls and Monitoring service, which now includes GPS tracking and picture monitoring and takes traditional phone monitoring a step further.

The Parental Controls Dashboard from SMobile Systems (News – Alert) is a Web-based software, which enables parents to define and set keyword alerts, view the people contacting their child, utilize remote location services, and monitor pictures, images and messages sent to and from their child’s phone.

“Cell phones have become powerful mobile computing devices, complete with digital cameras and video recorders. As smartphone prices continue to fall, they have become a ‘must have’ for kids and teens,” said Neil Book, CEO of SMobile Systems. “There’s a perception out there that if we put parental control software on our desktops at home, we’re keeping our kids safe from cyber threats. But the reality is, our children are walking around with handheld computers in their pockets that are connected to the internet 24 hours a day. Our goal in developing the Parental Controls Dashboard is to give parents a similar set of tools to monitor their kids’ mobile activities as they have with programs like NetNanny and other Internet solutions for monitoring their personal computers.”

The Massachusetts Legislature cited Prince’s death and the apparent suicide of 11-year-old Carl Walker-Hoover of Springfield last year when members passed anti-bullying legislation earlier this month.

The Massachusetts cases aren’t the first time cyber-bullying has ended in death.

In 2006, 13-year-old Megan Meier killed herself after being harassed on MySpace (News – Alert) by a neighbor’s mother, posing as a 16-year-old teenage boy.

The death of the Missouri teen spawned legislative efforts, the Megan Meier Cyberbullying Prevention Act, which would amends the federal code to impose criminal penalties on anyone who transmits in interstate or foreign commerce a communication intended to coerce, intimidate, harass, or cause substantial emotional distress to another person, using electronic means to support severe, repeated, and hostile behavior. The bill has been in subcommittees since its April 2009 introduction.

Source:http://dns.tmcnet.com/topics/internet-security/articles/80474-software-help-parents-combat-cyber-bullying.htm

Software can help parents combat cyber-bullying

March 31st, 2010

Citing bullying, cyber-bullying and other crimes, prosecutors Monday charged nine teens who they allege pushed a 15-year-old Massachusetts girl so far that she hanged herself two months ago.

According to law enforcement officials, Phoebe Prince was threatened and harassed almost from her first day at South Hadley High School.

Prince, who came to the school from Ireland, was ostracized for having a brief relationship with a popular boy, hanged herself in January — after a day that the district attorney described as “torturous” and that included being hounded with slurs and pelted with a beverage container as she walked home from school.

The teens face charges for what a prosecutor called “unrelenting” bullying, including two teen boys charged with statutory rape and a clique of girls charged with stalking, criminal harassment and violating Prince’s civil rights.

The bullying and cyber-bullying endured by Prince is becoming more and more common.

A February study by the Cyberbullying Research Center shows that 20 percent of the 4,000 12 to 18 year olds in the sample reported being cyber bullied during their lives. When asked the previous 30 days, 13.7 percent reported being the recipient of mean or hurtful comments and 12.9 percent said they had rumors spread online about themselves. Seventeen percent of the sample reported being cyber-bullied in one or more of the nine types reported, two or more times over the course of the previous 30 days.

The study also shows that cell phones continue to be the most popular technology utilized by teens with almost 83 percent of those in the study report having used one at least weekly.

And cell phones, especially smart phones, pose a problem for parents seeking to monitor their child’s activities. A home computer can have a program such as Net Nanny installed, which lets parents track their child’s usage. Traditional parental controls for cell phones have primarily focused on filters for what multimedia content, usage controls to limit the number of calls and texts a phone can receive or disable the phone at certain times, and location and monitoring controls.

SMobile Systems, recently unveiled the latest version of its Parental Controls and Monitoring service, which now includes GPS tracking and picture monitoring and takes traditional phone monitoring a step further.

The Parental Controls Dashboard from SMobile Systems (News – Alert) is a Web-based software, which enables parents to define and set keyword alerts, view the people contacting their child, utilize remote location services, and monitor pictures, images and messages sent to and from their child’s phone.

“Cell phones have become powerful mobile computing devices, complete with digital cameras and video recorders. As smartphone prices continue to fall, they have become a ‘must have’ for kids and teens,” said Neil Book, CEO of SMobile Systems. “There’s a perception out there that if we put parental control software on our desktops at home, we’re keeping our kids safe from cyber threats. But the reality is, our children are walking around with handheld computers in their pockets that are connected to the internet 24 hours a day. Our goal in developing the Parental Controls Dashboard is to give parents a similar set of tools to monitor their kids’ mobile activities as they have with programs like NetNanny and other Internet solutions for monitoring their personal computers.”

The Massachusetts Legislature cited Prince’s death and the apparent suicide of 11-year-old Carl Walker-Hoover of Springfield last year when members passed anti-bullying legislation earlier this month.

The Massachusetts cases aren’t the first time cyber-bullying has ended in death.

Source:http://dns.tmcnet.com/topics/internet-security/articles/80474-software-help-parents-combat-cyber-bullying.htm

Ramco to expand into Africa, West Asia markets this fiscal

March 31st, 2010

Software company Ramco Systems Ltd is firming plans to expand into the African and West Asian markets in 2010-11 and enter domains such as healthcare and education, a top executive said.

Chennai-based Ramco returned to quarterly profits in 2009 after about seven years of making losses. The expansion now would boost the firm’s revenue by 35% and profit by around 70% in the next fiscal year, chief operating officer Kamesh Ramamoorthy said.

For the quarter ended 31 December, Ramco posted total income of Rs42.29 crore and net profit of Rs0.36 crore. In the fiscal year ended 31 March 2009, it reported an income of Rs195.29 crore and net profit of Rs2.02 crore.

“Under good times, we would never have imagined to have done this (returned to profits),” said Ramamoorthy, explaining that the slowdown in developed markets forced the firm to explore partnership models and new geographies. “Now it is all about how do we really get to those levels of good profits, mega profits and good revenue growth.”

Ramco has around 30 partners in India to implement its software as a service model—Ramco OnDemand ERP—and plans to increase this to 100 by the end of fiscal 2011.

In the next two-three years, Ramco wants to enter underserved markets that have been left relatively unharmed by the global depression, such as Ghana, Ethiopia, Yemen and Brazil, as well as developed nations such as the UK.

To do this, it plans to enter into strategic alliances with small companies in the region that would strike deals for Ramco’s products and services.

Under this arrangement, the local company would get a percentage of the revenue from the customers, and implementation costs. Ramco is currently scouting for partners in the UK, Brazil, Tunisia and Utopia.

“It is a risky proposition (Ramco being a software products company),” said Diptarup Chakraborti, principal research analyst at the India office of technology researcher Gartner Inc. “(But) because it is risky, it is highly profitable. Once you turn the corner, you go on making profits,” he said, commenting on products companies in general as he does not track Ramco Systems specifically.

Ramco is looking to focus on government projects and e-governance in the African countries, and on enterprise resource planning (ERP) products for small and medium businesses in West Asia.

In Europe, Ramco wants to sell ERP products for midsize companies, with a special focus on manufacturing businesses, and its focus in the US would be on outsourcing of managed services and aviation, said Ramamoorthy.

The company, so far focused on sectors such as banking, financial services and insurance, also plans to enter the healthcare and education segments by co-creating products with other firms. It is already working with the International Institute of Information Technology, Bangalore to create campus management and student administration packages.

Ramco is also in talks with a few US-based companies for co-creation of products. Ramamoorthy declined to name the firms as the talks are in early stages.

He said Ramco’s strategy was to look at sectors with high growth potential over the next two years.

“While we don’t have a 100% product for this (healthcare and education), the idea is to co-create a product with someone who is already there. Because of the strength that we have, we can create solutions around standard products,” said Ramamoorthy.

Source:http://www.livemint.com/2010/03/31233735/Ramco-to-expand-into-Africa-W.html

NASA joins Toyota software probe

March 31st, 2010

US regulators have kicked off what promises to be a thorough investigation of glitches allegedly plaguing some of Toyota’s vehicular systems and related software.

The probe will be conducted by experts from the National Aeronautics and Space Administration (NASA), while the National Academy of Sciences is slated to initiate a separate, 15-month study into the use of computer technology in cars.

NASA joins Toyota software probe”NASA is an organization that has a great deal of expertise in electronics. And they’re going to look at the electromagnetic problems that people believe have occurred,” Transportation Secretary Ray LaHood told ABC News.

“We want Toyotas and all cars to be the safest they can possibly be. And if these folks can help us get there, then it will be well worth the time and energy and money it takes to get there.”

According to NASA spokesperson Keith Henry, the engineers investigating the issue of Toyota’s sudden acceleration are the “top people” in their field and specialize in such areas as electronics and crew systems related to cockpits.

“Possible electrical faults are something that these engineers have been looking at for years and years,” he added.

Source:http://www.tgdaily.com/hardware-features/49191-nasa-joins-toyota-software-probe

Cisco simplifies wireless networking

March 31st, 2010

Taking a page from Apple’s playbook, Cisco has introduced a line of wireless routers that greatly simplifies the often complex process of setting up a home network.

Cisco debuted its Valet line Wednesday, saying the product pairs the company’s wireless technology with the simplicity-in-design knowledge Cisco gained when it acquired Pure Digital Technologies, makers of the Flip camcorder, a year ago.

Not to leave tech experts and enthusiasts out in the cold, Cisco also introduced a line of Linksys wireless routers that offers more advanced features.

The Valet line poses the greatest challenge to Apple’s Airport, which owes its success to its ease-of-use. Cisco follows that same path through its Connect software, which the company claims can setup a PC or Mac for use with a Valet router in three steps.

Wireless routers with simplified setup and management could help boost deployment in U.S. homes. While the number of home networks is growing, adoption has been slow, primarily due to the complexity. Only about a third of U.S. homes are currently set up for wireless use, according to IDC.

Cisco’s simplified Connect software comes in what the company calls an Easy Setup Key that plugs into a USB port. The USB stick retains all the setup information for each home computer and can be used at anytime to add additional computers to the network.

In addition, the Connect software enables users to set parental controls, provide Internet access to people on a separate guest network, and customize personal security settings, such as passwords.

The Valet line comes in two models. The standard version for small and medium-sized homes with primarily wireless devices has a suggested retail price of $99.99. A Valet Plus model for medium- to large-sized homes with a mix of wireless and wired devices is priced at $149.99.

Cisco’s new Linksys E-Series also aims at simplifying the setup, customization and control of a home wireless network, while still providing advanced features through the routers’ default IP address.

The series comprises four models with suggested prices ranging from $79.99 to $179.99. Depending on the model, the routers support much more than just home computers, such as storage devices for file sharing at home or over the Internet, game consoles, Internet-enabled television, Blu-ray players and other wireless devices at transfer speeds up to 300 Mb per second.

Source:http://www.informationweek.com/news/infrastructure/routers/showArticle.jhtml?articleID=224200946

More than half of software companies deploying secure coding methods

March 31st, 2010

First, the good news: around 57 percent of software firms practice some form of secure coding in the development of their products. But the bad news is 43 percent are still not using formal secure development methods at all, according to a new report.

Errata Security surveyed professionals with software firms who were attending the RSA Conference and SecurityBSides earlier this month in San Francisco, as well as others online, to gather data on just how far along secure coding practices really are in software companies. Half of the 46 respondents said building secure products is always a concern at their firms, and 81 percent say they are aware of formal secure software development efforts such as Microsoft’s SDL, BSIMM, SAMM, and CLASP.

Microsoft’s SDL was the most popular tool for secure software development methods, with Microsoft SDL Agile at number two, with 35 percent of the respondents using Agile SDL, most of which were small development firms and several large companies in the survey. “The survey showed a big win for Microsoft’s awareness program, but what I hope that Microsoft will learn from this is that small- to medium-sized software companies have different needs than the big guys. SDL-Agile is a good start, but now they need to re-evaluate the resource requirements with small company in mind,” says Marisa Fagan, security project manager at Errata Security.

Fagan says among those companies not deploying a secure coding program, the main reason was a lack of resources. “No matter what the size of the company, participants said it was too time consuming, too expensive, and too draining on their resources,” she says. “Another reason was that management had deemed it unnecessary…The survey showed that developers look to management to set the security agenda, and are generally not self-starters when it comes to including security in their code.”

Steve Lipner, senior director of security engineering strategy in Microsoft’s Trustworthy Computing Group, said in a statement that Microsoft was encouraged by some of the survey results. “We are encouraged to see from the Errata Survey results that many companies are taking proactive security measures in their development processes and that the Microsoft SDL and SDL for Agile are being adopted to create more secure software,” Lipner said.

Gary McGraw, CTO at Cigital and one of the creators of BSIMM, says BSIMM, a way to measure secure coding initiatives, is often confused with a secure coding methodology or tool: “BSIMM is a measuring stick,” McGraw says. “Most organizations involved in BSIMM have their own methodologies.” Microsoft, Adobe, and EMC, all BSIMM participants, use their own methods of secure development, for example, he says.

Source:http://www.darkreading.com/vulnerability_management/security/app-security/showArticle.jhtml?articleID=224200945&cid=RSSfeed_DR_News

Get Adobe Flash playerPlugin by wpburn.com wordpress themes