Security to Go

If you still need evidence of the importance of securing computers'both the PCs themselves and their data'you don't have to look further than recent headlines. On July 18, the FBI admitted that 184 of its 13,000 notebook PCs were either missing or, in the case of 13 of them, stolen. Of those, at least one notebook contained confidential information from a closed investigation.The FBI may be embarrassed about the missing notebooks, but it is not alone. In Britain, notebook PCs have been stolen from the top-secret MI-5 and MI-6 security agencies, and the country's Ministry of Defense has reported 59 machines stolen and eight lost.It's no laughing matter: One security manufacturer estimates that 30,000 notebook computers are stolen in U.S. airports each year alone. And Safeware Inc., a computer insurance agency in Columbus, Ohio, has reported 387,000 notebook PC thefts last year, up 21 percent from 1999.On the data side, just ask the White House what it means to be under attack'its Web site, at , suffered three distributed denial-of-service attacks during May and had to defend against the Code Red worm in July and last month.Such attacks thrive on the ability of hackers to reach out and touch computers'particularly those connected to broadband networks such as those using digital subscriber lines or cable Internet.In April, Ronald Dick, director of the FBI's National Infrastructure Protection Center, told the House Energy and Commerce Committee that the threat of attacks isn't going away.'The Department of Defense reports thousands of potential cyberattacks launched against DOD systems. GAO reports that in 1999 and 2000, the Air Force, Army and Navy recorded a combined total of 600 and 715 [serious] cyberattacks, respectively,' he told the panel's oversight and investigations subcommittee.The issue of computer security is heightened by a federal push toward telecommuting. On Aug. 21, Transportation Secretary Norman Mineta told a Los Angeles audience that the government is aiming to increase the number of people who work remotely.'As a major employer, we in the federal government are increasing the number of our own employees that telework,' he said. He said the fiscal 2001 Transportation Department appropriations bill calls on agencies to make 25 percent of their work forces eligible for telecommuting by January and to add 25 percent each year after that until all eligible workers have the option.Such dispersion of workers will require many to have high-speed access and appropriate computer equipment at home'but it will also leave the systems of some of those at-home workers vulnerable to theft or hacking. Theft on the road is a perpetual concern for those who travel.On both ends of the spectrum'data security and physical security'hardware is available to enhance protection. Although software can be used to create and maintain firewalls, having a physical firewall in place offers added security along with other advantages. For making sure a notebook or desktop PC stays where it should, just about nothing beats a lock-down system that can anchor the device to a desk or workbench.Effective security extends beyond PCs.Telecommuters and small-office users are finding it advantageous to incorporate a networking hub, either wired or wireless, to facilitate work in different parts of a home or office.Wired hubs generally support 10- or 100-BaseT Ethernet standards, with adapters and wiring available for older homes or being built into newer ones.At the same time, the IEEE 802.11b wireless standard is gaining popularity as a networking standard [].Many of these hubs now include firewall protection, such as Network Address Translation (NAT), Port Address Translation (PAT) and Stateful Packet Inspection, to ward off denial-of-service attacks.NAT is the translation of an IP address used within one network to a different IP address on another network.In most cases, an organization will map local, or inside, network addresses to one or more global, or outside, IP addresses and unmap the global IP addresses on incoming packets back into local IP addresses.This approach can frustrate attempts by hackers to sniff or spoof a given IP address'one method through which a distributed attack can be launched.PAT is similar to NAT, and works when routers allow hosts on a LAN to communicate with the Internet without revealing their IP addresses.The outbound packets have their IP address translated to a router's external IP address. Replies come back to the router, which then translates them back into the private IP address of the original host for final delivery.Also known as dynamic packet filtering, Stateful Packet Inspection is a firewall architecture that works at the network layer and examines the content of a data packet as well as its header information. It can then compare the packet against previous behavior on the system, along with rules set up by the administrator.These three protocols can help keep hackers away, sharply reduce the possibility of distributed attacks and bring networking capabilities to remote locations.At the same time, the computer itself represents a security concern. The loss or theft of a PC is, at minimum, a great inconvenience, resulting in lost time and work while a replacement is found.But in most cases, more than hardware is lost: A lot of labor can vanish in an instant. And for people working with sensitive information, a lost computer can spell tremendous trouble.Keeping a notebook PC secure can be aided by proper hardware add-ons.Almost every notebook computer released in the last five years has had a small slot into which a cable lock can be inserted. This so-called Kensington slot, named after the company that originated and popularized the locking concept, can handle cables and even motion-sensitive alarms as part of a security plan.And the alarms are most often found on a carrying case for a PC, where they can come in handy at an airport where you may be distracted. The piercing alarm emitted by the device can scare off a thief, who'd rather not be noticed.