Home > Financial Services Information Security Tips > Security Architecture Insider > Storage vulnerabilities you can't afford to miss
Financial Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

SECURITY ARCHITECTURE INSIDER

Storage vulnerabilities you can't afford to miss


Kevin Beaver
12.15.2005
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


When it comes to the crowned jewels of business networks, I can't think of any systems more critical than storage servers. Whether you've got an advanced SAN, NAS or simply run-of-the-mill file servers housing your organization's information, your systems must become and remain as secure as possible. Unfortunately, in the rush to add more storage space, implement a brand-new network-based storage system and deploy desperately needed servers at the last minute, there are holes -- large, gaping holes -- left in the storage configuration that can easily be exploited by someone with nothing better to do.

These vulnerabilities seem almost too obvious, but they're quite pervasive in today's networks -- especially given the complexity of the information systems that network managers are responsible for today. Some are technical in nature and others I've seen are business-related, but they're certainly items you can't afford to overlook.

If you're a network manager responsible for the administration and security of your organization's critical stor


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Security Architecture Insider
Winning the war: Personal information protection
Why financials must implement Web application security best practices
Identity management for financial firms in turbulent times
Identity management for financial firms in turbulent times
How to use data loss prevention tools to stop data exfiltration
Security questions to ask SaaS vendors when outsourcing services
Book chapter: Remote deposit capture risks
How to communicate the value of security controls for online transactions
How to perform a network device audit
Emerging themes in identity access management

Secure network storage
Event data analysis
Top NAC challenges include cost, interoperability issues
Encryption best practices
Time to prepare for SAN security
The TJX data security breach: 10-K filing shows IAM and compliance mistakes
Fitting removable storage devices into an enterprise security policy

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


age systems, it's time to find and fix these loopholes before they're exploited, leaving you caught in a jam. Network-based security controls aren't the answer; poor software development practices aren't going away and we all know that 'security awareness training' only goes so far. Root out these vulnerabilities in your storage systems and implement some reasonable controls at the lowest levels you can reach. It's an excellent way to layer security and batten down the hatches on the systems for which you're responsible. It's your last line of defense.

About the author:
Kevin Beaver is an independent information security consultant with Atlanta-based Principle Logic, LLC. He has more than 17 years of experience in IT and specializes in performing information security assessments. Kevin has authored five information security-related books including Hacking For Dummies,Hacking Wireless Networks For Dummies, The Practical Guide to HIPAA Privacy and Security Compliance (Auerbach).

This tip originally appeared on SearchStorage.com

Rate this Tip
To rate tips, you must be a member of SearchFinancialSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Finance Sector Security - Anti-Phishing, Remote Access Security, Firewall Systems
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2008 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts