The Network Security. Org

Plugging Windows security holes? Hold the glue

By far, the hardest security hole to plug in the Windows enterprise is the one that comes from within -- and by that we mean the downloading of unauthorized intellectual property onto removable end point devices. Many administrators don't realize they can use Windows features in Group Policy and Active Directory to lock down hardware, and, indeed, the technology to do so has been around for some time.

But in the past few years, tools for port protection have started appearing that offer rich management and control of a wide range of hardware devices, such as USB ports, Wi-Fi, CD ROMs, memory sticks, printers and scanners, said Jeremy Moskowitz, an independent consultant and Group Policy expert based in Wilmington, Del.

Several companies that make software to lock down end points and even provide some reporting tools are; CenterTools Software GmbH, Ludwigsburg, which makes DriveLock; SmartLine Inc., in San Ramon, Calif., which makes DeviceLock; and Safend Inc., in Philadelphia, which makes Protector.

All three companies offer software that gives IT administrators the ability to use Group Policy to manage exactly which groups of users or individuals can download data and on which endpoints. They can even specify what time of day downloads can occur. Plugging Windows security holes? Hold the glue

More News

• Website infection rate triples
  



• How to Use Honeypots to Improve Your Network Security
  



• Microsoft Patch Tuesday Targets 26 Application Flaws
  



• SSL VPNs might not be as secure as you think
  



• 8 tips to filter spam effectively
  



• Onus on IP address owner to prove innocence
  



• How to install an SSH Server in Windows Server 2008.
  



• Several vulnerabilities closed in the Linux kernel
  



• 8 Best Practices for Encryption Key Management and Data Security
  



• Free Honeypot Client Could Sting Malware
  



• What Firewalls Do & Donot Do
  



• Symantec fingers D Link for bot attacks
  



• WhiteHat: 90% of Sites Still Vulnerable
  



• Red Hat releases free security code
  



• A new type of Bluetooth security
  



• Dude, where is my perimeter?
  



• Scaring users into IT security
  



• VMware fixes security bugs
  



• The top 10 security land mines
  



• Encrypt volumes through a cross platform GUI with TrueCrypt 5.0