Mobility: Computer Security Enemy #1

The biggest problems in business network and computer security today come from Road Warriors, employees equipped with laptop computers. Modern businesses have done a good job of protecting their networks from outside attack. They’ve also done what they can to load protection software on office desktops. However, mobile computing has brought a new set of security problems to the forefront, risks that must be addressed.

Laptops at risk

Business LANs and WANs can be protected via a number of sources. Gateways can protect the internal network from many attacks. Anti-virus, anti-spam and other protection software can be loaded on local computers to further protect users from email attacks and those that arise from using outside CDs and disks. Most importantly, both sides of network security can be managed centrally by Information Services (IS) organizations that can configure and update protection automatically.

What happens, though, when a traveling employee goes on the road with a laptop? Many risks arise.
A major risk is simply theft. Someone stealing a laptop with VPN software not only can gain access to information on the laptop, but can potentially enter the corporation’s secure network.

An often overlooked risk is loss of security control by IS groups is lost and security is completely in the hands of the employee. When employees work from remote locations, they often do not have the same network bandwidth as on their office networks. As security software often slows a laptop’s performance, a traveler might change security setting to improve network connectivity — opening their computers to attacks that would other be stopped.
If someone changes the security settings on a networked computer, administrative consoles can warn IS, who can then check with the employees about the settings. That option is not available to mobile laptops.

Protecting the Laptop

One way to protect from networking threats to laptops is to remove the ability for the laptop user to manage the security settings. However, there needs to be a way to ensure improved network performance from remote locations. One way is to separate the security applications from the laptop.
By using a specialized computing appliance to protect the laptop, the best of both worlds can be provided. A small application on the laptop can prevent any network connections from working unless a USB security appliance is attached. Since the appliance is designed for security, it runs those applications faster than a PC can and frees PC resources in order to improve laptop performance.
An additional benefit derives from the ability to separate the USB appliance from the laptop. A computer thief is not able to access the corporation’s network without the appliance, adding a further level to an business’ security.