March 30, 2011 (Powerhomebiz.com) The ongoing WikiLeaks exposure, frequent cyber-attacks and data breach incidents have forced governments worldwide to initiate measures to improve cyber security. WikiLeaks continues to leak sensitive diplomatic cables and classified information causing embarrassment for several governments worldwide. Recently, the Australian National Audit Office (ANAO) identified lapses in information security practices of government departments. The audit identified that the Department of the Prime Minister and the Cabinet allowed the staff to access free e-mail services such as those of Gmail and Hotmail. The audit recommended ban on use of free e-mail services in government departments and agencies as they may serve as threat vectors for attacks on computer systems and networks.
Attackers may use social engineering and other sophisticated techniques to extract privileged information from employees. They may install malware designed to gather confidential data on computer systems by luring employees to download malicious attachments. They may send cleverly crafted e-mails, which could lead to inadvertent disclosure of financial and non-financial data pertaining to the government departments and human resources. Leakage of such information may have adverse financial and strategic implications for the government.
Cyber-attacks on government departments may be caused by rival intelligence agencies, anti-national forces and cybercriminals. The motive behind such attacks may be to upstage targeted country through information warfare or extract sensitive information for cyber espionage. Online university degree programs on cyber security and other security certifications may help working IT professionals to keep them abreast of evolving threats and best IT security practices.
Usually, IT professionals qualified in masters of security science and penetration testing evaluate the security of the IT infrastructure. In this case, security professionals of the audit office evaluated the security practices. The audit also revealed use of weak passwords in government departments and agencies. Brute force techniques were applied to test the password practices. Twenty percent of the passwords at three separate departments were compromised in the tests including those with administrative accounts.
The auditors recommended review of password practices in all departments and agencies. Security briefs, training sessions, online degree programs on cyber security and e-learning may enable employees to understand and adhere to cyber security tips and improve the IT security scenario of the departments. Passwords must be strong, unpredictable and must have combination of upper and lower case characters. Employees must use different passwords for different user accounts.
========
EC-Council
Website: http://www.eccouncil.org
Tel: 505-341-3228
EC-Council University is based in Albuquerque, New Mexico and offers Master of Security Science (MSS) degree to students from various backgrounds such as graduates, IT Professionals, and military students amongst several others. The MSS is offered as a 100% online degree program and allows EC-Council University to reach students from not only the United States, but from all around the world.
EC-Council is a member-based organization that certifies individuals in cybersecurity and e-commerce skills. It is the owner and developer of 16 security certifications, including Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT). Its certificate programs are offered in over 60 countries around the world.
EC-Council has trained over 80,000 individuals and certified more than 30,000 members, through more than 450 training partners globally. These certifications are recognized worldwide and have received endorsements from various government agencies including the U.S. federal government via the Montgomery GI Bill, Department of Defense via DoD 8570.01-M, National Security Agency (NSA) and the Committee on National Security Systems (CNSS). EC-Council also operates the global series of Hacker Halted security conferences.