mr david neal

On the web, it pays to suspect everything

Users must be taught that even the most innocent-looking sites can harbour threats

Written by David Neal

When I was a much younger man I foolishly bought some magic beans. I say foolishly, because these beans led to a rather embarrassing scene after I mistook them for the plain old kidney variety and added them to a chilli I was making for a dinner party.

The beans were most flavoursome, by all accounts, but unfortunately for my guests they also sprouted a prodigious amount of stalkage as soon as they made contact with gastric juices. I was fine because I had picked out the beans in my portion for fear of them bringing on a chronic attack of flatulence.

Bad wind was the least of my guests’ problems that night, and it took a lot of soothing words, not to mention vigorous pruning, to get them in a calm enough state to leave the flat.

I haven’t bought any beans, magic or otherwise, since that night. Indeed, the episode had such a profound effect on me that I never buy anything from anyone even vaguely suspicious ­ a category that for me covers around 98 per cent of the human population, including all Arsenal fans, but that goes without saying from a Spurs supporter.

This has turned out to be a wise move. I have never been conned into anything, never bought anything that might have killed me, and consequently go about with an air of smug satisfaction that some people find quite annoying.

My risk-averse approach to life has proved so successful that I have started applying my knowledge in a consultative capacity, with a special focus on the internet.

Unsurprisingly, business is booming. According to experts interviewed by my colleague Phil Muncaster at the Infosec show last month, a new bit of evil technology finds its way onto a web site every five seconds ­ and these are mainstream web sites we are talking about, not niche, erm, hobby sites. All those innocent-looking retail stores that your mum and dad like to browse are probably more of a threat to your computer’s health than a sledgehammer-wielding psycho with a hatred for, well, computers. The trouble is that most users just don’t seem to realise this.

If statistics are anything to go by, most of your staff are the sort of people who, when confronted with a door marked “Danger. Do not enter”, chuckle to themselves, and walk right in. To try to discourage this “leap of faith” attitude to internet browsing I have come up with the idea for a day-long course designed to instil a sense of fear and paranoia into users.

The course works like this: the trainee sits at their work computer and gets on with their daily routine. Meanwhile, I surreptitiously position myself behind them. In the event that they venture onto a web site that I deem inappropriate, I emit an ear-piercing yell and follow this up with a great deal of finger pointing, head shaking and even tutting.

So far, my training techniques have proved to be rather successful, and I have found that within moments either I am punched on the nose, or the user learns to stay clear of that kind of site while at work.

In most cases users treat the internet in a much more cautious manner following a training day, and I would love to offer my services to you all. Unfortunately, however, my time is tight, and the novelty of getting belted in the face at regular intervals is beginning to wear off, so I am reluctant to take my services to a wider market.

Instead, I would advise firms to treat staff security education with the same care and consideration that they do the procurement of security solutions. Firewalls, content blockers and anti-virus tools can work wonders, but they are frankly useless if staff are not properly trained in how to get the most of out of them.

  • Have your say
  • Send to a friend
  • Print this
  • Share

Tags:

reader comments

related articles

madeline bennett

Poor data protection must carry a heavy price

If firms want to avoid tougher penalties and more regulation, they must step up their data protection efforts 02 May 2008

 

BCS offers government advice on data control

The British Computer Society has urged the government to boost public trust in his ability to handle data 30 Apr 2008

FSA slams banks' data security

New report recommends firms appoint a senior manager in charge of data security 24 Apr 2008

ICO calls for data trading sanctions to be implemented

Tough penalties need to be used to protect personal data, says commissioner 23 Apr 2008

Security hits the business agenda

ISC2 survey highlights the growing importance of information security as a business enabler 23 Apr 2008

Infosecurity Europe show to focus on data breaches

Annual trade show will see the launch of the annual Information Security Breaches Survey 17 Apr 2008

Security awareness-raising forum is launched

New organisation aims to reduce human failings and improve organisations' security 12 Feb 2008

related whitepapers

today's top stories

Telepresence: coming to a screen near you?

Telepresence systems enable organisations to hold boardroom-style meetings with far-flung participants without the hassle and expense of arranging travel and accommodation. But while the technology is impressive, it does not come cheap, as Martin Courtney discovered when he sat in on a virtual meeting with executives from Philips 10 Mar 2010

Users give their verdict on Azure

Some of the first wave of UK adopters met in London recently to air their views on Microsoft’s cloud computing platform. Dave Bailey listened in 10 Mar 2010

Protests greet new Digital Economy Bill amendment

ISPs, digital rights groups and Liberal Democrat supporters cry foul 05 Mar 2010

Publishing special - Publishers innovate to survive

1) IT could hold the key to the future of publishing 2) Case Study: The Guardian harnesses social and mobile apps 3) How publishers are reacting to the iPad 02 Mar 2010

IT Leaders' Forum in association with IBM

A unique opportunity to hear from expert speakers and engage in a debate about the future of the CIO job function 29 Jan 2010

Advertisement

Keys to successful Service‐Oriented Architecture implementation

This white paper explores best practices and general design patterns for service oriented architecture (SOA).

The Roadmap to IT Maturity — Matching Strategy to Infrastructure for Business Success

This paper defines a roadmap for matching infrastructure strategy to business success.

Advertisement

Keep up to date with the latest products, services and technologies from the world's leading IT companies; ITHound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

More available - click 'submit' to view

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

Latest poll

NHS centralised data

NHS centralised data

Do you think the NHS can be trusted to safely look after personal data electronically?

View poll results

Latest audio and video articles

Video

HP unveils S Series notebooks

'Prosumer' line overhauled 01 Mar 2010

Web Seminar Listings

Preparing for enterprise-scale Windows 7 migration

The web seminar on 18 Feb will discuss how Windows 7 migration can increase IT efficiency in large enterprises, freeing up budgetary and personnel resources to focus on business innovation. Our panel of experts will examine the strategies, tools and services IT leaders can use to migrate successfully and reap the rewards of increased efficiency. 19 Feb 2010

Latest in-depth articles

Analysis

An expert view on mainframe migration

A look at the important decisions and necessary steps required before a mainframe migration 15 Mar 2010

Martin CaveComment

Lessons to be learned from cricket's internet outing

Imagine the scene. It’s the final of one of the most popular sporting events in the Indian subcontinent and millions of people are glued to their laptops and PCs in anticipation of the four runs required off the last ball of the match. Suddenly the connection jitters and 20 seconds later you see the jubilant crowd flooding onto the field of play… 12 Mar 2010

Primary Navigation