mr david neal

On the web, it pays to suspect everything

Users must be taught that even the most innocent-looking sites can harbour threats

Written by David Neal

When I was a much younger man I foolishly bought some magic beans. I say foolishly, because these beans led to a rather embarrassing scene after I mistook them for the plain old kidney variety and added them to a chilli I was making for a dinner party.

The beans were most flavoursome, by all accounts, but unfortunately for my guests they also sprouted a prodigious amount of stalkage as soon as they made contact with gastric juices. I was fine because I had picked out the beans in my portion for fear of them bringing on a chronic attack of flatulence.

Bad wind was the least of my guests’ problems that night, and it took a lot of soothing words, not to mention vigorous pruning, to get them in a calm enough state to leave the flat.

I haven’t bought any beans, magic or otherwise, since that night. Indeed, the episode had such a profound effect on me that I never buy anything from anyone even vaguely suspicious ­ a category that for me covers around 98 per cent of the human population, including all Arsenal fans, but that goes without saying from a Spurs supporter.

This has turned out to be a wise move. I have never been conned into anything, never bought anything that might have killed me, and consequently go about with an air of smug satisfaction that some people find quite annoying.

My risk-averse approach to life has proved so successful that I have started applying my knowledge in a consultative capacity, with a special focus on the internet.

Unsurprisingly, business is booming. According to experts interviewed by my colleague Phil Muncaster at the Infosec show last month, a new bit of evil technology finds its way onto a web site every five seconds ­ and these are mainstream web sites we are talking about, not niche, erm, hobby sites. All those innocent-looking retail stores that your mum and dad like to browse are probably more of a threat to your computer’s health than a sledgehammer-wielding psycho with a hatred for, well, computers. The trouble is that most users just don’t seem to realise this.

If statistics are anything to go by, most of your staff are the sort of people who, when confronted with a door marked “Danger. Do not enter”, chuckle to themselves, and walk right in. To try to discourage this “leap of faith” attitude to internet browsing I have come up with the idea for a day-long course designed to instil a sense of fear and paranoia into users.

The course works like this: the trainee sits at their work computer and gets on with their daily routine. Meanwhile, I surreptitiously position myself behind them. In the event that they venture onto a web site that I deem inappropriate, I emit an ear-piercing yell and follow this up with a great deal of finger pointing, head shaking and even tutting.

So far, my training techniques have proved to be rather successful, and I have found that within moments either I am punched on the nose, or the user learns to stay clear of that kind of site while at work.

In most cases users treat the internet in a much more cautious manner following a training day, and I would love to offer my services to you all. Unfortunately, however, my time is tight, and the novelty of getting belted in the face at regular intervals is beginning to wear off, so I am reluctant to take my services to a wider market.

Instead, I would advise firms to treat staff security education with the same care and consideration that they do the procurement of security solutions. Firewalls, content blockers and anti-virus tools can work wonders, but they are frankly useless if staff are not properly trained in how to get the most of out of them.

Tags:

reader comments

related articles

madeline bennett

Poor data protection must carry a heavy price

If firms want to avoid tougher penalties and more regulation, they must step up their data protection efforts 02 May 2008

 

BCS offers government advice on data control

The British Computer Society has urged the government to boost public trust in his ability to handle data 30 Apr 2008

FSA slams banks' data security

New report recommends firms appoint a senior manager in charge of data security 24 Apr 2008

ICO calls for data trading sanctions to be implemented

Tough penalties need to be used to protect personal data, says commissioner 23 Apr 2008

Security hits the business agenda

ISC2 survey highlights the growing importance of information security as a business enabler 23 Apr 2008

Infosecurity Europe show to focus on data breaches

Annual trade show will see the launch of the annual Information Security Breaches Survey 17 Apr 2008

Security awareness-raising forum is launched

New organisation aims to reduce human failings and improve organisations' security 12 Feb 2008

related whitepapers

today's top stories

CIO priorities for the next six months: the Gartner view

Gartner research director Dave Aron outlines the three key priorities for IT leaders during the second half of 2009 13 Jul 2009

The wishful CIO – the further adventures of Bob

Like a phoenix, Bob has risen from the ashes of his once fast-tracked career . He is pursuing a green agenda as... 10 Jul 2009

Infallabile opposition to outsourcing

The Holy Father, Pope Benedict, has warned of the dangers of outsourcing. Yes, you’d better believe it. The Vatican is now stepping... 10 Jul 2009

Google Chrome OS - We didn't see that coming did we?

Reading through the various news and blog sites on the internet it seems the wheels of the rumour mill are turning apace... 10 Jul 2009

Strength through unity

The friction that has traditionally characterised relations between finance and IT has no place in today’s business landscape 08 Jul 2009

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

More available - click 'submit' to view

Existing User

Newsletter user login:

Advertisement

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Will Google Chrome OS be a genuine alternative to Windows?

Will Google Chrome OS be a genuine alternative to Windows?

Tell us your views on the new operating system rivalry

View poll results

Latest audio and video articles

network cablesVideo

How to maximise the value of your IT networking investment

A panel of experts discuss networking strategies that deliver real value to business 03 Jul 2009

green footprintsVideo

How to manage enterprise energy use - and the role IT can play

A panel of experts explore how firms can get to grips with their carbon footprint and make smarter use of energy 01 Jul 2009

Latest in-depth articles

Google ChromeAnalysis

Lack of enterprise appeal takes shine off Chrome OS

Enterprise buyers unlikely to ditch Windows for Chrome OS in the near term, say experts 09 Jul 2009

Satyam CEO CP GurnaniNews

How Satyam cleaned up its act

Chief executive CP Gurnani tells Angelica Mari why Tech Mahindra opted to keep the Satyam brand after it bought the scandal-hit services firm, and explains what the deal means for existing and prospective customers 09 Jul 2009

Advertisement

Primary Navigation