Hong Kong security vendors: FAIL - enterpriseinnovation.net

UPFRONT STEFAN HAMMONDWhite hats, black hatsComputer security used to be simple. Computers stayed in the ComputerRoom: surround by technicians in white labcoats. Ordinary workersaccessed these mythical machines through keyboards and “dumbterminals”—they could see their work and save it, but didn’t have access to it. Thismeant they didn’t have to back it up, and they couldn’t steal it either. As for viruses,that’s where you called in sick and spent a few days in bed not-watching DVDs(which didn’t exist) or fiddling with your Blackberry (which didn’t exist either).Later, computer malware entered the picture. At first it was young miscreantsand practical jokers—often called “script kiddies.” But malware soon grew fangs.After the “Chernobyl” virus of 1999, irreparable damage to PCs was possible,and the concept of “white hat” / “black hat” hackers became popular. The termscome from old-school American westerns where heroeswore white hats and villains black hats. The “black hat”hackers were naughty, but sometimes—often realizing thatearning-potential was higher—they would switch and become“white hat” hackers: working for a legitimate companyon anti-malware strategies.As the “white hat” hackers knew the techniques andStefan HammondEditorshammond@questexasia.commindset of the bad guys, they were effective. Old-school“MIS administrators” were astonished that kids with greenhair and nose-rings could write workarounds for viciouscyberattacks with ease. Importantly, the white hats liked toshare their techniques among their community: successfulgood guys can brag, successful criminals keep their mouths shut.Although the hat-terms are still in use, IT security is a different beast once again.Spam e-mails are still popular, and when phishing debuted, a more effective versionknown as “spear” (targeted) phishing evolved. Specific targeting increaseschances of success, so now real black hats want Facebook details so they can poseas “friends” and claim they’re stuck with no money and could you please wirethem a few hundred euros...perceived trust is always a factor in scams.Someone calls you saying they’re from your bank? Ask for their name and numberand tell them you’ll call them back, then hang up. Find a trusted source andinitiate contact.Verify on your own initiative. Don’t use easy-to-guess passwords and never giveout your passwords. Keep an eye on your valuables. Floss your teeth.The list goes on, but nowadays, you must take an interest in your own security inthe cyberdrome. You can no longer rely on either the guys in the white labcoats, orthe guys with the white hats.http://www.cw.com.hkComputerworld Hong Kong is published by Questex Asia Ltd, 501 CambridgeHouse, Taikoo Place, 979 King’s Road, Quarry Bay, Hong Kong.PUBLISHER Simon Yeung syeung@questexasia.comEDITORIALEDITOR-IN-CHIEF Chee Sing Chan cchan@questexasia.comEDITORStefan Hammond shammond@questexasia.comSENIOR REPORTER Teresa Leung tleung@questexasia.comCONTRIBUTINg wRITER Ross MilburnSALESACCOUNT DIRECTOR Connie Yip cyip@questexasia.comMARKETINg & SALES Carvin Lee clee@questexasia.comSUPPORTINg EXECUTIVEADMINISTRATIONART DIRECTOR Eric Lam elam@questexasia.comCIRCULATION & John Lam jlam@questexasia.comDISTRIBUTION DIRECTORASSISTANT CIRCULATION Allie Mok amok@questexasia.comMANAgERMANAgEMENTMANAgINg DIRECTOR Jonathan Bigelow jbigelow@questexasia.comHR & ADMIN MANAgER Janis Lam janislam@questexasia.comBUSINESS MANAgER Eunice Chan echan@questexasia.comComputerworld Hong Kong is published monthly. All material is Copyright2010 by Questex Media group, Inc. Reproduction is strictly forbiddenwithout written permission.Sales and Custom Publishing Enquiries: E-mail can be sent to syeung@questexasia.comComputerworld Hong Kong is circulated to IT, computingand internet companies and other privateand public companies who use IT and computing.It is edited for IT professionals, engineers, and seniormanagers responsible for design, installation,marketing and maintenance of IT systems and networks.Free subscription offer valid in Hong Kongonly. To subscribe, go to www.cw.com.hk.Computerworld Hong Kong (ISSN 1023-4934) ispublished eleven times yearly by Questex Asia Ltd.Subscription rates: 1 year HK$330 (Hong Kong only),HK$440 (Macau only), US$109 (within Asia) and (852) 2589-1313US$119 (outside Asia), 2 years HK$580 (Hong Kongonly), HK$770 (Macau only), US$190 (within Asia)and US$210 (outside Asia). Single/Back issue (ifavailable) HK$40 per copy (Hong Kong only) US$11(within Asia) and US$12 (outside Asia) plus US$5handling charge per order. Printed in Hong Kong.Postage paid in Hong Kong. For subscription enquiries,change of address or delivery services, please(852) 2559-2015contact our circulation department by: fax (852)2559-2015, e-mail customer_service@cw.com.hk or by mail.Computerworld Hong Kong is on sale in bookshops in Hong Kong atHK$40 per issue.Questex Media group LLC275 grove Street, Newton, MA 02466, Tel: +1 617 219 8300PRESIDENT & CHIEF EXECUTIVE OFFICER Kerry C. gumasEXECUTIVE V.P. & CHIEF FINANCIAL OFFICER Tom CaridiEXECUTIVE VICE PRESIDENTRobert S. IngrahamEXECUTIVE VICE PRESIDENTTony D’AvinoEXECUTIVE VICE PRESIDENTJon LeibowitzEXECUTIVE V.P. CORPORATE DEVELOPMENT Claudia FlowersVICE PRESIDENT, DIgITAL MEDIASeth NicholsPrinted by:Dg3 Asia Limited9th Floor, Haking (Tung Shing) Industrial Building34 Lee Chung Street , Chai wan, Hong KongTel: 852 2965 6777www.dg3.com/Average Circulation: 9,579www.cw.com.hkCMYCMMYCYCMYK4 Computerworld Hong Kong May 2010 www.cw.com.hk