Remote Hacking via KVM

Privacy has got to be the security buzzword of 2007.  All out war has been declared by the subversives to use any means necessary to capture everyone’s personal details.

Privacy is so paramount that even the non-profit making security organisation known as FIRST (www.first.org) has dedicated this year’s conference to the protection of Privacy of the corporate and the individual.

The hacker has an arsenal of weapons the more well-known being phishing emails, phishing web-sites, spyware, trojans, keystroke loggers, rootkits and network sniffers.

On the other-side, the corporate security officer has an armoury of defence systems including firewalls, authentication systems, malware detectors, sophisticated event log analysers, intrusion protection systems, patch management systems.

Each of these components is being used to protect the company from the outside threat.

Most Corporate Defences Are Pointing In The Wrong Direction

It is bizarre.  It really is.  Each year, I go to various security exhibitions and conferences, the quotes from all the vendors and all the analysts are that 60%-80% of attacks come internally - ie from the company’s own users.

At a guess 80% of a corporate security budget is spent on protection against the outside threat whilst a mere 20% is spent on internal protection.