 |
|
| FREE NEWS SERVICES • Newsletters • RSS feeds • Alerts |
CAREERWEB • Register • Post your CV • Find your job |
BRAINSTORM
• Subscribe • Read online |
iWEEK • Subscribe • Read online • Get into iWeek |
IT TRAINING • TrainingWeb ITWEB EVENTS • Events Calendar |
FEEDBACK
• Post your feedback • Send us a news tip |
 |
 |
|
Sponsor's
Message
Industry Insight
10 July 2002
Automating security systems
IDRIS CASSIM
, BUSINESS UNIT MANAGER, SECURITY
[
10 July 2002
] -
Automation is a key factor in the formulation of a resilient security
strategy, says Idris Cassim, business unit manager: security at Datacentrix.
"With the myriad of tools available on the market, it makes good business sense for a company to identify to the potential `holes` in their security system and then select a tool that will automatically safeguard it from a potential emergency," he explains.
For example, certain tools on the Internet automatically scan for open relay servers, or machines that have not been secured to prevent their being used to relay spam. These tools will automatically detect and blacklist domains, thereby blocking mail from those domains to others that check blacklists before accepting mail. De-listing is often as simple as fixing the problem and notifying the blacklist that this has occurred.
"A further example of this type of approach pertains to hackers. Most organisations are fully aware of the threat posed by hackers, so instead of sitting back and waiting for an attack, they should select a tool which will continually hack the system, identifying areas of weakness, which can then be rectified without the need for an actual emergency situation."
According to Cassim, a significant step forward in corporate protection is the use of a system with intelligent, proactive problem detection and problem solving capabilities. "The aim of the system is to provide organisations with the management tools required to proactively set and lock down policies that automatically keep systems up-to-date and properly configured."
This automation will also free up existing IT personnel to deal with the real security emergencies that may arise. "IT departments are most concerned with cost, credibility and uptime. An automated security system enables IT professionals to take a proactive approach to address threats that could negatively impact these issues," Cassim explains.
 |
| Idris Cassim |
For example, certain tools on the Internet automatically scan for open relay servers, or machines that have not been secured to prevent their being used to relay spam. These tools will automatically detect and blacklist domains, thereby blocking mail from those domains to others that check blacklists before accepting mail. De-listing is often as simple as fixing the problem and notifying the blacklist that this has occurred.
"A further example of this type of approach pertains to hackers. Most organisations are fully aware of the threat posed by hackers, so instead of sitting back and waiting for an attack, they should select a tool which will continually hack the system, identifying areas of weakness, which can then be rectified without the need for an actual emergency situation."
According to Cassim, a significant step forward in corporate protection is the use of a system with intelligent, proactive problem detection and problem solving capabilities. "The aim of the system is to provide organisations with the management tools required to proactively set and lock down policies that automatically keep systems up-to-date and properly configured."
This automation will also free up existing IT personnel to deal with the real security emergencies that may arise. "IT departments are most concerned with cost, credibility and uptime. An automated security system enables IT professionals to take a proactive approach to address threats that could negatively impact these issues," Cassim explains.
|
EDITORIAL CONTACTS
Datacentrix Holdings
Monique Barker (012) 348 7555 (012) 348 7555 mbarker@datacentrix.co.za PR Connections |
 |
||||||||||||||
|
 |
|||||||||||||
 |
||||||||||||||
Hear
from Mervyn King and others, including five leading SA corporates
explaining best practices and legal requirements as prescribed in
King III and other frameworks. Plus, attend a practical one-day
workshop.
|
Copyright (c) 1996 - 2010 ITWeb Limited. All rights reserved. Would you like to see your news here? Contact us for more details at itnews@itweb.co.za |
|||||||||||
|
