« Symantec Introduces Security as a Service | Main | Podcast: Systems Under Siege - Steps a CSO Should Take Today: A Talk With Mike Rothman »
April 20, 2007Basic Rules to Defend Against Google Hacks
Some months ago I wrote a blog about the critical steps a company can take to prevent against some of the easiest of Google hacks, which usually entails a hacker searching for private and privileged information that has leaked out into the public sphere and within easy reach of Google.
First, it’s important to point out that Google is not to blame, as they are only providing access to what is already available. This is taken from SecuritySearch.com, and is based upon a presentation given by Tom Bowers, managing director of Security Constructs LLS based in Allentown, PA.
Hackers often unearth sensitive information using Google Earth, Google Patent Search, and Google Blog Search. Google can easily assists locating financial filings or security analyst reports that can serve up critical information. Also, Google Earth can reveal competitors plants, while Google Patent Search can easily pick up patents that might contain too-much information.
Daniel Pinto, from the company RAC Partners LLC, out of New Jersey, says the key is to make everyone aware that certain types of information are not to be publicized, whether at an industry conference or on the internet. Essentially, companies need clear policies on what information can be released both by its employees and its partners.
Because if someone unearths your companies sensitive information, most don’t even considered it hacking, as once it’s on Google, it’s considered publicly available data. That’s why a good security team must maintain a foolproof firewall. Also, all email coming and going should be both encrypted and filtered.
Finally, to make sure people are kept aware of the need to protect critical corporate information, anyone who lets information slip should lose their access rights.
Tags: Google, Google Earth, Google Hacks, Data Protection,
Tags:
Posted by pschooff in
|
Digg This|
Add to del.icio.us
Trackback Pings
TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/1721

Twenty-Four Seven Security