The Cloud Security Newsletter - February 2011 Edition

The Cloud Security Newsletter
The most trusted source for security and IT professionals	February 2011 Edition
WEB TRANSACTIONS PER USER PER DAY Average Web use is over 3,000 transactions per day Zscaler data shows that the average user conducts 3,343 web transactions per day.  That presents a high web security risk to even a small organization with 1,000 active users - there are roughly 3.34 million web transactions from the organization's user population during a workday.   Of the 100,000 random anonymous users in the sampling, the maximum number of web transactions from a single user account was 597,064. The median (50th percentile) was 1912 web transactions per user per day. Learn More   TECH TALK Facebook and the HTTPS/Security Paradox Did you hear that Facebook recently took a step towards protecting its users' privacy by allowing all transactions to be encrypted via HTTPS? Well, check again! Unfortunately, on Facebook, HTTPS is not enabled by default - users still have to enable this setting within their Account Settings page. Encrypting web traffic is typically a good plan. However, the paradox is that moving to HTTPS for all transactions provides protection against sidejacking and defends user privacy, but prevents inspection of network transactions for malicious content. This is potentially a very scary "blind spot" within enterprise environments. Learn More   SECURITY INNOVATIONS Free tool to combat fake and compromised storefronts Browser blacklists are improving, and slowing the success of traditional social engineering attacks like fake antivirus campaigns.  However, many attackers are shifting to fake or compromised online storefronts, which browsers cannot detect. Zscaler has released Safe Shopping, a browser plugin that protects web users from falling victim to attacks from fake and compromised online stores. Learn More    EDUCATIONAL RESOURCES Is a $1 Smartphone App a Million Dollar Liability? Webcast: March 2 & 3, 2011 (3 sessions) The consumerization of IT has blurred the line between business and personal smartphones. Join experts from IDC and Zscaler as they discuss the challenges and solutions around mobile security. Learn More   NEWS HIGHLIGHTS 2011: Year of the (Wireless) Cloud By Craig Mathias, Network World 2011 is becoming the pivot point in the market's overall thinking: the cloud isn't just the most important trend in IT - it's essential to the future of mobility. Learn More   IPhone attack reveals passwords in six minutes By Martyn Williams, IDG News Service Passwords for networks and corporate information systems can be revealed if an iPhone or iPad is lost or stolen, say Fraunhofer SIT researchers. Learn More   iPhone security, IP route hijack prevention on tap at RSA Conference Ellen Messmer, Network World RSA Conference 2011 introduced a wave of enterprise security products and services. Learn More   SECURITY PRACTITIONER'S COLUMN Securing Health Services     Northeast Health Wangaratta (NHW) is a leading health service in Victoria (Australia).   NHW's previous security solution added latency because all traffic was backhauled to their central site; which also introduced single point of failure. Also, a complex policy management control led to declining access to web applications to users. NHW's IT Manager, Talpasai Goli, chose Zscaler's cloud security to reduce their IT burden, improve productivity and further lower their business risk. Read Case "By using Zscaler, North East Health has kept its web security licensing costs the same, but at the same time has achieved delivery of a fully redundant solution, reduced administration and operational time significantly, and removed the burden of managing web log files." - Talpasai Goli, IT Manager, NHW           If you or your colleagues would like to receive this newsletter, please sign up.         Copyright 2010 Zscaler, Inc. 392 Potrero Avenue, Sunnyvale, CA 94085 | 1.866.902.7811 | webcast@zscaler.com.

Note: Your e-mail is in our mailing list as security.world@gmail.com, if you wish to be removed from our mailing list please use the link below to unsubscribe from any future mailings. We will respect all unsubscribe requests Unsubscribe

---