Products
SecurAccess
Turn ANY GSM mobile phone into an authentication token by texting one time passcodes
No Additional Hardware Token required ...
SecurlICE
SecurICE from SecurEnvoy is a revolutionary approach to the age-old problem of providing
secure access to corporate systems in the event of an emergency.
SecurPassword
SecurPassword from SecurEnvoy enables Microsoft Windows domain users to reset their
own password using mobile phones to create two-factor authentication.
SecurMail
SecurMail enables individuals to send and receive email across the internet using
standards based https and strong two-factor authentication of the recipient.
Latest News
June 2009Experts give a cautious welcome to new IT security plans announced todayEd Rowley, EMEA technical consultant at security vendor Marshal8e6, agreed that the global nature of the internet calls for more than separate national cyber security strategies, as announced by the US and now the UK.
"Only international co-operation between governments and ISPs will afford the level of security we expect and this still looks a long way off,” he said.
Steve Watts, co-founder of SecurEnvoy, argued that a better strategy from the government would be to encourage a more decentralised model of security, encouraging businesses and individuals to protect their own networks.
“Most organisations realise it’s their own responsibility to prevent cyber attacks," Watts said.
"But many still follow the ‘sun screen’ approach, and only apply measures when it’s invariably too late. While the government can’t claim ultimate responsibility, what it can do is encourage accountability – by putting the schemes in place to support it.”
Mikko Hyppönen, chief research officer at F-Secure, added to the voices welcoming the announcement, but warned that from a law enforcement perspective, a more global approach is required.
"Establishing an international agency - 'Internetpol' - with the enforcement power to really target the organised criminals who operate on the web is the best way forward in the fight against online crime," he said.
"It would ensure that investigations start at the top of the crimeware food chain and bring to justice the people who are running the online crime syndicates."
In truth, all the serious rhetoric from Gordon Brown aside, the success of the cyber security proposal really depends on how much funding the government is prepared to commit to the programme.
Recognising that there is a problem is an encouraging first step, but a cure will continue to prove elusive unless the government is prepared to engage internationally with governments around the world, especially those who allow cyber criminals to flourish undisturbed.
June 2009According to a new survey from SecurEnvoy almost 75% of UK employees have admitted that they have told at least two other colleagues their corporate passwords.The report suggests that passwords may not be as safe as thought, since employees give out their passwords so colleagues can access information while they are out of the office.
Co-founder of SecurEnvoy, Steve Watts, stated that while workers are trusting of their colleagues, it may not be a great idea to share passwords so easily since it can compromise one’s entire work life.
Watts suggested that password sharing be kept to a minimum.
He went on to say that it is important to be cautious, as in the current economic climate disgruntled workers are looking to access information they should not and the threat of short term consultants accessing high profile data is an especially high threat.
Other security concerns have been raised by SecurEnvoy as well, such as tube strikes which can send the trading market into disarray, and there is no clear definition of who may be accessing a company network due to the rise of remote workers.
The main concern with remote access entry into a company network is that it is hard to measure the security of applications when they are not under the control of normal IT infrastructure.
One prime example is the widespread use of Outlook Web Access which can introduce vulnerabilities because of its use of Internet Information Services.
June 2009Security experts have reacted positively to government plans to create an Office of Cyber Security and applauded plans to reach out to the nation's hacking community. Web User takes a look at some of the reactions.Rick Howard, director of Intelligence at iDefense, said he was "cautiously optimistic" about the plans to reach out to hackers in an effort to ensure the nation's security.
"It is encouraging to hear about the British authorities reaching out to the white-hat hacker community; the Russian and Chinese have been doing that for years and are way ahead of both the US and the UK in this regard," he said.
"Where the Russians and the Chinese have surpassed everybody else is their willingness to use amateur hacking groups to accomplish low-level cyber missions. The fact that the UK intends to use hackers for a good cause is encouraging," Howard continued.
Rob Elliss, director for Northern Europe at SafeNet, was just happy to see cyber security at the top of the government's agenda.
"The appointment of a cybersecurity chief and launch of a national strategy are very positive moves by the Government. Having seen the US do something similar last month, I'm pleased to see the UK is putting information security at the top of the public agenda," he said.
Steve Watts, co-founder of SecurEnvoy said that the nation's security should not come at the expense of civil liberties.
"Any cyber security strategy needs to negotiate a delicate balance – between heightening security and maintaining the openness of modern communication," Watts said.
Mikko Hypponen, chief research officer at F-Secure said that he would "like to see a focus on developing an offensive capability against online criminals".
"Anti-virus and security companies are doing their best to protect their customers' computers but little can be done directly by non-governmental organisations. These companies are not law enforcers, nor should they be," said Hypponen.
"At present, online criminals are essentially free to roam with almost nobody to stop them. If we don't take action now, online crime will continue to grow stronger and will end up destroying the current model of internet business, banking and commerce," he continued.
June 2009Finning (UK), a division of Finning International Inc. the world’s largest distributor of Caterpillar equipment and power systems, has turned to SecurEnvoy to provide an extra layer of security for its remote workers.Finning (UK), a division of Finning International Inc. the world’s largest distributor of Caterpillar equipment and power systems, has turned to SecurEnvoy to provide an extra layer of security for its remote workers.
Finning UK has signed a deal with SecurEnvoy to implement SecurAccess, which replaces its previous token system for remote working. SecurAccess provides employees with ‘virtual tokens’ – passcodes sent to their mobile phones – which are entered alongside usual login details, to access networks and emails from remote locations safely.
Karl McCormack, infrastructure manager at Finning UK said: “Our previous system using hardware tokens had many problems – they are expensive, easy to lose or break and are not at all user friendly. SecurAccess has provided the perfect solution to a complex problem facing IT security.”
“Mobile working is undoubtedly becoming more common, and we want to support employees who want more flexibly, without compromising security,” said Steve Watts, co-founder at SecurEnvoy. “Tokens get lost, go wrong and create waste, but everyone has a mobile phone with them all of the time, so it’s a much safer option.”
June 2009London tube strike - the inability to get to the office raises issues on remote access and the security implications.For those of you located in the capital you will undoubtedly be impacted by the RMT strike action that has caused chaos in London.
I am not about to get into political debate about the rights and wrongs of the strike, but much like when Britain was hit by snowstorms earlier this year, the inability to get to the office does bring about the conversations on remote access and the security implications.
Steve Watts, co-founder of IT security specialist SecurEnvoy, said: “When tube strikes send the capital into chaos, people need a way to keep working securely, and businesses need to know exactly who is accessing the company network - we've seen enough examples of lost data recently to understand why it matters.
“Being able to keep trading during a crisis is essential for survival in a harsh business climate. Industrial action is unavoidable, but the response to such an emergency must be controlled, with users gaining secure access to their information until the panic is over."
With remote access comes the questions about security, and how secure the applications being used are when they are not controlled by the office IT infrastructure. Aside from arguments about people having efficient anti-virus on their PCs and the use of USB sticks to carry information out of the office, the major debate at this time is about access.
James Blake, chief product strategist at Mimecast, claimed that the financial impact of the strike should act as a wake-up call to UK companies to put in place an effective business continuity strategy.
Blake said: “Yes, access for the remote workforce has been improving in recent years due to several new offerings including cloud computing, however, often staff do not have access to reliable remote facilities. There are also several security threats that must be considered when providing remote access to workers.”
Blake pointed out the use of Outlook Web Access, the use of which requires IT departments to ‘punch a hole in the firewall' as it frequently introduces vulnerabilities due to its reliability on Internet Information Services.
“Companies can experience several issues to do with Outlook Web Access stripping valid attachments off of emails. Additionally, users cannot access historical archived email and generally cannot search as quickly as needed if several users are logging on remotely at once,” said Blake
He further claimed that users who utilise Virtual Private Networks to access their email servers can find themselves unable to connect from remote locations due to the inability of networking equipment to pass through the connection.
This will result in users finding themselves unable to use WiFi connections to retrieve email and instead having to rely on expensive 3G connections that can easily consume an entire month's data allowance just receiving one or two large attachments.
Another analyst claimed that the need for secure remote access leads to a solution in the cloud. Jonathan Wilkinson, messaging security EMEA & APAC at Websense, claimed that as many businesses become increasingly mobile overall, and employees access company confidential information remotely, via the cloud or other hosted Web 2.0 services, it is vital that IT directors recognise the importance of enabling their workforce to embrace Web 2.0 technologies.
Wilkinson said: “The challenge is to recognise that whilst there is certainly responsibility on the part of the end user to ensure that they are sharing and communicating company data responsibly, responsibility also lies with IT directors to ensure that users are sufficiently educated on best practices surrounding the safe use of Web 2.0 and that effective protection is provided to mitigate th
June 2009Met de opkomst van mobiel werken, webservices en IT in het algemeen is authenticatie voor steeds meer mensen belangrijk. Natuurlijk is authenticatie geen doel op zich maar is het alleen om te zorgen dat de mensen voor wie het bedoeld is de informatie te zien krijgen.2-factor authenticatie.
Sterke authenticatie door middel SMS naar standaard mobiele telefoons. Hoe werkt nieuwe generatie van 2 factor authenticatie waarbij SMS wordt gebruikt als middel om de passcodes naar de gebruikers te brengen? Wat zijn de verschillen tov van bestaande sterke authenticatie oplossingen. Hoe kan ik het integreren met de verschillende directories, en belangrijker hoe kan dit met lage kosten van licenties en gemakkelijke uitrol gerealiseerd worden?
Spreker: Andy kempshaw
Andy is een van de oprichters en hoofd development van het Engelse SecurEnvoy. Hij is een autoriteit op gebied van sterke authenticatie, was een van de grondleggers van RSAís token oplossing en heeft ruime ervaring en goed verhaal over de authenticatie markt.
May 2009Finning has signed a deal with SecurEnvoy to implement SecurAccess, which replaces its previous token system for remote working. SecurAccess provides employees with ‘virtual tokens’ – passcodes sent to their mobile phones – which are entered alongside usual login details, to access networks and emails from remote locations.Karl McCormack, Infrastructure Manager at Finning UK said: “Our previous system using hardware tokens had many problems – they are expensive, easy to lose or break and are not at all user friendly. SecurAccess has provided the perfect solution to a complex problem facing IT security.”
“Mobile working is undoubtedly becoming more common, and we want to support employees who want more flexibly, without compromising security,” said Steve Watts, co-founder at SecurEnvoy. “Tokens get lost, go wrong and create waste, but everyone has a mobile phone with them all of the time, so it’s a much safer option.”
Additional News
Requires Outlook
