Feeds

When desktop security is a remote possibility

Are security tools a double-edged sword?

  • alert
  • submit to reddit

The essential guide to IT transformation

Workshop You, the readers of The Register, have told us that supporting users is fraught with problems. And when it comes to looking after remote users things get even more difficult.

It is clear that running all remote users in thin client mode is a prospect that, while attractive, still does not fit well with a broad set of business requirements. Securing remote workers and their machines still needs skill, good tools and excellent processes. So we are going to drill down and take a look at some new management solutions and assess whether they ready to be exploited or could pose more problems than the security risks they seek to mitigate.

Some of the solutions being proposed and increasingly deployed to help secure laptops and remote PCs include encryption, device location tools and remote content locking and deletion capabilities. There is absolutely no argument that each of these approaches can enhance security when utilised appropriately, but it must also be recognised that each has its own potential pitfalls.

Take encryption. In the past many attempts to use encryption on mobile laptops were thwarted by the CPU overhead required to encrypt and decrypt files. Opening and closing files took so long that users quickly sought ways to sidestep the encryption tools as they made using the laptops too slow.

Times have changed and for a large proportion of laptops, the encryption overhead is now bearable. The raw processing power in the machines has grown, and encryption software has become more efficient. Problem over? By no means. When encrypting files on remote laptops becomes feasible, managing the keys that allow the files to be opened will become a sticking point. If the keys used to lock a file are lost or corrupted, the data itself may be irretrievably lost, taking valuable corporate information with it. There is also the small matter that in certain legal jurisdictions the law may make it a crime not to be able to unlock an encrypted file when so ordered.

Device location and content locking solutions also have drawbacks alongside their advantages. The ability to identify the physical location of a laptop when misplaced, lost or stolen is certainly information that could help avoid many business problems, and potentially speed up the time by which a user can be productive again. It can also help police and other authorities if the machine in question is especially sensitive or valuable. The opportunity to limit the impact of possible “data leakage” is an area where interest is likely to grow as privacy and legislative requirements become even more pronounced.

But once again, is this a solution many users will be happy with? The privacy issues are by no means insignificant and in many countries may be insurmountable except in exceptional circumstances. The “remote kill” capability that some solutions add to the mix needs to be the subject of a very well-managed process if information is not to be wiped accidentally or maliciously by an administrator with the privilege so to do. Clearly such tools need to be closely integrated with data protection systems and processes.

These solutions are still in the first flush of youth, and few organisations have managed to create effective procedures capable of working in a foolproof fashion. As the saying so neatly explains, “nothing is foolproof as fools are so ingenious”.

As with all new IT solutions, security technologies take time to evolve and lose the rough edges that are capable of stripping off the skin of the unwary IT administrator or manager. If you have good examples of how to keep your remote users happy with the security solutions you put in place, we will be very glad to hear your experiences. Equally, and maybe more likely, if you have any war stories where security solutions have caused you more trouble than they ought to, please let off steam about them here. ®

Boost IT visibility and business value

More from The Register

next story
So, Apple won't sell cheap kit? Prepare the iOS garden wall WRECKING BALL
It can throw the low cost race if it looks to the cloud
Apple's iWatch? They cannae do it ... they don't have the POWER
Analyst predicts fanbois will have to wait until next year
AMD unveils 'single purpose' graphics card for PC gamers and NO ONE else
Chip maker claims the Radeon R9 285 is 'best in its class'
Barnes & Noble: Swallow a Samsung Nook tablet, please ... pretty please
Novelslab finally on sale with ($199 - $20) price tag
Apple to build WORLD'S BIGGEST iStore in Dubai
It's not the size of your shiny-shiny...
Just in case? Unverified 'supersize me' iPhone 6 pics in sneak leak peek
Is bigger necessarily better for the fruity firm's flagship phone?
Steve Jobs had BETTER BALLS than Atari, says Apple mouse designer
Xerox? Pff, not even in the same league as His Jobsiness
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?