 




<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>IT Governance, Risk, and Compliance &#187; Password-Protected Share</title>
	<atom:link href="http://itknowledgeexchange.techtarget.com/it-governance/tag/password-protected-share/feed/" rel="self" type="application/rss+xml" />
	<link>http://itknowledgeexchange.techtarget.com/it-governance</link>
	<description></description>
	<lastBuildDate>Mon, 20 May 2013 00:56:50 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Peer-to-Peer Networking &#8211; Part 2</title>
		<link>http://itknowledgeexchange.techtarget.com/it-governance/peer-to-peer-networking-part-2/</link>
		<comments>http://itknowledgeexchange.techtarget.com/it-governance/peer-to-peer-networking-part-2/#comments</comments>
		<pubDate>Tue, 03 Mar 2009 04:05:51 +0000</pubDate>
		<dc:creator>Robert Davis</dc:creator>
				<category><![CDATA[Applications]]></category>
		<category><![CDATA[HDLC]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Network Access Protection]]></category>
		<category><![CDATA[P2P]]></category>
		<category><![CDATA[Password-Protected Share]]></category>
		<category><![CDATA[Peer-to-Peer]]></category>
		<category><![CDATA[Performance]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Security Risks]]></category>
		<category><![CDATA[Share-level Security]]></category>
		<category><![CDATA[X.25]]></category>

		<guid isPermaLink="false">http://itknowledgeexchange.techtarget.com/it-governance/?p=84</guid>
		<description><![CDATA[Maybe, experientially, the small branch office with a P2P network has escaped a security incident since deployment.]]></description>
				<content:encoded><![CDATA[<p>Maybe, experientially, the small branch office with a P2P network has escaped a security incident since deployment. Even so, a functional P2P network unintentionally presents itself as a potential target waiting for someone capable of pulling the threat trigger to introduce a potent security disaster. For instance, at the infrastructure level, attacks can originate from hackers taking advantage of a P2P enabled application to assist spyware or malware in slipping past perimeter defenses and lodging in the background of user devices. In particular, a P2P-agent utilized in communications software can include or hide spyware that collects information about the target system as well as user, then subsequently send compromised information to unauthorized individuals without the legitimate owner&#8217;s knowledge. High-Level Data Link Control, Frame Relay, and X.25 protocols have P2P communication modes that can be spyware enabled. Consequently, a P2P network should not be deployed unless effective compensating and mitigating security controls are implemented.</p>
<p>As operational baseline countermeasures to P2P risks, management should document and monitor P2P file-sharing technology to ensure that this capability is not utilized for unauthorized information distribution, display, processing, or reproduction. Furthermore, management should ensure the appropriate encryption is implemented to sustain an adequate telecommunications defense. Lastly, meticulous proactive <a href="http://www.theiia.org/bookstore/product/it-auditing-information-assets-protection-iap-1276.cfm">security risk assessments</a> of P2P networks can prevent inherent IT vulnerabilities from becoming threats requiring incident response resolution.</p>
<!-- wpms-network-global-inserts -->]]></content:encoded>
			<wfw:commentRss>http://itknowledgeexchange.techtarget.com/it-governance/peer-to-peer-networking-part-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Peer-to-Peer Networking &#8211; Part 1</title>
		<link>http://itknowledgeexchange.techtarget.com/it-governance/peer-to-peer-networking-part-1/</link>
		<comments>http://itknowledgeexchange.techtarget.com/it-governance/peer-to-peer-networking-part-1/#comments</comments>
		<pubDate>Thu, 26 Feb 2009 18:49:52 +0000</pubDate>
		<dc:creator>Robert Davis</dc:creator>
				<category><![CDATA[Applications]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Network Access Protection]]></category>
		<category><![CDATA[P2P]]></category>
		<category><![CDATA[Password-Protected Share]]></category>
		<category><![CDATA[Peer-to-Peer]]></category>
		<category><![CDATA[Performance]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Security Risks]]></category>
		<category><![CDATA[Share-level Security]]></category>

		<guid isPermaLink="false">http://itknowledgeexchange.techtarget.com/it-governance/?p=81</guid>
		<description><![CDATA[Flawed implementations, poor legacy security standards, limited user awareness, as well as lax technical security and administrative practices can form especially lethal combinations that may decimate a positive assertion regarding P2P network access protection. ]]></description>
				<content:encoded><![CDATA[<p>There are a variety of networking architectures available for deployment. Potential candidates include Peer-to-Peer, Client/Server and Master/Slave. However, Peer-to-Peer (P2P) architectures present unique governance issues to the <a href="http://www.pleier.com/itassureiapweb.htm">information security manager</a> when comparable network configurations are considered. Flawed implementations, poor legacy security standards, limited user awareness, as well as lax technical security and administrative practices can form especially lethal combinations that may decimate a positive assertion regarding P2P network access protection.</p>
<p>Focusing solely on access vulnerabilities, as most information security professionals are acutely aware, P2P is normally restricted to share-level security (also known as Password-Protected Share). Archetypical share-level assigned password security provisions two mutually exclusive access attributes (read-only and full) to a file, printer or other network object. Share-level security also normally lacks centralized access control capabilities. Specifically, a user &#8216;access matrix&#8217; is usually absent from P2P architectures for granular authentication or authorization arbitration. Therefore, increased security risks are inherent with P2P deployment compared to other adoptable network configurations. </p>
<!-- wpms-network-global-inserts -->]]></content:encoded>
			<wfw:commentRss>http://itknowledgeexchange.techtarget.com/it-governance/peer-to-peer-networking-part-1/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
