WISCONSIN COMPUTER STOLEN FROM BUSINESS OFFFICELake Country Reporter: "Laptop stolen from desktop
A Dell Latitude laptop computer valued at $2,200 was reported stolen at 1:30 p.m. March 4 from an office at APW, N22 W23685 Ridgeview Parkway West.

Dennis B. Biederman, 56, stated he left his office for lunch at 12:05 p.m. and when he returned at 1:05 p.m., the laptop and power cord had been taken from the top of the desk, the police report said."

CALIFORNIA COMPUTERS STOLEN Morgan Hill Times: "Community Lending reported that over the weekend, someone stole several laptop computers, docking stations and damaged a computer monitor. The report was taken on Jan. 12 at 8:36 a.m."

INFOSECURITY EUROPE DISCUSSION PAPER ON COMPLYING WITH REGULATORY AND BUSINESS SECURITY NEEDS Security ParkFriday, March 12, 2004

INFOSECURITY EUROPE DISCUSSION PAPER ON COMPLYING WITH REGULATORY AND BUSINESS SECURITY NEEDS Security ParkFor most businesses, government agencies, institutions and other organisations, security can at times seem like an overwhelmingly complex challenge. Threats to your data, both real and perceived, loom from all reaches – both external and internal to the organisation. Hacker attacks, disgruntled or dishonest employees, and competitive snooping are just some of the concerns with respect to protecting proprietary information.

Regulatory drivers are mounting, as well as an ever-growing list of legislation and new acronyms to contend with. In Europe, the EU and individual countries have their own regulations governing the privacy of information including, as examples, the European Community Directives on human rights, electronic commerce, data protection, and privacy and electronic communications and the UK’s Data Protection Act. In the US, HIPAA, GLBA, and “SOX” are just a few to contend with. On a worldwide basis, the Basel II Capital Accord is front of mind for all internationally active banks.

Faced with a long and growing list of international regulations affecting IT security, compliance is viewed as one of the top concerns for many executives. Some of these laws hold organisations accountable for protecting the confidentiality of consumer or patient information. Others require companies to provide detailed and reliable documentation on financial decisions, transactions and risk assessments. And new laws are being passed all the time.

see full article......

NIGERIA ADOPTS CYBER CRIME ACT ObasanHEAVIER punishments now await internetrelated offenders as President Olusegun Obasanjo on Wednesday endorsed the draft of the Nigerian Cyber-crime Act recommended by the Committee on Cyber-crime.

Obasanjo, while receiving the report of the committee set up last November, also inaugurated the Nigerian Cyber-crime Working Group (NCWG).

The NCWG, he said, would “address Cyber-crime and Cyber-security matters in the country for the meantime, until the National Assembly passes the Nigerian Cyber-crime Act, which shall establish the Nigerian Cyber-crime Agency to handle these matters on a permanent and institutional basis.”

He stated that the working group, headed by the National Security Adviser (NSA), General Aliyu Mohammed Gusau (retd), has an enormous task with its assignment, but said the work must be done to get the country out of “this phase of cyber-embarrassment”.

“We must move with speed to the phase where ICT would be utilised safely, widely and securely for government, business and personal purposes, as is done in other countries, with tremendous social and economic benefits,” the President said.

Submitting the committee’s report, the NSA had explained that the proposed act would tackle all cyber-crimes and related cyber-security matters.

According to him, “the draft Cyber-crime Act, in the main, criminalises three kinds of conduct when carried out with the use of computers, electronic and/or ancilliary devices, and provides different levels of punishment accordingly.”

Gusau identified the offensive conducts as including those against information and communication technology (ICT) systems, those utilising the ICT system for lawful purpose and those committed against or targeting critical ICT infrastructure.

He expatiated that offences such as unauthorised access to computer systems, access exceeding authorisation, computer system interference, data interception, denial of service, computer trespass and e-mail bombing, among others, fall into the first category.

Offences for the second category, include computer contamination, illegal communication, computer vandalism, cyber-squatting, cyber-terrorism, cyber-pornography, intellectual property theft, using computer to corrupt minor, solicit and compel prostitution, sending obscene materials to minors over the internet, indecent exposure, among others.

The third category include offences targeting the nation’s telecommunications infrastructure, ICT systems for the oil and gas industry, ICT infrastructure for energy and power and ICT systems used for air traffic controls and civil aviation.

The NSA hinted on the penalties awaiting offenders, claiming that the first category offences, considered as “mere infractions’ would attract minimal penalties while “the second leg of offences are more serious and the extent of penalty, as in the draft bill, increases accordingly.

“The most serious offences are those targeting our critical ICT infrastructures with macro economic and national security iThursday, March 11, 2004mplications, which is why we recommended heavier punishment for these offences in the draft law,” he added.

MONTANA NETWORK SECURITY CONFERENCE AT MONTANA STATE UNIVERSITY OUTLINES COMPUTER SECURITY ISSUESSecurity expert says all computer users must guard cyberspace - billingsgazette.comSecurity expert says all computer users must guard cyberspace
By MARY PICKETT
Of The Gazette Staff

Howard Schmidt doesn't use the words "cyber-terrorists."

That term implies a well-organized group of foreign terrorists working to damage computer systems in the United States, Schmidt said.

In reality, disruptions to Internet and computer networks can come from many places, both foreign and domestic.


Schmidt, who is in charge of information security for the online auction company eBay, was in Billings Thursday to speak to a conference on computer network security at the Montana State University-Billings College of Technology.

The conference, which drew 165 computer technicians and business people from all over Montana and Wyoming, continues today

The conference, which drew 165 computer technicians and business people from all over Montana and Wyoming, continues today.

Schmidt is a former cyber security adviser to the White House, chief security officer for Microsoft Corp., FBI employee and police officer in Chandler, Ariz.

College of Technology Dean John Cech called Schmidt "one of the giants of cyber-security" and a pioneer in computer forensics, the art of tracking an unwanted intrusion into a computer system back to a single computer or person.

Computers have become part of everything we do, especially over the last decade since the proliferation of the Internet, Schmidt said.

Everything from electrical lights in our homes to water flowing from faucets are controlled in some way by computers.

Although many Americans worry about foreign terrorist threats to computer systems, attacks can come from anywhere.

In 2001, a disgruntled employee of an Australian water facility released sewage into a river in that country after successfully hacking into the facility's computer system on his 45th try.

Companies making computer hardware and software didn't use to consider security as a priority, because they were busy meeting consumers' demand for easier-to-use machines, Schmidt said.

That has changed, and now those companies are turning out more secure products.

So far, progress is being made on keeping the Internet relatively safe from large-scale attacks. Considering that more than 800 million people use the Internet every day, disruptions affect a relatively few number of users, Schmidt said.

Although it would be impossible to correct every problem spot in computer systems in the country, some things can be done keep networks secure.

Because the complexity of computer systems makes them vulnerable to security breaches, security measures to protect them have to made easier to use.

Employees and other computer users also must be taught to follow proper procedures to keep the network safe, such as not bringing laptops from home to plug into the system or writing passwords on sticky notes and posting them in public places.

Asked about the security of eBay and other online businesses many Americans use, Schmidt said that the Internet is safer than it ever has been.

Most identity theft still occurs in the physical world and not over the Internet.

Computer users need to use common sense to protect themselves and business transactions.

Use only well-known, reputable shopping sites, for example. Check with the Better Business Bureau and the Federal Trade Commission, which list fraudulent sites.

Beware of e-mail asking for confidential information even if they appear to come from legitimate companies or agencies.

Home computer users have an important role to play in keeping the Internet safe from attack, Schmidt said.

A computer without a firewall hooked to the Internet by a broadband connection can be used by intruders to launch attacks on other computers. That can be particularly damaging if that home computer is linked to a person's business or a university computer system.

"We all have to do our part to secure our piece of cyper-space," Schmidt said.

To learn more about how to protect home computers, go to these websites:


For information about computer security go to: www.ftc.gov/infosecurity.


For consumer tips, go to: www.staysafeonline.info.


For links to personal firewalls, go to: www.personalfirewallday.org.

PENNSYLVANIA LAPTOP COMPUTERS STOLEN FROM SCHOOL The Mercury: "NORRISTOWN -- A Worcester mother who admitted conspiring with her son and another man to steal 35 laptop computers from a Hatfield Township "

A criminal complaint indicates the computers were stolen while the school was undergoing renovations and Michael Lohin II was working on the project. The burglary occurred between Aug. 13 or 14, 2002, police said.

Prosecutors said that Bonnie Lohin drove her son and Comita to the school in a friend’s pickup truck and that Michael Lohin entered the school to steal the computers, valued at $56,150, while Comita acted as a lookout. Mother and son then loaded the computers in the pickup truck, police said in the criminal complaint.

Twenty-two of the computers were later found in the basement of Bonnie Lohin’s home, according to the criminal complaint.

The Lohins were implicated in the theft in September 2002 in an anonymous letter sent to North Penn School District officials, who then alerted police.

Court documents indicate Michael Lohin II initially took the fall for the theft but later revealed that his mother was involved. Michael Lohin II told police that several days after the computers had been delivered to the school, he got into an argument with his mother about money he owed her for a car. During the argument, mother and son allegedly discussed the idea of breaking into the school "for the purpose of stealing the computers, which would be sold and he would pay back his mother," according to the criminal complaint filed by Hatfield Township Detective Keith M. Bell.

ILLINOIS COMPUTERS STOLEN FROM BUILDINGNews - Elk Grove Times: "Three computers valued at $10,500 were stolen from offices in a building in the 700 block of Touhy Avenue between 5 p.m. Feb. 27 and 8 a.m. March 1. "

CALIFORNIA COMPUTER STOLEN FROM SCHOOLMercury News | 03/11/2004 | Police Blotter: "GRAND THEFT Someone removed a computer at Belle Haven Elementary School, 415 Ivy Drive. The theft was reported about 1:30 p.m. March 3."

MIAMI LAPTOPS STOLEN The Miami Herald | 03/07/2004 | Hollywood man charged with attempted burglary: "Missing laptops: Four Dell laptop computers valued at $10,993 were stolen from the Broward County South Regional Family Success Center, 4733 SW 18th St., between Oct. 7 and noon Feb. 20."

ONTARIO UNIVERSITY OF WESTERN ONTARIO UPDATES COMPUTER SECURITY ALERTTop stories at The University of Western OntarioCampus Computer Security Mar 10th, 2004


Information Technology Services and the Campus Community Police Service have issued the following computer security alert:

Theft of computer equipment is a serious problem that can be reduced, even eliminated, when everyone works together. In addition to the capital loss of equipment, and the related down time until it is replaced, the loss of sensitive and confidential information will have long-term consequences.
· Thieves look for opportunity. Physically locking down your equipment to a fixed object in your office or room makes it difficult to steal. Purchase equipment that can be physically secured, or have the capability to be secured. Portable equipment should have a “Kensington” lock receptacle. UWO equipment can have physical security features installed. For more information see the ITS Home Page, your local system administrator, or call the Help Desk at 661-3800

· Thefts of opportunity happen in less than 30 seconds. Never leave your room or office without locking the door, regardless if you expect to be gone for only a moment.

· Empty cartons and old equipment left in the hallway or on the loading dock advertise new equipment on site. Do not leave packaging or equipment out where it is visible. Discard all waste packaging by breaking it down and taking it to a recycling area. Where there may be a large volume of waste, call Physical Plant (661-3304) to remove it.

· Equipment that can be traced is not attractive to thieves. All equipment should be permanently marked with an identification number that can be traced by police. If the equipment is UWO property, it should be marked with Operation Provident Number OP5067011. Private property should be marked with a unique number that can be traced to the owner, for example, a driver’s license number. There are many methods of marking property. Contact Campus Police (661-3300) for further information.

· If a theft of equipment does occur, police will need detailed information on make, model, and serial number (and any other distinctive markings). This information is put on a central database in Ottawa which all police services in North America have access to. Store this information in a safe and secure location separate from the equipment.

· Many laptops and handheld devices (PDAs) are stolen from vehicles. If you must leave equipment in an unattended vehicle, lock it out of view in the trunk before you reach your destination.

· The University does not cover losses of private property. Check your personal insurance coverage to see if your dorm or vehicle is insured.

· The data on your computer is more valuable than the hardware itself. Personal and confidential information, research, and expensive software are now in the hands of the thieves. Prevent others from accessing the information by password protecting your computer or PDA. There are a number of options available. See the ITS Security Page or call the ITS Help Desk (661-3800) for more information.

· So that you can resume your work as soon as possible, make sure that you back up your important data regularly. Test your backups to make sure they can be recovered and store them in a different secure location, not with your computer.

If you notice any suspicious activity anywhere on campus, contact the Campus Community Police Service at 661-3300.

For more information, call the ITS Help Desk (661-3800) or go to:

www.uwo.ca/its

UNITED STATES SECURITY INDUSTRY IN A PERIOD OF REFLECTION The rethinking of computer security | Perspectives | CNET News.com
The security industry is in the midst of a transition, one that promises to profoundly change the way businesses think about the subject.

This security transition is happening as enterprise companies increasingly demonstrate that they finally understand the need for security. At first blush, this may seem painfully obvious, but the history of the last few years suggests otherwise. Nonetheless, changes are afoot

For years, the security industry has been somewhat of a geeky oddball in the league of technology nations, but the world is changing and security companies need to change their attitudes accordingly. It's no longer just about blocking malicious code better than the other guy. The dialogue has to focus on enabling critical business processes and protecting assets. I'd hate to be the last nerd standing in a competitive battle with Computer Associates, Microsoft, Network Associates or Symantec.




biography
Jon Oltsik is a senior analyst at the Enterprise Strategy Group.

MALAYSIA COMPUTERS STOLEN FROM SCHOOL Indian-Muslims grateful for funds to build mosque: "Malaysia Nanban also reported that 18 computers were stolen from an election operations room in Kuala Selangor on Sunday night"

AUSTRALIA COMPUTERS STOLEN FROM SCHOOLmargaretriver.yourguide: "• Five computers were stolen from Margaret River Primary School recently in two separate break-ins."

FLORIDA COMPUTER THIEVES CAUGHTNaples Daily News: NewsA fingerprint match on some stolen computer equipment added to Friedhofer's charges when he was arrested on Monday.

Friedhofer also is charged in connection with a break-in at Clark's Nursery, 1370 St. Clair Shores, East Naples, on Jan 4.

Deputies say he pried a door at Clark's Nursery and stole computer equipment valued at $1,400.

On Jan. 5, Bill Clark, the nursery owner, was contacted by Friedhofer, who said he wanted to collect the $1,000 reward he had heard about for the return of the computer equipment. Deputies say Clark gave Friedhofer, who gave him his name, both $250 cash and a check for $750.

Friedhofer had sold the computer to someone else and so had to pay for it to get it back and claim the reward.

Friedhofer was charged with dealing in stolen property in connection with that incident on Jan. 16.

After he was released on bond, authorities found a fingerprint match on the bottom of a computer speaker he'd left behind at the scene of the nursery burglary, deputies say. That evidence tied him to the break-in.

CALIFORNIA COMPUTERS CONTAINING TAX INFORMATION STOLEN FROM H&R BLOCK FOX40 KTXL | H&R Block Notify Customers Of Stolen ComputerMarch 9, 2004

News tonight for some Sacramento residents, their tax return and other private information may be in the hands of a criminal. H&R Block sent a letter warning its customer that someone stole computer equipment containing tax records from 1998 through last year for clients of a Sacramento H&R Block office. The letter says quote " we apologize that this incident occurred despite our ongoing efforts to secure our offices, equipment and systems against such thefts. If identity theft is the criminal's intention, your interests will be protected best if you act quickly." Some customers are frustrated over the company's timeliness, an H&R Block employee told Fox 40 the theft happened in January, yet the letter to clients is dated almost three weeks later.

One customer didn't even receive it until yesterday. If you have questions, call your local h&r block office.

LAS VEGAS ISC EXPO MARRCH 31-April 3 2004 ISC EXPO/West is North America's premier security eventIt's a rapidly evolving world ­and security is THE priority. To position your company for success, you need to be informed. Seek out the latest technology, identify cutting-edge trends, and take home insights you can apply now.

Mark your calendar for the International Security Conference West

UNITED STATES HOMELAND SECURITY INVESTMENT CONFERENCEMediaInvestment and Media Communities

Homeland Security and Defense Budgets are growing more than in any other government procurement sector. Plus, purchases of equipment and R&D will increase for many years into the future. Customers are the newly formed Department of Homeland Security, and the Departments of State, Justice and Health and Human Services. (See Budgets)
On March 30th, you will learn how these expenditures impact our presenting companies' bottom line. Protecting America's citizens and critical infrastructure requires technology built by our sponsoring companies in the following sectors:

Detectors (Chemical, Biological, Radiological, Nuclear)
Decontamination
Personal Protection
Communications
Information Technology (Cyber infrastructure)
Systems Integration
Additionally, our speakers bring additional value to the discussion as they introduce each presenting group.

Morning Keynote Speaker: Roger W. Cressey, President of Good Harbor Consulting, LLC, advising clients on homeland security, cybersecurity and counterterrorism issues. Previously, Mr. Cressey served as Chief of Staff to the President's Critical Infrastructure Protection Board at the White House from November 2001 to September 2002. From November 1999 to November 2001, Mr. Cressey served as Director for Transnational Threats on the National Security Council staff, where he was responsible for coordination and implementation of US counter-terrorism policy. During this period, he managed the U.S. Government's response to the Millennium terror alert, the USS COLE attack and the September 11th attacks. Recently, Mr. Cressey has been appointed terrorist analyst to NBC news.
Jack Mallon, Senior Managing Director, Mallon Associates, a division of C.E. Unterberg, Towbin (CEUT) has more than 25 years of financial, legal and operational experience in the security industry. He was the founder and managing director of Mallon Associates, which last year joined with CEUT, a full service investment bank focusing on emerging growth companies. The firm initiates, structures and advises on mergers & acquisitions, raises capital and performs strategic consulting services. It also publishes Mallon’s Security Report, a monthly financial newsletter providing information on investment opportunities, news and commentary on important transactions, events and executives in the security industry.
Afternoon Speaker: Dan Inbar, Chairman and CTO, Homeland Security Research Corporation (HSRC), 30 years of world-renowned experience in dozens of security, technology, research & development, marketing, market research and corporate management. Prior to joining HSRC, Mr. Inbar served as CTO, V.P. R&D, V. P. Marketing, Director and Chairman of several corporations, including Elscint Inc. and Elscint ltd. His expertise is in nuclear detection systems, chemical agent detection, and computerized tomography to name a few. Mr. Inbar received several prestigious awards for his achievements in computerized tomography, nuclear medicine and marketing.

PENNSYLVANIA LAPTOP STOLEN AT BANQUETO-R Online | Police beat: "Computer stolen: A Boy Scout leader reported to Peters Township police Sunday night that a Dell Latitude laptop computer, worth about $3,200, was stolen from a table at the Peters Township High School gymnasium during an awards banquet"

SOUTH AFRICA 18 COMPUTERS STOLEN FROM SCHOOLiafrica.com | news | sa news Eighteen computers stolen from schoolLIMPOPO
Eighteen computers stolen from school
Posted Tue, 09 Mar 2004

Limpopo police appealed to the public on Tuesday to be cautious when buying second hand computers following the theft of 18 computers from a school.

Police spokesperson Captain Ailwei Mushavhanamadi said the thieves disabled an electric fence and appeared to have used a crowbar to gain entry to the Kudama Secondary School in Muduluni, near Makhado between Monday afternoon and Tuesday morning.

A video machine, a television set and two music systems were also stolen.

"We suspect that whoever stole these computers will try to sell them and appeal to the public to be cautious about buying a second hand computer," Mushavhanamadi said.

Anyone with information is asked to contact Captain Mbalanganye on 082-565-8432.

UNITED STATES HIPPA COMPLIANCE DOCUMENTATION SecurityFocus HOME Infocus: HIPAA Security Rule
1. Introduction
Thousands of US organizations must comply with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. The Security Rule is a key part of HIPAA -- federal legislation that was passed into law in August 1996. The overall purpose of the act is to enable better access to health insurance, reduce fraud and abuse, and lower the overall cost of health care in the United States.
If your organization is a Covered Entity (one that must comply with HIPAA), it is imperative that you understand the rule and take the necessary steps toward compliance. This article presents a detailed overview of the Security Rule and key factors you should consider when preparing to comply with the rule.

1.1 The basics
What The rule applies to electronic protected health information (EPHI), which is individually identifiable health information (IIHI) in electronic form. IIHI relates to 1) an individual's past, present, or future physical or mental health or condition, 2) an individual's provision of health care, or 3) past, present, or future payment for provision of health care to an individual. The primary objective of the Security Rule is to protect the confidentiality, integrity, and availability of EPHI when it is stored, maintained, or transmitted.
Who Covered Entities (CEs) must comply with the Security Rule. These are health plans (HMOs, group health plans, etc.), health care clearinghouses (billing and repricing companies, etc.), or health care providers (doctors, dentists, hospitals, etc.) who transmit any EPHI.
How CEs must maintain reasonable and appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of their EPHI against any reasonably anticipated risks.
When The final Security Rule became effective as of April 21, 2003. Most CEs must be in compliance by April 21, 2005; small health plans (those with annual receipts of $5 million or less) have until April 21, 2006.

1.2 Penalties

CGUD $0.30 DonPennies.com overview of COM-GUARDDonPenny.com "The Voice of Reason on the OTC BB"Business Summary (back to top)


The primary mission and focus of Com-Guard, Inc. is to develop products for the microcomputer industry that provide cost effective and enhanced system security for both individual users and network administrators.
The Company's patented product, Com-Guard Pro™, includes unique software and hardware that will enable users to manage Web access and use; protect and limit access to data; and to provide a security system against tampering, unauthorized use, or theft of computers. The focus of our company and its products is the detection, prevention, and notification of any attacks on the Com-Guard™ equipped computer and/or monitored site.

Com-Guard, Inc. incorporated on October 7, 1998. For the first 2 years of its existence the company spent its time in development. Beginning in Spring of 2001 the company began marketing and sales activities and is continuing to develop its market channels both in the United States and Internationally.

The principal business of Com-Guard, Inc. is the exploitation of niche products for the microcomputer industry that provide enhanced system security for both individual users and network administrators. The Company's patented product, Com-Guard Pro™, includes Web-Guard, an Internet access management tool; the unique Com-Guard™ software that enables users to monitor, limit and record access to data; and the Sensor-Card hardware that provides a security system against tampering and unauthorized use of computers. This group of products provides users of personal computers with (1) Internet security, (2) file security (including e-mail), and (3) internal facility security.

The Company has a patent in the United States, which covers the implementation of Com-Guard hardware. Copyright applications will be filed on all software as it is developed and enhanced

WASHINGTON UNIVERSITY OF WASHINGTON LAPTOP THEFT ISSUEThe UW Daily OnlineBy Kayla Webley
2004-03-08


In 2003 there were 74 reported burglaries and 812 reported thefts, including 54 motor-vehicle thefts, on the UW campus, according to UW Police Department (UWPD) records.

Thefts are up 25 percent from 647 in 2002, but the number of burglaries fell dramatically, almost half of the 134 in 2002.

According to UWPD Assistant Chief Ray Wittmier, even with these statistics, theft is not a large problem on campus.

"The numbers are not huge," he said. "Out of all the thousands of people that come to campus, and then you figure in major events like football that add to the statistical totals too, around two thefts a day on average really is not a huge number."

According to Wittmier, there is a wide range of reported thefts.

"Thefts can be anywhere from a textbook to even smaller stuff; people can have a roll of stamps stolen," he said. "It is not a jewelry heist or a bank robbery on campus or anything like that."

According to Wittmier, laptop computers are the most common targets of theft.

"Probably our biggest theft, as far as value and a consistent problem, would be laptop computers," he said. "That is something that usually, if taken, is personal property of a student or a staff member. It is a big hit for an individual to lose a laptop computer; it is not some small thing."

One measure some departments have taken to combat theft is security cameras.

"There's not a lot of security cameras on campus," he said. "The number has been slowly growing."

The increase in security cameras may be increasing due to changes in public opinion of the issue.

"Years ago it wasn't really accepted very well as far as having cameras on campus. However, now it seems that people are much more open to having security cameras around, whether it be administration or the people that come here to go to school," Wittmier said.

According to Wittmier, some areas on campus that have implemented cameras are Henderson Hall, the UW Medical Center, and Housing and Food Services stores such as Stevens Pantry, The Back Door and Ian's Domain.

The cameras have proven to be effective in these areas.

"[Cameras] have been very instrumental in cases where somebody has used somebody else's Husky Card to charge up things. We have been able to see who the person was that did it, and we have been able to get the convictions on those," said Wittmier. "Also, one camera at Henderson Hall keys in on the outside area where the bike racks are, and we have had a number of times where we have had video of bike thefts there. We have been able to identify the person responsible, so it was helpful there."

Even with proven effectiveness, there are still several challenges facing the installment of additional security cameras around campus.

"One of the concerns with security -ype cameras, especially since there is talk about having them in garages, is that there is a false sense of security people sometimes get when they see a camera mounted," said Wittmier. "They think that there is always someone monitoring it, and that there probably would not be the staffing to monitor something like that, taking into consideration how many places you would need to put them if you were going to do all the parking lots or something like that."

In addition to establishing false security, according to Wittmier, cameras can also be problematic when it comes to funding and can be an invasion of privacy.

"It's a challenge between the costs of putting them throughout campus, and also there is still some concerns that come up as far as 'Big Brother watching you' type of thing," he said. "Then there is also the ongoing cost of the maintenance on the cameras as well as the monitoring. The University really doesn't want to put something in that isn't going to be monitored in some way; they don't like to do that."

AUSTRALIA ARTICLE ON LAPTOP THEFT AND COMPUTER SECURITY IN GENERALAustralian IT - Laptop lockdown (Selina Mitchell, MARCH 09, 2004)Laptop lockdown
Selina Mitchell
MARCH 09, 2004

SOMEWHERE across the country right now, someone's laptop is probably being stolen. Depending on the nature of the data stored on it and how well it is protected, the theft could lead to the downfall of a company or even a government.

At the very least it will mean lost work time and potentially high data recovery and laptop replacement costs, as very few laptops are recovered.

It is impossible to fully protect every laptop-toting individual from thieves, but it is possible to reduce the probability of theft happening to companies and staff, experts say. It is also possible to minimise the damage by being prepared for the worst.

It is difficult to know just how many laptops are stolen in Australia each year, as not all thefts are reported because of fears of bad press and theft figures are not collated nationally.

According to figures from the Australian Computer Emergency Response Team's 2003 Australian Computer Crime and Security Survey, laptop theft is one of the largest sources of computer crime losses.

More than half the companies (53 per cent) surveyed by AusCERT reported at least one laptop theft in the previous 12 months, and 64 per cent said the theft had caused financial loss.

Stolen laptops created an average loss for each affected organisation of $27,500, and the mobile theft crime category, at $2.3 million, was the second highest total annual loss, behind financial fraud on $3.5 million.

Organisations took longer to recover from a laptop theft than from any other type of computer crime, with six of the affected companies saying it took more than a month to recover and another six saying they may never fully recover.

The 2004 computer crime survey will be released at the end of May. Analysts expect the figures will continue to grow, as laptop sales continue to rise nationwide.

Thefts are a problem in both public and private sectors.

A federal parliamentary committee investigating computer security is surveying all government departments on thefts in recent years.

Not all agencies have responded to information requests, but so far the committee has found 851 laptops were stolen from government agencies in the past three years. That figure does not include the Department of Defence, which reported 530 items had been stolen, including laptops.

So far the biggest loser from laptop theft is the Australian Tax Office, with 147 laptops stolen, closely followed by the Department of Industry, Tourism and Resources, with 138.

"Evidence to the inquiry showed there was no mandatory reporting of theft across the government, and record keeping in agencies and departments varied greatly," Labor IT spokeswoman Senator Kate Lundy says.

Asset management is another important area that is lacking, Lundy says.

"In fact, no-one would know about laptop theft at all unless parliamentary committees asked the right questions," she says.

"Being accountable is the first step. This requires incentives to develop policies and procedures to minimise theft and loss."

According to analyst Meta Group a 10-15 per cent annual loss of laptops in private firms is mirrored in the public sector.

"Typical global 2000 companies might lose $US1 million ($1.3 million) to $US3 million in hardware replacement costs per year due to laptop theft," analyst Jack Gold says.

"When you count the loss of business data — which, in most cases, is never backed up to a server in the office — the loss may be $US20 million or more, depending on what users keep on their laptops."

If confidential information is stolen and lands with a competitor, the loss to the organisation can be "catastrophic", the Meta Group report says.

AusCERT senior analyst Jamie Gillespie says not enough organisations protect their laptops and data to the best of their ability.

"Some are ignorant, some do not view data or the laptops that store it as an asset, and some view the cost of security measures as too high," Gillespie says.

IBM Australia Thinkpad manager Greg Hunt says the potential for theft is a consideration for all who purchase notebooks, but that it is not a deterrent to purchase. "Many of our major customers are standardising on mobiles, irrespective of whether staff are mobile or office-based," he says.

IBM's hardware- and software-based Embedded Security Subsystem is available on the whole ThinkPad range, but it must be activated by the user.

"Even if a ThinkPad is stolen or lost, the encrypted data cannot be cracked by an unauthorised user," Hunt says.

The subsystem consists of an integrated security chip and downloadable IBM Client Security Software. It protects company information, including vital security information such as passwords, encryption keys and electronic credentials, while guarding against unauthorised user access, he says.

Effective security requires a multilayered approach, Hunt says. Companies must use up-to-date protection for the core aspects of their networks and should build in security guards on laptops.

There are different motives for stealing laptops, and they require different security strategies and priorities, Symantec Asia-Pacific systems engineer director Tim Hartman says. Some thieves are interested in the hardware and others are interested in the data.

Stealing a laptop can be as easy as waiting until its owner looks the other way, and stealing data as simple as shoulder surfing, he says.

"There is no way to ensure 100 per cent safety of equipment. It doesn't matter if it is a desktop or a laptop, if a criminal wants to get your data or hardware, they probably will if they are persistent — and the weakest link is usually the human being."

Hartman speaks from experience. He has had two laptops stolen, one from home via an easily accessible balcony, the other, all snug in its IBM-logoed computer bag, from an airport.

Hartman's first piece of advice is to always be very aware of your surroundings when you have a laptop in tow.

"If it can be seen, it can be stolen," he says.

Never leave a laptop unattended, because if it is not stolen it will be confiscated by security, he says.

It is a good idea to carry the computer in something other than a traditional computer bag, as it is then not so obvious to the average criminal, Hartman says.

"Laptop bags scream 'steal me'," Gillespie agrees.

"It does not have to be an expensive bag. Some bags look like ordinary luggage but have the advantage of personal security alarms," he says.

There is a huge industry in laptop protection, including software that tracks the location of a stolen laptop each time it makes a connection to the internet.

"You can even purchase metal plates that attach to the top of the laptop that, when removed, leave large red markings reading 'stolen laptop'," Gillespie says.

Chains and cables are another common tool for the security-conscious.

Hunt says notebooks should be physically locked down when they are left for long periods, including in car boots, offices and homes.

Cables with locks should be issued to staff with every laptop, he says.

Chains are a good deterrent, Gillespie agrees. "It makes a less easy target and is better than nothing," he says.

Companies should set up their laptops to require specific user identity and password verification before they become usable, and for data to be encrypted and decrypted only by authorised users, Hunt says.

Guidelines should be issued to everyone who uses a company laptop, and these should include rules about always carrying laptops as hand luggage and never leaving them in the back seat or boot of a car, he says.

Staff should be educated about environments that are not secure, such as wireless hotspots at airports and hotels, and crowded public places.

"Wireless connections can be highjacked. For example, in hotels people scan the network to see who else is connected," Hartman says.

"You must see yourself as an island of security. People who need to carry data with them must have good antivirus and firewall software, at least.

"There is a false presumption that you must be physically plugged into a network for someone to be able to steal your data," Gillespie says.

"If you leave your wireless Ethernet adaptor running, it listens for connections up to 150 metres away. A very simple software configuration would prevent any data theft, but it is often not done."

"Once authorised for access, a connection should be established through a virtual private network, thereby establishing complete privacy of the data being exchanged," Hunt says.

Encryption is the only failsafe for secure email and attachments, he says.

When determining the extent of security efforts, it is important to consider the value of the potential target, Hartman says.

"If you have a $2000 laptop with millions of dollars worth of data, you would do everything to protect it — encryption, or storing all of the data at work and using a VPN connection to access it, so the laptop becomes a dumb terminal.

"If, however, you have a sales force with 800 laptops and it doesn't matter if you lose one, the cost of replacing it is minimal compared with the cost of securing all of them with cables, and so on."



--------------------------------------------------------------------------------


Data safety-first on the road

To avoid laptop theft...

Carry laptop in a backpack or other non-computer bag.
Lock down laptops with cables whenever possible.
Never leave laptop unattended or highly visible.
When packed up, keep the laptop attached to you, bag strap under a leg or arm.
At airports, if travelling in a group, send one through to watch and wait for laptops to go through X-ray.
Don't leave laptops in plain sight in hotel rooms.
Define policies and educate staff on safe travel with laptops.To avoid data loss
Encrypt all sensitive data stored on laptops.
Install firewall and antivirus software.
Only allow access through a complex password.
Regularly back up data stored on laptops to reduce possible losses.
Transfer all data regularly to the office server and leave the laptop as a thin client.
Define policies on what data can and cannot be kept on laptops and how that data should be protected by password or encryption, or other measures.

COM-GUARD ANNOUNCES STRATEGIC DEAL WITH WINTERGREEN FOR NEW SECURE PC
Com-Guard, Inc. Executes a Letter Agreement With Wintergreen Systems With the Intention of Completing a Business TransactionCARLSBAD, Calif.--(BUSINESS WIRE)--March 8, 2004--Com-Guard, Inc. (OTCBB: CGUD) a provider of security systems and products for the PC computer industry, today announced it has signed a Letter Agreement and has entered into preliminary discussions concerning a potential business transaction (the "Transaction") between Com-Guard, Inc. ("Com-Guard") and Market Development Specialists, Inc. DBA Wintergreen Systems ("Wintergreen"). This Letter Agreement will allow both parties to exchange confidential information with the intended purpose of completing a Business Transaction. The Transaction may be a stock sale, asset sale, merger, joint venture, or any other affiliation or agreement between Com-Guard and Wintergreen, or the subsidiaries and affiliates of either company.


Com-Guard recently received a purchase order from Wintergreen for 5,000 Com-Guard Pro(TM) hardware and software products to build the "Com-Guard XP2400 SecurePC(TM)." This new computer will be the first product to have pre-installed an anti-theft device and special software to protect the user's hardware and software assets. The "Com-Guard XP2400 SecurePC" will be a new solution to protect the PC from both hardware and data theft.

Wintergreen Systems, headquartered in Elkhart, Indiana manufactures and distributes computer related products. Wintergreen's revenues for the previous fiscal year were approximately $60,000,000 in gross sales evenly split between manufactured and distributed product sales.

Com-Guard has entered into this letter agreement to further cement its strategy for secure computing and provide a delivery vehicle for its patented Com-Guard Pro hardware product and related security software. Also, as previously announced, the Company has secured distribution and technology rights for an "access control product" that can be sold into the security marketplace under the SecurePC(TM) trademark.

"One of the strengths of Com-Guard is to develop, evaluate and acquire new technologies," stated Dr. Edward W. Savarese, "and it is our intent to have Wintergreen manufacture, integrate and sell these technologies into their sales channels."

"Wintergreen is a privately held company and a relationship with Com-Guard will give us access to their unique patented anti-theft hardware and multi-faceted security software," stated Mr. John Levy, President of Wintergreen, "and open new channels into the capital markets to help us increase sales and continue to grow."

"This is an important step in our strategy to further develop our security products for the marketplace," stated Mr. Joseph Sigismonti, President and COO of Com-Guard. "We are looking forward to working with Wintergreen and to make a contribution in the PC Security marketplace and to put together a business structure that will benefit both companies."

CHINA TO ADOPT NEW COMPUTER SECURITY STANDARD ChinaTechNews.com is the Technology Portal for the Latest Chinese Hi-Tech News, Information, and CommentaryComputer Security Standard On Its Way?

March 8, 2004
David Wei, a research director with the Research Academy of Legend Group Ltd, is reported in the China Daily as saying that China will soon draft a national standard for computer security chips and use them on computer mainboards, in another attempt at building the country's own standard system.

Wei's company has been appointed by the government to be responsible for formulating China's personal computer security chip standard, with the first draft expected later this year and the produced chips to be used on computer mainboards, providing higher levels of security than current software information security measures such as anti-virus software and firewalls.

Wei said that Legend, the Chinese computer maker, will manufacture trial chips in the second half 2004. Wei believes that by 2006 as much as 60% of personal computers will run main boards with security chips, with the proportion in China being similar, making for a huge potential market, and one in which Chinese companies should take the opportunity to enhance their competitiveness by formulating industrial standards.

In addition, Wei is quoted as holding that China should also better protect its information security with a domestic standard. China has been working on its own standards to boost the competitiveness of domestic industries and protect national security, both through its development of a Wi-FI standard and introducing the TD-SCDMA standard for third generation mobile communications.

MIAMI COMPUTERS STOLEN FROM BUSINESS SOLUTIONS COMPANYThe Miami Herald | 03/07/2004 | Thief swipes spare keys, rides off in Accord: "Recorded burglary: A surveillance camera showed two men smashing a window and crawling into Delta Business Solutions, 2861 Corporate Way, at 10:26 p.m. Feb. 25. The men used the same rock to smash windows in two offices and steal two laptop computers valued at $4,000. The men were in the business for nine minutes before crawling out."

SAN DIEGO CALIFORNIA STATE IDENTITY THEFT LAW DISCUSSION SignOnSanDiego.com > News > Metro -- ID-theft law puts focus on Net dataCalifornia, which has the third-highest per-capita rate of identity theft in the nation, has not officially tracked the number of cases in which security breaches have occurred. However, Givens said she has heard of about half a dozen cases when notification letters were sent since the law became effective in July.

In some cases, the breach occurred when a laptop computer or other equipment was stolen, rather than as a result of a computer hacker.

"Prior to this law we rarely heard of these situations because notice was not required," Givens said. "For the most part, I think the law is doing a good job."

In the incident involving the state agency, California's Employment Development Department sent letters in mid-February to individuals whose names were in a database stored on a computer server infiltrated by a hacker. The server was used in a pilot program that gave employers of household workers such as nannies, gardeners, cooks and baby sitters the ability to report wage information over the Internet.

Officials have said the hacker used the server to send commercial e-mail messages, known as spam, and there was no evidence that any personal information was accessed. However, officials decided to send the letters anyway.

"We felt it was important to move forth and notify people, and they could choose to take action if they needed to," said Loree Levy, a spokeswoman with the Employment Development Department.

WITCHITA COMPUTERS STOLEN FROM HISTORIC THEATRE Kansas.com: Your guide to news, sports, jobs, homes, carsPosted on Sat, Mar. 06, 2004
Orpheum sign awaits repairs after theft, glitch


The electronic marquee sign above the Orpheum Theatre's entrance has stopped working but should be repaired by Monday, a spokeswoman said.

The marquee normally flashes upcoming events in bright red lights. Last month, burglars broke into the historic theater at 200 N. Broadway and took an estimated $15,000 worth of supplies and equipment, including three computers, one of which controlled the marquee.

When software was reinstalled on a new computer, the sign failed to respond. Computer technicians are scheduled to arrive Monday to work on the problem. Event information can be found at www.wichitaorpheum.com or by calling 263-0884.

WISCONSIN COMPUTERS THEFT REPORTED AT CORPORATION The Reporter - Area homeless man admits G&L theftsA 46-year-old homeless man called police this week to confess to a recent burglary at Giddings & Lewis.

Kendall L. Wilson also told police he and a woman, who was head of security at G&L, were involved in the theft from G&L last year of six computers valued at $14,000, according to police reports.Wilson was charged Thursday with burglary and theft in connection with a Feb. 29 burglary at G&L, where he allegedly took about $100 from a petty cash fund. Fond du Lac County Circuit Court Judge Dale English ordered a signature bond and no contact with G&L or his ex-wife. Wilson’s next court appearance is scheduled for April 2.

The charges carry maximum penalties of more than 13 years in prison and $35,000 in fines.

The 54-year-old woman is expected to be charged today in connection with the theft of the computers, according to court records.

Fond du Lac Police Department Detective Steve Kaufman had been working on the computer burglary at G&L when Wilson called him March 1 to confess to the Feb. 29 burglary, according to the criminal complaint.

Kendall and the woman allegedly broke into G & L last November and stole the computers from a storage room, said Fond du Lac Police Capt. Kevin Lemke. The couple took the computers north to the Crivitz area, where they sold them to acquaintances for $250 each, using the money they received to go gambling.

The acquaintances were told the computers were surplus and were not aware they were stolen, Lemke said.

Wilson said he waited for the guards at G&L to change shifts Feb. 29 and then he jumped a fence, gaining access to one of the buildings. He rummaged through offices, forcing open a desk drawer with a crowbar, according to the criminal complaint.

He said he called police to turn himself in because he felt guilty, according to the complaint.

After he admitted to the burglary, he also admitted to stealing the six computers, according to a police report. The woman, he said, was not involved in the Feb. 29 burglary.

Wilson also is expected to face additional charges in connection with the theft of the computers.

MARYLAND COMPUTERS STOLEN FROM BUSINESS Owings Mills Times: "Liberty Road, 7000 block, Lochern Auto Body, between 6:30 p.m. Feb. 26 and 7:30 a.m. Feb. 27. Two computers were stolen and the inside of the business was sprayed with a fire extinguisher."