Home > Security Tips > Network Security Tactics > Beware of hotel hacking
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

NETWORK SECURITY TACTICS

Beware of hotel hacking


Anne Saita, Staff Writer
03.19.2004
Rating: -3.60- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


When traveling with a laptop, it can be difficult to determine if a hotel network provider's level of security matches your enterprise's requirements. And that matters whether you're working out of a lobby, guest room or on a convention floor.

Salt Lake City-based STSN, which provides network security to some 900 hotels nationwide and handles a half-million guest room connections a month, plans to offer freeware to help business travelers gauge a hotel-based Internet service's security.

The simple application runs from any laptop and, once plugged into a hotel port, scans a network for vulnerabilities. It recommends whether the user should continue, be cautious or reconsider using the service.

Though a corporate VPN provides plenty of security, STSN CTO Brett Molen cautions that many machines' OSes are still vulnerable. "When someone gives you a public IP address in a hotel room, at that point you are completely open. There may not be firewall protection and, in Microsoft's OSes, file-sharing is on by default -- and that provides opportunities for attackers, too."

Molen recommends the following for business travelers:

  • Find out a hotel's ISP and what security is included with the service.
  • Turn off file sharing.
  • Run a personal firewall.
  • Test your VPN against the hotel's network for compatibility.

These tips should help keep hackers from accessing your hard drive. "And let's face it, the good stuff is on the hard drive," Molen says.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Network Security Tactics
Exploring Microsoft's Network Access Protection policy options
Screencast: How to use Wikto for Web server assessment
How to avoid DLP implementation pitfalls
Microsoft Baseline Security Analyzer: Do updates offer improved Windows security?
How to patch Kaminsky's DNS vulnerability
Directory services and beyond: The future of LDAP
Screencast: Catching network traffic with Wireshark
Enterprise role management: Trends and best practices
Using Nessus Attack Scripting Language (NASL) to find application vulnerabilities
Screencast: Recovering lost data with WinHex

Network Intrusion Prevention (IPS)
NitroSecurity covers its bases with RippleTech deal
Network intrusion prevention systems: Should enterprises deploy now?
If one server in a DMZ network gets attacked from outside, will the other servers be corrupted?
What security risks do enterprise honeypots pose?
What are the benefits of 'in-the-cloud' network security services?
What is a 'top-down' IPS sensor search?
Is a 'self-defending network' possible?
Best practices for purchasing an intrusion detection device
VeriSign, AirMagnet team up for wireless IPS
Sourcefire, Nmap deal to open vulnerability scanning
Network Intrusion Prevention (IPS) Research

Wireless Protocols and Standards
PCI groups to focus on wireless, pre-authorization changes
PCI DSS 1.2 clarifies wireless, antivirus use
Bluetooth 2.1 is easy to crack
Are wireless networks inherently insecure?
What are the dangers of using radio frequency identification (RFID) tags?
Lessons learned from TJX: Best practices for enterprise wireless encryption
Should the enterprise be concerned with the Apple iPhone's automatic connection to Wi-Fi networks?
TJX should have had stronger Wi-Fi encryption, say Canadian officials
Wi-Fi simplicity edging out Wi-Fi security
Do WEP weaknesses call for an upgrade to WPA2 encryption?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Diffie-Hellman key exchange  (SearchSecurity.com)
intrusion prevention  (SearchSecurity.com)
network behavior analysis  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
More Security Resources for Resellers, VARs and OEMs
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts